Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/4RCfjDsfK_OehfEBmqXp0n9RkoE.roa
File: 4RCfjDsfK_OehfEBmqXp0n9RkoE.roa (raw, json)
Hash identifier: Szv8NmZOB6d89GjIBkV7SXfU702rC+0zgwxEMs9ZunY=
Subject key identifier: E1:10:9F:8C:3B:1F:2B:F3:9E:85:F1:01:9A:A5:E9:D2:7F:51:92:81
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 01898CE8870437B526B3D7420D3C26244D25
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/4RCfjDsfK_OehfEBmqXp0n9RkoE.roa
Signing time: Tue 25 Jul 2023 11:56:36 +0000
ROA not before: Tue 25 Jul 2023 11:56:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/24 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.236.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.238.0/24 maxlen: 24
94.126.237.0/24 maxlen: 24
94.126.239.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
2a11:5700::/32 maxlen: 32
2a11:5707::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:e8:87:04:37:b5:26:b3:d7:42:0d:3c:26:24:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Jul 25 11:56:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1109f8c3b1f2bf39e85f1019aa5e9d27f519281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:5c:a4:a5:b2:a1:aa:1e:ae:5f:93:35:a1:
b8:cc:c8:57:b3:18:39:c1:c7:4a:5e:51:81:7e:b7:
10:df:25:e1:80:ab:a7:ed:de:cf:e6:84:06:db:53:
a6:28:63:0d:a1:18:ab:8b:64:f6:85:62:f3:ed:21:
9f:f3:6c:89:9d:1a:f9:d8:d4:da:f0:85:a8:be:68:
28:d5:67:15:8e:37:ad:25:cf:5d:da:12:1e:57:93:
c3:bf:22:64:7d:aa:a0:36:d6:af:3b:52:b4:a9:69:
9b:9f:46:4b:c4:46:2a:fd:9d:1c:45:c5:18:ee:35:
3a:07:03:28:d4:12:0c:59:ed:66:63:b1:de:01:fe:
1d:95:f7:f7:e0:3d:a4:70:de:bb:c5:6e:76:60:03:
54:1a:27:f2:2f:3a:7b:6d:7b:8a:8e:b3:f9:ee:c1:
97:ae:f3:34:28:ae:1f:de:0d:4b:ac:a0:c2:1e:ce:
5d:38:ee:57:52:17:19:4d:0b:6b:a6:8c:38:63:3a:
23:d6:f2:45:c5:3c:13:06:79:83:c3:d0:9d:e1:0f:
c1:79:24:1a:41:91:34:32:4c:06:01:54:93:46:36:
76:34:9f:28:af:f2:77:0c:37:b1:c7:5f:73:c2:d3:
e1:81:19:8a:10:52:51:2e:ff:fd:fe:7c:22:e5:a7:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:9F:8C:3B:1F:2B:F3:9E:85:F1:01:9A:A5:E9:D2:7F:51:92:81
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/4RCfjDsfK_OehfEBmqXp0n9RkoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/21
IPv6:
2a11:5700::/32
2a11:5707::/32
Signature Algorithm: sha256WithRSAEncryption
a9:67:24:fa:91:f2:da:7c:ab:9d:0a:1d:4a:9b:9b:7a:fa:b9:
a0:cd:5a:48:7a:ce:a5:47:22:5e:01:65:27:48:8c:5f:be:4f:
0d:e6:3f:10:4e:7c:61:c1:a2:1a:3a:50:03:a0:e6:65:81:a0:
b9:2a:2c:4b:2e:85:ec:e8:5f:57:64:12:75:6d:b5:69:96:65:
3d:73:7e:a3:22:0c:5c:57:2c:37:eb:33:1a:9d:dc:92:ff:27:
9a:5a:4e:a4:4d:ef:e3:75:7d:85:8d:87:1e:2c:44:b5:ae:23:
21:3f:98:2a:3b:56:d4:07:93:e5:af:ff:52:06:19:d5:c9:f8:
ae:59:cd:7a:7f:7f:53:6f:f1:96:96:cd:89:55:34:4d:fe:95:
b0:a7:ab:24:e7:e7:f4:b8:2d:9e:81:eb:64:07:e8:29:74:14:
f8:2e:cd:47:de:46:6d:e9:25:0a:8b:91:bd:3a:35:3f:93:41:
18:3c:b6:2c:8c:e7:f1:fd:85:29:84:6e:b4:d0:1c:76:2e:43:
2d:8f:1b:81:1c:51:64:7f:85:b0:dc:82:25:1b:86:25:d5:82:
5e:74:77:9a:cf:ef:3f:9f:5b:fa:62:ee:8e:38:19:73:94:04:
cb:07:0a:3f:a6:cb:c0:dc:89:4b:82:d6:7b:36:17:07:2d:bf:
f4:8c:4f:21
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYmM6IcEN7Ums9dCDTwmJE0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTUyMzY5NGJkNWZiOTJkNzY4NDM1ZGIzYmI2OGVkODQz
ZTVkNTMwHhcNMjMwNzI1MTE1NjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTEwOWY4YzNiMWYyYmYzOWU4NWYxMDE5YWE1ZTlkMjdmNTE5MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvpcpKWyoaoerl+TNaG4zMhXsxg5
wcdKXlGBfrcQ3yXhgKun7d7P5oQG21OmKGMNoRiri2T2hWLz7SGf82yJnRr52NTa
8IWovmgo1WcVjjetJc9d2hIeV5PDvyJkfaqgNtavO1K0qWmbn0ZLxEYq/Z0cRcUY
7jU6BwMo1BIMWe1mY7HeAf4dlff34D2kcN67xW52YANUGifyLzp7bXuKjrP57sGX
rvM0KK4f3g1LrKDCHs5dOO5XUhcZTQtrpow4Yzoj1vJFxTwTBnmDw9Cd4Q/BeSQa
QZE0MkwGAVSTRjZ2NJ8or/J3DDexx19zwtPhgRmKEFJRLv/9/nwi5afLFQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOEQn4w7HyvznoXxAZql6dJ/UZKBMB8GA1UdIwQY
MBaAFP0VI2lL1fuS12hDXbO7aO2EPl1TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JVamFVdlYtNUxYYUVOZHM3dG83WVEtWFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMmE2MTYtZTYxNC00NWEwLTljOTAt
OGFkODdlMGRkNTk2LzEvNFJDZmpEc2ZLX09laGZFQm1xWHAwbjlSa29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wMmE2MTYtZTYxNC00NWEwLTljOTAtOGFkODdlMGRkNTk2
LzEvX1JVamFVdlYtNUxYYUVOZHM3dG83WVEtWFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQDXn7oMBQE
AgACMA4DBQAqEVcAAwUAKhFXBzANBgkqhkiG9w0BAQsFAAOCAQEAqWck+pHy2nyr
nQodSpubevq5oM1aSHrOpUciXgFlJ0iMX75PDeY/EE58YcGiGjpQA6DmZYGguSos
Sy6F7OhfV2QSdW21aZZlPXN+oyIMXFcsN+szGp3ckv8nmlpOpE3v43V9hY2HHixE
ta4jIT+YKjtW1AeT5a//UgYZ1cn4rlnNen9/U2/xlpbNiVU0Tf6VsKerJOfn9Lgt
noHrZAfoKXQU+C7NR95GbeklCouRvTo1P5NBGDy2LIzn8f2FKYRutNAcdi5DLY8b
gRxRZH+FsNyCJRuGJdWCXnR3ms/vP59b+mLujjgZc5QEywcKP6bLwNyJS4LWezYX
By2/9IxPIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:59 2024 by rpki-client on console-ams.rpki-client.org