Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/rnEVDmThtVkUjTMdTwL7Dun4_bs.roa
File: rnEVDmThtVkUjTMdTwL7Dun4_bs.roa (raw, json)
Hash identifier: Mkx2xbT+0ggZqvgUF8mkEWlz8kYP0xIH8QC8apl1n4o=
Subject key identifier: AE:71:15:0E:64:E1:B5:59:14:8D:33:1D:4F:02:FB:0E:E9:F8:FD:BB
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 0182546ECE9C2C5F0F9FE6407AA506974AF6
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/rnEVDmThtVkUjTMdTwL7Dun4_bs.roa
Signing time: Sun 31 Jul 2022 13:25:24 +0000
ROA not before: Sun 31 Jul 2022 13:25:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44016
IP address blocks: 91.235.168.0/24 maxlen: 24
212.115.104.0/22 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400::/29 maxlen: 29
2a0f:75c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:6e:ce:9c:2c:5f:0f:9f:e6:40:7a:a5:06:97:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Jul 31 13:25:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae71150e64e1b559148d331d4f02fb0ee9f8fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:74:ac:b4:b7:f4:53:bb:5b:1c:15:e9:77:
6a:7f:c3:ad:b2:f7:36:81:53:03:15:c1:50:de:d4:
68:34:e8:23:d1:f1:d8:1b:9f:91:c8:23:e0:e2:86:
a0:4f:34:5a:ba:7f:9b:56:ef:10:bd:ad:40:29:bb:
81:1f:e1:fd:39:ce:42:19:cd:a6:f0:b5:ec:af:85:
a3:43:1a:42:d6:b2:22:ce:87:31:a4:3a:62:1b:21:
1a:6f:e5:20:7f:1f:3b:d4:eb:87:45:c5:93:06:47:
a6:e5:42:cc:9e:cc:05:6e:85:68:42:c7:08:00:74:
32:18:fe:b5:13:92:25:e7:2b:20:ef:6d:ec:7e:8c:
94:71:22:a2:ea:8d:d6:94:9e:cd:9a:f4:89:6a:4f:
a9:45:c4:97:b9:6c:cd:43:5d:5e:c5:b2:27:ca:e7:
02:b5:9c:bb:42:5d:10:4a:e4:02:98:7f:c6:9f:e8:
a8:e6:96:a5:1e:7f:c6:33:5c:ea:df:fc:0c:26:c3:
fc:23:24:c8:37:24:88:d4:4e:6b:00:ea:49:d0:18:
47:81:5a:6a:2f:83:13:19:8b:c6:ad:7a:dc:8d:b3:
cb:92:e9:1d:fe:ec:16:78:42:51:f6:55:25:05:22:
31:2b:84:0f:bf:92:d2:57:29:b4:7e:f0:c1:ea:d8:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:15:0E:64:E1:B5:59:14:8D:33:1D:4F:02:FB:0E:E9:F8:FD:BB
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/rnEVDmThtVkUjTMdTwL7Dun4_bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
212.115.104.0/22
IPv6:
2a09:8400::/29
2a0f:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:0f:6e:71:9a:11:a4:31:69:c9:ac:9e:7e:8a:43:36:57:8b:
c8:23:c1:79:17:29:81:db:5a:aa:cd:f6:d2:cd:16:35:ff:05:
68:a0:38:dc:99:39:11:a3:3b:3b:1c:4f:05:e2:29:cb:a0:b0:
78:96:41:f1:69:e7:d4:42:86:81:f3:40:46:bc:c4:22:3e:44:
4a:86:55:b0:c1:0e:68:92:f2:84:91:94:85:07:f3:dc:7e:b5:
5a:0b:ee:8f:ad:91:b6:45:b6:bd:3a:42:60:ba:8d:c8:8c:d6:
99:d2:64:f2:c2:ae:03:e1:f7:c0:6c:88:5c:27:dc:c6:f8:18:
85:b5:4b:59:f1:7b:7e:f3:03:a0:22:fe:50:66:42:c6:a0:aa:
19:eb:a7:ed:e4:ae:02:17:c1:78:25:35:07:38:d5:c8:5d:a3:
4c:f7:be:3e:50:f0:a7:5c:9c:e9:14:a5:58:fa:63:96:f1:72:
e7:b5:2d:78:a8:ea:fb:4f:2f:74:49:11:e5:c1:f3:47:9c:8c:
f8:a5:36:82:36:da:d4:7d:ce:da:ec:59:7a:4e:06:f6:af:b2:
01:84:59:c8:1d:f3:fe:f2:bc:69:95:76:29:26:1b:42:65:56:
02:90:96:dc:ec:4b:03:f7:bc:16:37:a3:57:93:2d:bb:78:aa:
97:87:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:09 2024 by rpki-client on console-fra.rpki-client.org