Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/RgMUm54-h4OlL_eoywhRd-SBfcM.roa
File: RgMUm54-h4OlL_eoywhRd-SBfcM.roa (raw, json)
Hash identifier: ZTadi+fg/hDwBWO1e5gN/JI0OHIkOVmd5IRQNpSYRi0=
Subject key identifier: 46:03:14:9B:9E:3E:87:83:A5:2F:F7:A8:CB:08:51:77:E4:81:7D:C3
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 01826F623B79E7859A05D89676CEB62EC9A4
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/RgMUm54-h4OlL_eoywhRd-SBfcM.roa
Signing time: Fri 05 Aug 2022 19:01:24 +0000
ROA not before: Fri 05 Aug 2022 19:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/23 maxlen: 23
94.126.232.0/24 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.236.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.238.0/24 maxlen: 24
94.126.237.0/24 maxlen: 24
94.126.239.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
2a11:5700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6f:62:3b:79:e7:85:9a:05:d8:96:76:ce:b6:2e:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Aug 5 19:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4603149b9e3e8783a52ff7a8cb085177e4817dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:81:12:2f:03:52:b0:6a:ce:30:38:e1:0e:
5b:97:77:59:73:be:3a:ff:94:6f:4f:70:a3:32:0d:
55:32:08:0d:48:86:96:05:b9:7e:16:b6:65:47:6e:
e4:e2:4a:04:57:da:d1:3b:49:d4:19:70:02:e6:87:
7c:74:00:fc:65:38:11:6f:73:45:fd:65:69:f2:b8:
df:63:cc:c8:ca:20:4c:59:28:51:8c:f4:a2:a6:28:
14:24:c9:a1:c3:45:55:15:04:8e:c0:e5:15:80:1c:
f5:41:ef:82:3e:6f:97:b6:33:14:6e:88:f3:50:ce:
36:5f:92:6c:d8:d6:fd:18:22:88:04:d8:42:d4:bf:
6f:c8:00:f6:ee:72:02:21:76:fe:43:89:6a:d0:72:
25:40:54:54:14:50:3e:8d:1e:d0:50:25:7c:e1:a5:
d8:2f:2a:dc:1f:b3:07:27:f1:2c:01:f0:5a:4c:b3:
02:1f:8d:1a:02:af:dd:bd:63:67:37:85:46:b7:da:
f2:be:13:f3:40:bb:49:8f:64:f2:2c:b9:58:9e:09:
43:dc:7e:3b:8e:e8:96:94:01:5d:fe:c2:6f:85:7b:
43:38:7f:b6:8f:17:01:c4:79:b3:d6:ad:94:3a:de:
c0:a3:3a:08:18:42:44:df:3f:c8:03:07:7d:fa:0a:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:14:9B:9E:3E:87:83:A5:2F:F7:A8:CB:08:51:77:E4:81:7D:C3
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/RgMUm54-h4OlL_eoywhRd-SBfcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/21
IPv6:
2a11:5700::/32
Signature Algorithm: sha256WithRSAEncryption
6b:7d:e0:f8:de:ca:de:22:ee:e8:38:da:6d:00:c1:67:d1:c0:
1f:02:41:92:f9:e9:4a:72:76:e6:3e:d0:c3:51:82:ad:f8:53:
0b:a9:84:7c:02:8d:c5:c2:ea:0d:25:1f:8d:e8:bd:4f:ea:08:
36:ef:fa:6f:ac:f2:f4:21:a2:0f:ef:ae:3b:83:10:96:45:56:
7a:4c:42:ed:d7:47:86:1a:b7:25:19:f9:ca:45:a8:0b:27:ad:
cb:c4:4d:0c:b2:66:30:e6:7e:5f:73:11:3f:fc:fa:70:d2:99:
3e:a2:98:fc:03:e1:48:88:19:6e:3f:ee:99:0c:6c:d8:ee:1b:
34:45:d0:89:ea:60:39:0a:2e:fa:dc:c5:51:31:a2:da:6e:ad:
06:82:5c:d5:66:fa:42:6e:54:82:0f:d6:89:d3:41:92:d2:84:
f3:b2:3f:9e:2e:0f:98:9d:e3:2d:63:dd:ab:f3:52:c3:23:06:
bc:96:37:37:67:16:7b:07:a8:5c:6e:4d:4d:41:ed:f0:90:34:
f4:af:09:8a:32:d1:b6:90:12:e0:d1:b9:00:96:62:5f:93:8b:
3f:1f:7b:8f:de:48:50:d1:b0:2b:14:4c:ea:c9:0b:24:7e:c7:
7e:1e:e5:a0:17:a9:aa:1a:a5:2a:ab:62:45:fe:e9:d5:af:95:
36:e3:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:59 2024 by rpki-client on console-ams.rpki-client.org