Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/SXnFtD3q_FZUGHXOwTH6NFOMQzY.roa
File: SXnFtD3q_FZUGHXOwTH6NFOMQzY.roa (raw, json)
Hash identifier: kCsSwjday6GxPqqcFqXvpV7L6Izd3kNIsmZriBfAByM=
Subject key identifier: 49:79:C5:B4:3D:EA:FC:56:54:18:75:CE:C1:31:FA:34:53:8C:43:36
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 018456B5C561797284305F288E4D08AF641C
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/SXnFtD3q_FZUGHXOwTH6NFOMQzY.roa
Signing time: Tue 08 Nov 2022 10:07:43 +0000
ROA not before: Tue 08 Nov 2022 10:07:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 193.39.93.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
185.253.144.0/22 maxlen: 22
45.144.248.0/22 maxlen: 22
2a0c:3cc0::/32 maxlen: 32
2a03:6280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:b5:c5:61:79:72:84:30:5f:28:8e:4d:08:af:64:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Nov 8 10:07:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4979c5b43deafc56541875cec131fa34538c4336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:eb:a1:94:82:99:a2:ff:7e:93:6e:23:3a:
fd:ce:b6:ec:d6:74:92:c5:9d:97:ee:09:5e:f5:dd:
88:e1:47:a7:98:82:8b:7c:9b:f8:c9:ac:55:7c:67:
a3:5a:ad:8f:93:7d:a0:a3:ef:e4:bd:40:64:19:8b:
cf:7c:40:5b:33:9c:a6:0a:8f:36:2e:f4:65:2c:b6:
f7:13:5b:19:f8:be:9b:bf:87:61:56:a9:0e:5f:15:
39:6a:e7:1e:f2:8f:4b:68:0e:93:f8:94:42:48:c9:
09:6a:3f:22:d1:53:bf:ee:50:aa:31:fb:6b:15:58:
68:91:d3:b2:ed:3b:9c:dd:66:24:f9:9d:a7:87:56:
41:16:8f:56:a6:eb:a0:e4:9e:92:73:e9:9c:36:04:
3e:f2:fb:55:87:f1:fc:19:21:1d:92:d3:85:8d:f6:
f7:a3:ed:d5:cc:41:52:27:43:ee:a3:3b:38:70:f6:
57:6b:65:cc:9a:ef:56:fd:f1:66:e7:af:a2:e9:0d:
2e:d5:04:bd:e5:b3:8f:27:08:6a:f6:9b:59:af:13:
d7:09:e1:5f:6e:0c:7a:23:36:00:60:2e:ea:1d:33:
36:67:da:c5:e3:f0:0d:eb:0a:a7:b0:d0:5d:e3:46:
44:08:36:94:74:4d:3a:0f:9e:06:e5:be:c6:6e:23:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:C5:B4:3D:EA:FC:56:54:18:75:CE:C1:31:FA:34:53:8C:43:36
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/SXnFtD3q_FZUGHXOwTH6NFOMQzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
185.253.144.0/22
193.39.92.0/22
IPv6:
2a03:6280::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
90:a1:09:8b:b3:b1:2c:a1:64:3a:ce:ce:ba:3f:bb:1d:d5:2d:
90:03:f9:13:8f:fb:83:57:18:72:2f:0f:fe:e5:1e:aa:1f:fd:
81:21:56:e9:0d:c0:10:ff:ba:65:bf:c3:36:71:f4:16:17:3b:
80:87:57:43:dd:ae:75:89:94:24:65:f4:a5:da:00:d2:16:68:
1b:65:c3:5b:bd:5f:55:e2:c6:d0:52:b6:8d:0e:5e:f9:12:d6:
c6:8f:76:22:8d:eb:7f:06:f6:63:91:89:0d:b2:8a:63:59:91:
01:92:07:ec:da:be:f6:9f:bc:0e:cd:5a:de:0d:69:5f:3a:3d:
f8:a4:69:85:42:e0:b7:1d:ea:76:69:ab:c9:4c:b4:9f:3c:b9:
72:72:e4:4f:0b:2e:70:1d:7d:1a:d5:02:07:e7:80:94:bf:be:
da:64:f9:7a:67:b8:7c:96:40:dd:34:19:53:b1:74:c0:71:bd:
93:5a:81:46:35:ba:7a:26:53:09:a7:e1:6b:14:c6:33:ae:e5:
a2:b9:00:93:ae:d1:a8:2d:a9:3a:8a:60:23:02:a8:72:14:3b:
49:59:8c:a1:82:41:52:e5:dd:19:af:16:d4:c3:07:8f:b4:9a:
a2:2e:6f:29:72:8e:7f:04:77:fa:bd:3a:64:b1:1e:27:b2:cf:
3b:96:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org