Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/2yTb2p39LiWErjD0bsQcgYwdLpw.roa
File: 2yTb2p39LiWErjD0bsQcgYwdLpw.roa (raw, json)
Hash identifier: WDX2qs0Nhx5X7Gl+lhhLXAaV9d1AFD9eSRLnl+c1YBs=
Subject key identifier: DB:24:DB:DA:9D:FD:2E:25:84:AE:30:F4:6E:C4:1C:81:8C:1D:2E:9C
Certificate issuer: /CN=92fb287165cd308f0287de984d21b2163cd0312c
Certificate serial: 01081522
Authority key identifier: 92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvsocWXNMI8Ch96YTSGyFjzQMSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/2yTb2p39LiWErjD0bsQcgYwdLpw.roa
Signing time: Sat 01 Jan 2022 13:06:40 +0000
ROA not before: Sat 01 Jan 2022 13:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61006
IP address blocks: 193.161.248.0/22 maxlen: 22
194.187.0.0/20 maxlen: 20
193.161.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17306914 (0x1081522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb287165cd308f0287de984d21b2163cd0312c
Validity
Not Before: Jan 1 13:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db24dbda9dfd2e2584ae30f46ec41c818c1d2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:86:ed:50:b5:17:2b:a4:53:68:93:fe:07:
ae:3f:85:14:9e:5a:d1:4c:3b:f5:d5:c7:f7:db:9a:
59:fe:0c:57:b1:24:a9:bb:d7:11:67:7b:52:40:ac:
ef:f0:ea:b9:c6:86:ad:02:86:f5:c5:9e:b0:dc:fc:
48:17:c0:f3:b4:5a:5a:9a:60:ae:d3:5d:a4:56:eb:
42:b5:f1:c2:39:f2:14:37:1c:de:1e:0e:96:f0:5e:
74:49:a2:5c:50:06:d6:02:44:7c:e9:cd:45:e4:fb:
fb:7c:68:b1:6f:63:57:d7:ed:37:f4:1b:29:dc:c8:
2e:72:bf:91:1c:da:b4:7f:f3:99:01:72:f3:66:37:
1a:6b:67:66:92:93:d4:4c:27:43:a0:be:b1:d8:f0:
cb:06:ef:d6:31:7e:55:4b:53:6a:69:2b:68:e3:46:
32:78:39:46:d2:39:77:88:84:7b:a3:d1:79:6d:c0:
38:13:09:64:ea:b0:de:48:11:db:ad:91:1b:63:d2:
9a:ab:ea:f6:15:5c:b1:77:44:af:e0:b6:7f:7e:c6:
09:68:5d:e9:72:05:e9:cf:c3:69:a3:1f:95:ae:47:
33:7a:b0:a4:d2:c1:72:02:a6:16:57:e4:8f:4d:77:
93:77:62:e6:c7:40:50:ba:14:87:1c:f9:9d:50:91:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:DB:DA:9D:FD:2E:25:84:AE:30:F4:6E:C4:1C:81:8C:1D:2E:9C
X509v3 Authority Key Identifier:
keyid:92:FB:28:71:65:CD:30:8F:02:87:DE:98:4D:21:B2:16:3C:D0:31:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvsocWXNMI8Ch96YTSGyFjzQMSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/2yTb2p39LiWErjD0bsQcgYwdLpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e2c1df-8d98-4792-8144-10eb49581b79/1/kvsocWXNMI8Ch96YTSGyFjzQMSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.88.0/21
193.161.248.0/22
194.187.0.0/20
Signature Algorithm: sha256WithRSAEncryption
01:fd:7b:2e:bf:40:05:d0:30:6d:0a:10:23:e5:60:43:61:d7:
b8:5f:9d:b6:37:94:65:dd:dc:42:c3:8d:ca:ec:f8:47:d7:2b:
ef:38:b6:b2:72:b2:71:38:b1:b3:eb:ab:76:c7:a6:b4:0c:c7:
72:6d:3a:3d:5f:a9:8c:64:db:76:f8:15:44:9e:f4:94:d0:3d:
92:1d:03:ae:ad:01:0e:53:36:cd:c1:9a:24:d9:72:93:38:f7:
c1:2d:f9:cf:52:12:de:53:32:57:e2:d3:9c:f3:9d:5e:3f:51:
bf:b4:60:93:6c:80:96:dc:4e:c7:d8:78:97:33:40:09:09:f7:
3b:8f:bc:b3:84:93:29:d0:39:79:23:0d:8a:59:5f:ff:0f:15:
d0:dd:3f:0b:f4:26:f4:5a:b1:44:88:eb:cd:e8:43:c2:aa:74:
5a:94:4b:e7:2e:05:7b:6b:dc:1e:64:f0:e5:a3:3e:85:cb:c8:
75:0e:29:4f:05:ed:4e:3a:f1:ae:08:f8:54:45:3e:19:00:49:
36:0c:c2:22:c6:5f:2e:d1:29:ae:1f:b2:bd:d7:a2:ae:b9:92:
5d:71:fd:47:86:de:6c:63:11:4a:c1:be:61:2b:15:bc:6c:9c:
01:25:83:83:69:e5:41:f1:c8:2c:e4:20:e6:02:b2:94:25:7e:
0e:0c:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:56 2024 by rpki-client on console-ams.rpki-client.org