Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/OwN2JTI8tJ7DKtf8NJYQbp5D9YU.roa
File: OwN2JTI8tJ7DKtf8NJYQbp5D9YU.roa (raw, json)
Hash identifier: tDSGMrLeLue4tuOTWPcJcf7ZxuMtyb2aJRoWO/C1NJ4=
Subject key identifier: 3B:03:76:25:32:3C:B4:9E:C3:2A:D7:FC:34:96:10:6E:9E:43:F5:85
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 01898CFE5D1E0BA816F0E661644B0EE4C761
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/OwN2JTI8tJ7DKtf8NJYQbp5D9YU.roa
Signing time: Tue 25 Jul 2023 12:20:27 +0000
ROA not before: Tue 25 Jul 2023 12:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/24 maxlen: 24
94.126.232.0/21 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.236.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.238.0/24 maxlen: 24
94.126.237.0/24 maxlen: 24
94.126.239.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
2a11:5700::/32 maxlen: 32
2a11:5707::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:fe:5d:1e:0b:a8:16:f0:e6:61:64:4b:0e:e4:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Jul 25 12:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b037625323cb49ec32ad7fc3496106e9e43f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:9d:90:aa:8e:ed:0a:af:cc:d3:80:39:61:
fa:07:ff:d5:89:91:a9:39:85:7c:ee:e6:20:4f:52:
42:50:73:85:6d:64:4e:66:2e:4e:2b:30:87:2f:57:
ad:1e:1d:b4:3b:c4:f6:fd:77:07:c5:64:86:50:a2:
c4:54:7f:37:e2:b6:10:19:1e:eb:14:0f:ab:e9:2c:
31:00:6f:59:61:22:bd:e2:79:74:e6:10:be:82:90:
35:dd:2d:20:15:72:b2:06:39:6b:5c:7e:db:51:22:
b5:17:cb:86:ce:07:0d:27:75:a0:9e:35:0c:21:9a:
e9:76:3e:f2:c7:64:e2:39:39:a3:c5:c0:c2:96:f9:
93:4c:51:16:35:7c:45:fd:14:36:60:00:8f:33:15:
41:f1:3c:dc:36:95:3c:22:83:02:05:e9:b0:6f:5c:
10:54:9e:9f:1b:13:c7:d8:69:dc:81:00:6b:27:c0:
77:7a:40:d4:ed:0f:46:d1:14:1f:96:f5:06:13:22:
44:58:c9:41:29:08:c7:7e:16:8a:ec:f0:3b:16:f6:
59:fb:90:18:7f:58:c2:30:78:d4:06:86:14:43:6b:
fa:c8:17:4e:48:fc:85:b3:33:92:88:a3:d4:a8:52:
59:8d:d7:ad:f1:bd:da:6c:05:13:16:99:c8:5c:33:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:76:25:32:3C:B4:9E:C3:2A:D7:FC:34:96:10:6E:9E:43:F5:85
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/OwN2JTI8tJ7DKtf8NJYQbp5D9YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/21
IPv6:
2a11:5700::/32
2a11:5707::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f4:ee:1c:f3:34:08:af:fc:a3:0c:60:87:46:fe:91:7a:cc:
f0:09:88:7a:1a:d1:30:a6:d4:7d:a7:e1:3f:18:4d:91:a5:bf:
a1:f2:52:a8:df:62:0d:63:aa:2d:73:26:b0:50:cc:ae:95:74:
68:24:29:84:0c:fa:d8:f5:db:ec:d1:06:2d:2d:2e:58:b5:0d:
4b:aa:dd:91:53:bc:30:4a:00:73:84:c4:84:97:f9:fb:bc:ab:
1e:c9:9f:b3:d8:cf:7e:36:c1:5e:6c:c3:a0:ed:11:71:13:f8:
a0:8d:15:16:44:a4:65:25:04:0e:98:22:75:43:28:9c:8c:e9:
64:22:a7:fd:a9:92:bd:32:d4:dd:51:d0:41:8f:a4:66:16:f7:
42:f4:e5:f9:bf:0f:15:09:af:ef:9f:9b:41:97:dc:d6:43:f5:
0b:c5:ca:35:b1:5f:21:b1:18:38:3b:79:14:0d:0a:b6:c0:c8:
9e:3c:e9:5b:9b:c0:32:7a:13:5c:71:b1:1e:da:68:9e:cf:b9:
42:65:68:a9:c5:66:98:70:c1:ee:d9:88:0c:16:78:22:5b:01:
ae:3e:a8:66:01:47:da:ec:7b:7f:e5:f5:4c:5b:30:a3:5c:e6:
6e:7b:b6:ab:90:75:7e:ec:1e:59:50:b1:49:a0:91:22:15:22:
95:93:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 15:29:38 2023 by rpki-client on console-ams.rpki-client.org