Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/VdWQ3t3zBPw6g-ATAiOaj3yI46w.roa
File: VdWQ3t3zBPw6g-ATAiOaj3yI46w.roa (raw, json)
Hash identifier: sARbfSZprFYnYfS18jqgDzsO6u6GK56++a30MWhNwhU=
Subject key identifier: 55:D5:90:DE:DD:F3:04:FC:3A:83:E0:13:02:23:9A:8F:7C:88:E3:AC
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 0182C7ABB6BE90EE27017EAFC35731BC282A
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/VdWQ3t3zBPw6g-ATAiOaj3yI46w.roa
Signing time: Mon 22 Aug 2022 22:28:15 +0000
ROA not before: Mon 22 Aug 2022 22:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44016
IP address blocks: 91.235.168.0/24 maxlen: 24
212.115.104.0/22 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400::/29 maxlen: 48
2a0f:75c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:ab:b6:be:90:ee:27:01:7e:af:c3:57:31:bc:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Aug 22 22:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55d590deddf304fc3a83e01302239a8f7c88e3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:a2:b4:03:9b:71:a9:a9:ff:4c:cf:e6:4f:
6f:d5:64:4c:07:ed:e8:ba:de:8d:1c:9c:62:8d:aa:
2f:03:3e:6c:2b:dc:7c:c2:73:32:90:17:9c:03:99:
0d:e7:66:ed:6d:dd:fe:8f:3f:ed:98:d8:ea:de:de:
b0:3b:ca:63:f3:ee:db:9e:83:9a:68:99:06:e6:54:
ad:26:6e:2d:7d:c0:98:94:ff:d7:71:af:28:45:a0:
77:5c:04:57:4e:b8:af:71:a0:fe:ef:c2:4b:81:00:
be:7e:b4:e5:30:f9:69:4e:f6:3d:b4:4a:f0:22:af:
55:bf:a5:ef:fa:63:94:1f:04:34:00:38:b2:13:88:
1b:b3:3e:91:d2:cf:a1:24:be:9c:1e:41:e5:eb:73:
b9:7c:a3:c0:d6:3e:ea:ef:7d:34:1d:1b:15:27:33:
78:d6:9e:84:17:34:e8:11:cc:35:96:b1:65:2d:57:
a1:bc:25:05:91:38:14:da:8e:ff:4d:56:cd:28:30:
d9:8a:b7:8a:b2:8a:32:b8:c0:33:af:9a:b0:64:35:
39:61:87:ce:6b:00:fe:47:be:d8:3c:f1:35:a6:86:
d7:49:cb:8b:7d:4f:27:d9:88:61:00:53:87:76:bd:
bc:63:8e:f0:6f:8c:57:46:10:da:d8:03:66:51:5a:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:90:DE:DD:F3:04:FC:3A:83:E0:13:02:23:9A:8F:7C:88:E3:AC
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/VdWQ3t3zBPw6g-ATAiOaj3yI46w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
212.115.104.0/22
IPv6:
2a09:8400::/29
2a0f:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:8b:c9:f1:cd:57:24:97:5b:44:00:d8:5c:77:ab:49:68:3f:
b4:1a:b7:e0:55:9d:91:75:d2:9b:79:ca:07:0f:22:86:4e:5d:
d6:95:26:4d:10:04:5f:34:21:73:3f:f0:f5:e3:a2:5f:2e:c1:
78:27:a0:9e:75:20:e2:5e:c2:19:bf:f4:2d:f9:e2:d6:85:75:
0e:99:ab:a6:c0:ed:09:b6:94:85:b0:9d:b7:8b:ce:ff:08:11:
7f:8f:00:10:43:ac:46:f2:1a:80:39:15:3a:1c:3e:5d:a7:7a:
71:c3:ce:7b:a0:d3:0f:74:b8:1e:ee:be:1f:f7:d9:61:d5:3e:
ff:cf:9e:ec:f3:b8:21:2f:d4:b7:52:aa:f5:ce:55:19:45:e4:
39:3f:56:03:93:15:15:38:6b:21:83:e6:55:24:7b:44:cd:6c:
94:f2:2d:46:64:f2:19:77:7d:f9:58:77:d7:4d:18:85:ef:68:
72:81:ea:56:3f:c8:5c:83:2e:78:64:95:a2:16:03:e9:25:48:
4f:ca:bb:8b:5c:4c:02:d0:d5:f9:79:e1:37:3f:8e:0a:cb:5d:
69:69:22:92:76:fe:59:97:1e:e9:c6:e1:5c:01:6a:f3:5e:34:
88:3a:17:60:2d:2c:e6:06:60:f2:48:b8:7d:7b:2a:d5:0a:60:
7d:17:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:09 2024 by rpki-client on console-fra.rpki-client.org