Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/2RL1q5caJ2nGVA81D0mW0b1EBLM.roa
File: 2RL1q5caJ2nGVA81D0mW0b1EBLM.roa (raw, json)
Hash identifier: JkWy2mKi/KY3+nSW/sl2d4er+jCcb//kBIRs8L8eYAI=
Subject key identifier: D9:12:F5:AB:97:1A:27:69:C6:54:0F:35:0F:49:96:D1:BD:44:04:B3
Certificate issuer: /CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Certificate serial: 02C6BCEF
Authority key identifier: 31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/2RL1q5caJ2nGVA81D0mW0b1EBLM.roa
Signing time: Wed 27 Apr 2022 09:49:11 +0000
ROA not before: Wed 27 Apr 2022 09:49:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34704
IP address blocks: 37.208.53.0/24 maxlen: 24
37.208.52.0/24 maxlen: 24
37.208.55.0/24 maxlen: 24
37.208.54.0/24 maxlen: 24
37.208.51.0/24 maxlen: 24
37.208.50.0/24 maxlen: 24
37.208.49.0/24 maxlen: 24
37.208.48.0/24 maxlen: 24
93.174.37.0/24 maxlen: 24
93.174.36.0/24 maxlen: 24
93.174.35.0/24 maxlen: 24
93.174.34.0/24 maxlen: 24
93.174.33.0/24 maxlen: 24
93.174.32.0/24 maxlen: 24
93.174.39.0/24 maxlen: 24
213.232.81.0/24 maxlen: 24
213.232.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46578927 (0x2c6bcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Validity
Not Before: Apr 27 09:49:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d912f5ab971a2769c6540f350f4996d1bd4404b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:3f:dc:0a:23:f0:4e:16:b6:f4:6e:18:c2:
a8:7a:7e:c4:13:71:74:04:26:17:d2:8d:2c:27:58:
3f:1f:12:10:2e:eb:54:a9:e7:fc:b2:85:c2:57:9c:
4b:ff:20:50:20:86:29:2a:cc:f4:42:c4:40:1a:1c:
89:70:3e:26:11:63:63:66:c8:d8:e8:20:aa:d7:c8:
19:41:5b:a3:51:71:90:8a:48:8d:11:53:df:ae:f1:
57:87:a2:e7:d7:a2:db:94:78:ef:03:da:cd:7e:34:
18:4e:91:56:90:70:d0:4f:37:ad:82:90:3b:ac:aa:
a6:68:d2:60:68:45:c3:08:4f:e0:ec:3a:46:85:7e:
21:8d:f1:83:c3:b1:cc:a4:0e:94:bc:b6:94:fa:49:
c7:96:b3:5e:cf:09:ab:3f:f7:2d:ee:ef:4c:cd:5f:
ba:e5:0e:2b:6b:ed:97:f9:7b:1d:02:a0:63:bf:83:
3b:9a:cc:b3:9f:d9:8c:47:4b:ad:a9:07:8d:12:56:
5c:45:fc:e4:1a:cd:07:32:bd:04:d6:11:b0:b4:06:
ca:7d:78:4b:19:d7:b3:8e:ba:7b:73:d6:fc:bf:c8:
d8:7d:ec:e4:0f:a2:ac:2e:0e:d4:cb:f6:bc:4b:37:
dd:ce:cd:0a:ad:23:dd:cb:7b:b1:48:1d:30:b1:54:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:F5:AB:97:1A:27:69:C6:54:0F:35:0F:49:96:D1:BD:44:04:B3
X509v3 Authority Key Identifier:
keyid:31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/2RL1q5caJ2nGVA81D0mW0b1EBLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/21
93.174.32.0-93.174.37.255
93.174.39.0/24
213.232.80.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:2f:aa:26:5a:8c:61:9c:d8:da:49:c1:1f:e3:3c:b1:cd:cb:
89:bc:f5:13:78:4b:0b:4a:4c:9a:35:91:df:d3:fe:0d:1a:3c:
d9:c2:14:ef:fd:49:63:85:53:3b:4d:33:75:62:35:fd:35:82:
ba:dc:56:5f:0b:1e:d0:66:e5:62:f3:bd:ba:7a:7d:83:01:3e:
c0:56:19:d4:33:ae:15:72:fc:36:d0:94:8c:10:54:ea:39:26:
8a:ae:eb:35:e8:cb:ed:3e:82:49:96:3f:43:cc:87:c0:4d:46:
6d:54:3e:66:9f:17:4e:0f:a1:ce:c7:3d:76:67:6e:f7:c4:72:
a5:1e:d6:4d:5f:55:46:a3:e8:01:c1:d2:6a:5c:43:78:20:92:
79:eb:5a:5a:ad:ee:48:fb:1a:ff:d9:ac:d4:cf:a1:0e:92:0b:
b7:65:5f:3b:d9:69:7f:2c:17:ff:a0:f5:4d:56:dc:d2:9d:ad:
30:75:98:ff:fb:92:d8:49:fd:53:a5:a8:e2:4f:4b:00:5f:e0:
0b:26:b1:c7:5c:23:ce:a0:16:3a:ae:14:0c:37:71:b5:46:7a:
c7:ad:4b:ef:33:3f:3f:91:9c:75:91:32:bc:25:78:45:63:67:
ef:12:79:c1:9d:e0:77:d7:92:c0:4b:0b:4e:da:28:72:05:95:
9d:eb:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-fra.rpki-client.org