Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/nIWqcIrqqLn4CJ1eCeXy7MDdwCM.roa
File: nIWqcIrqqLn4CJ1eCeXy7MDdwCM.roa (raw, json)
Hash identifier: 7XV2s7HO21w/sRdALop4P4weXhTiKEHW+ZQsjcm/1I8=
Subject key identifier: 9C:85:AA:70:8A:EA:A8:B9:F8:08:9D:5E:09:E5:F2:EC:C0:DD:C0:23
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 018570675FEBD9DCB1A5682858303A5F4504
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/nIWqcIrqqLn4CJ1eCeXy7MDdwCM.roa
Signing time: Mon 02 Jan 2023 02:55:01 +0000
ROA not before: Mon 02 Jan 2023 02:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 193.39.93.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
185.253.144.0/22 maxlen: 22
45.144.248.0/22 maxlen: 22
2a0c:3cc0::/32 maxlen: 32
2a03:6280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5f:eb:d9:dc:b1:a5:68:28:58:30:3a:5f:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Jan 2 02:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c85aa708aeaa8b9f8089d5e09e5f2ecc0ddc023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:3b:1d:c6:ef:5e:bc:94:bc:e6:37:d1:49:
9d:ed:8a:d3:62:a3:e0:6e:9b:f3:b1:a5:30:81:13:
7f:e5:91:5c:ea:56:7d:78:e6:58:86:65:25:00:82:
03:17:06:3f:39:08:7c:a2:89:2a:1c:39:99:85:82:
b9:9c:94:82:f4:ef:48:ac:52:2d:41:45:70:3c:24:
7b:4f:8b:62:70:c2:d2:7f:e1:5a:8c:c3:7c:8a:48:
a7:c8:50:13:c0:47:e0:b0:18:06:2b:53:7a:06:29:
bc:54:63:63:7f:95:89:e9:e1:85:65:dc:e7:7c:87:
79:a0:b7:99:76:33:8a:92:dc:61:c1:50:ff:2e:23:
60:3d:44:91:1a:05:78:e7:63:6b:d8:c7:ef:54:a5:
1a:f8:0b:59:b7:1b:fa:36:3d:d6:82:0c:e2:55:e7:
3b:e3:38:7d:f0:81:4f:b0:cc:78:ec:2b:80:b0:f2:
f3:6c:17:c0:ef:8a:31:93:77:57:bb:c7:31:97:44:
ae:09:62:56:94:a1:3d:6f:c7:1f:a7:7f:25:1a:9b:
39:61:cc:a1:f4:58:29:b9:66:0b:84:77:62:07:5f:
1e:b0:55:4c:ee:61:8e:fd:99:8a:aa:39:2b:72:ac:
a8:b8:ed:50:5b:24:d4:8c:a4:21:7d:6f:73:61:00:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:AA:70:8A:EA:A8:B9:F8:08:9D:5E:09:E5:F2:EC:C0:DD:C0:23
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/nIWqcIrqqLn4CJ1eCeXy7MDdwCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
185.253.144.0/22
193.39.92.0/22
IPv6:
2a03:6280::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
89:8f:e2:43:90:fe:53:52:3a:bb:66:33:ad:4c:b9:18:8f:ba:
2a:84:6f:76:f7:02:7d:62:ce:46:bf:93:34:51:29:c7:48:da:
f5:74:01:34:0c:4f:e9:06:0a:59:08:18:80:5a:85:4d:a3:7c:
98:63:1c:63:94:da:20:22:2d:34:05:88:d5:60:83:3d:2b:5d:
43:3c:6d:f6:d0:52:e4:2c:01:24:47:09:38:49:4d:96:51:0d:
fd:cc:c6:c8:03:56:d2:7b:1c:8e:6f:c7:7a:61:74:bd:e3:b5:
5c:29:e4:8c:99:54:1c:b0:43:4f:c4:a4:81:74:4c:ee:13:1d:
cb:e8:49:dd:3b:66:d6:f0:05:b5:29:e2:d8:0d:26:cd:c9:a6:
ce:65:c8:6f:bf:ec:20:bd:06:28:10:f7:43:26:91:5e:29:ed:
6a:d3:b7:b7:12:1b:23:e6:b9:cc:36:4f:fa:6c:41:02:2d:d1:
50:ce:da:29:b2:33:12:d1:23:ea:d0:b8:6e:1e:65:55:9e:ec:
76:bf:d0:33:77:3e:fe:55:3a:55:b5:4d:74:c8:2a:e8:07:16:
f0:31:64:03:75:e6:ce:1c:15:fd:90:c4:70:e3:d7:31:d0:63:
59:4e:12:a6:87:56:c6:24:fa:67:0c:3d:c6:44:33:69:b6:6c:
50:71:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:26 2024 by rpki-client on console-fra.rpki-client.org