Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2pFpH5q1Uf0RgCMRai3ZB_p4mKk.roa
File: 2pFpH5q1Uf0RgCMRai3ZB_p4mKk.roa (raw, json)
Hash identifier: cV5hYFSt4NMhtR2HRwkdaNgDLHnNv/Zak/1YAdc5Unw=
Subject key identifier: DA:91:69:1F:9A:B5:51:FD:11:80:23:11:6A:2D:D9:07:FA:78:98:A9
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0181D54DBC68E24EEE734C45E01D5F87FBAC
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2pFpH5q1Uf0RgCMRai3ZB_p4mKk.roa
Signing time: Wed 06 Jul 2022 20:57:30 +0000
ROA not before: Wed 06 Jul 2022 20:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 88.218.239.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:4d:bc:68:e2:4e:ee:73:4c:45:e0:1d:5f:87:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jul 6 20:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da91691f9ab551fd118023116a2dd907fa7898a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:19:00:40:c3:34:ef:4a:a6:78:57:ea:d2:
c0:1f:65:32:1b:fc:59:b5:17:dd:5b:ee:73:2b:31:
83:bc:56:22:3b:a9:58:74:50:b8:8c:bc:30:96:e4:
ef:5c:a4:86:c9:40:c2:63:db:6c:79:1c:d3:3a:79:
58:46:7b:0a:1c:29:39:ee:88:f5:87:06:5a:eb:80:
c8:b7:4d:f7:27:ae:7a:01:b2:13:bc:36:a2:36:24:
18:66:99:de:0a:2b:75:04:04:5c:6d:2f:41:1f:dc:
2b:66:7b:0f:50:d4:bf:82:f7:97:24:f9:4a:88:8c:
aa:39:4e:85:02:53:7a:2d:85:3f:3d:49:15:21:8c:
2d:49:d4:46:68:56:db:ad:2f:4b:fa:79:f3:04:d0:
8f:a5:39:6c:9c:69:96:e5:73:6f:aa:b3:4f:78:47:
e0:22:96:02:1c:bf:bc:dd:bc:eb:bc:b6:87:50:80:
ec:e2:37:f1:b7:bb:92:d7:b7:6c:ec:f0:1e:37:4e:
ca:9c:2a:3d:0d:80:47:c5:8e:14:87:8e:ea:4b:99:
0b:4a:c1:7a:c1:d0:82:eb:08:ee:c2:75:03:1c:45:
97:28:35:64:86:ed:fe:cd:03:31:1a:b0:4a:48:57:
e9:6e:b9:ff:bc:3b:8c:aa:c2:41:1a:5c:c3:03:0f:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:69:1F:9A:B5:51:FD:11:80:23:11:6A:2D:D9:07:FA:78:98:A9
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/2pFpH5q1Uf0RgCMRai3ZB_p4mKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7a:20:97:88:13:b2:31:90:d8:60:6c:71:6b:cb:b1:fa:7d:
9e:e9:e0:ef:56:b7:a3:dc:09:cf:58:f2:4a:c9:ea:f6:90:f6:
32:64:57:56:7a:6c:b2:fe:d2:de:af:b6:78:46:54:07:07:7e:
14:5a:53:2d:f5:ad:f5:ab:2a:0a:21:3a:e2:51:1c:94:bf:b5:
6e:58:93:97:46:a8:0e:7a:51:45:2f:a9:a0:d9:48:69:cb:35:
ce:79:e0:b8:a1:54:9e:1e:3c:e7:ef:99:2b:02:bb:8c:76:48:
61:d4:9b:5f:0d:8c:1e:56:ec:9b:d1:08:17:d0:49:25:29:b5:
58:1f:76:ff:97:c4:e6:6f:82:6e:ea:6a:02:4e:ee:e4:9c:95:
9f:62:89:5d:b9:90:cf:01:25:fc:95:ec:4f:33:03:8d:dc:4c:
de:c4:1b:e8:b3:3f:d2:b5:1a:32:44:d4:b9:a7:d0:51:f9:63:
51:99:71:aa:c7:9a:77:76:ee:23:1c:ac:fe:37:02:ca:73:9c:
b1:30:85:fd:94:bc:31:c0:d0:6e:19:b0:9c:f4:59:d1:3d:42:
70:d3:d5:43:7c:d2:9a:b3:5a:8b:dd:2f:fa:80:28:20:c6:1c:
40:48:af:22:10:e9:04:d0:e4:ad:b1:a7:e8:8f:e0:67:fe:f7:
d8:6b:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org