Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2Z2sE7bOXazW3IsymPs23ekBX2o.roa
File: 2Z2sE7bOXazW3IsymPs23ekBX2o.roa (raw, json)
Hash identifier: HKk+Rxd1hAKj+kEacC8Nh5rJGMSrAggOTBLDXOTIv/Y=
Subject key identifier: D9:9D:AC:13:B6:CE:5D:AC:D6:DC:8B:32:98:FB:36:DD:E9:01:5F:6A
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01857095050B93B5B3D741D46C76E78CF6B1
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2Z2sE7bOXazW3IsymPs23ekBX2o.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 194.28.156.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:05:0b:93:b5:b3:d7:41:d4:6c:76:e7:8c:f6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d99dac13b6ce5dacd6dc8b3298fb36dde9015f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:34:25:40:ae:4c:2a:21:28:65:a4:39:bd:
48:63:db:98:11:b3:04:00:28:83:62:88:7e:18:4b:
2a:4c:48:70:42:7b:8e:56:9d:89:e8:91:2a:d7:30:
8d:5e:b1:3d:45:6e:e9:c6:0d:e6:a2:09:15:d5:02:
66:c4:4d:59:a9:e1:45:c8:fc:1b:db:ef:ec:46:1d:
bc:d8:21:35:95:bb:85:5e:63:96:f4:99:60:d7:93:
ff:a3:cb:6e:53:29:02:11:16:73:3e:cd:56:10:ff:
92:4f:6b:a7:95:ad:9e:19:36:5a:02:a9:dd:62:11:
42:34:30:d1:82:f4:8d:73:86:0c:57:a3:01:d3:e0:
a8:63:3a:94:45:4d:e3:37:52:40:65:de:c3:99:a4:
d2:5c:6a:78:68:3a:b1:03:37:1d:ff:fe:62:53:d6:
d9:5a:be:f1:4e:fa:e5:85:ce:6d:8e:9d:45:13:14:
39:cf:f9:f1:d9:80:e1:54:77:b1:56:0f:d3:f3:21:
27:91:bc:6d:ad:d1:36:ba:29:8b:da:28:3d:49:9c:
27:d7:92:dc:85:e5:ab:48:29:c2:d6:5c:d2:54:24:
43:4a:47:4a:dd:cd:e7:10:88:3c:07:91:f8:85:b2:
c2:56:31:5f:b2:d7:d2:11:c7:84:6d:9a:57:e7:56:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:AC:13:B6:CE:5D:AC:D6:DC:8B:32:98:FB:36:DD:E9:01:5F:6A
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2Z2sE7bOXazW3IsymPs23ekBX2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
91:33:36:b3:2e:4c:a7:68:6c:e0:6e:80:86:4d:60:7a:71:80:
29:ee:a8:6d:48:8b:23:d7:b1:c3:ca:3c:43:86:54:cb:4d:85:
75:0f:29:c9:47:95:72:b0:00:36:0f:ea:69:a1:dd:81:5b:ea:
b5:7e:5a:9a:80:85:40:08:e2:55:40:31:b5:dc:c2:16:17:5c:
e4:e7:61:14:1c:c5:5d:d2:35:23:4e:fa:77:e3:79:00:84:59:
f1:75:90:00:a3:61:68:44:fa:b8:82:9d:38:12:8c:5d:78:32:
39:ca:4c:c4:29:80:2e:ba:21:c7:cf:04:2e:4d:bd:c4:be:b0:
03:46:d1:e1:62:8a:35:93:ca:87:bb:03:8f:2a:ef:09:8c:81:
81:c1:41:bc:3b:6b:16:fc:b8:69:55:45:5b:ac:17:44:f2:cf:
a1:35:83:59:c3:c3:b8:3a:63:4c:7f:1d:d0:15:9b:a4:18:07:
7c:fc:55:18:2b:e0:44:e3:3d:bd:b3:0a:9c:e1:07:d0:fe:e7:
3a:da:df:d6:cd:48:e8:74:2f:9b:c8:13:5b:8b:58:28:5b:6f:
e4:9d:b3:d2:6c:ba:1e:44:be:b9:f6:bc:6b:97:0f:ee:6e:13:
92:68:da:a6:23:df:83:12:c8:d3:9e:a1:1a:9d:30:72:50:d1:
b2:f7:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org