Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/7VKSf1NhEVLqpbdxeOT7Kec9YAA.roa
File: 7VKSf1NhEVLqpbdxeOT7Kec9YAA.roa (raw, json)
Hash identifier: 9c8iCkTNMTRSDYTte8WVollq3TswsBOdRAmx6UP9SAA=
Subject key identifier: ED:52:92:7F:53:61:11:52:EA:A5:B7:71:78:E4:FB:29:E7:3D:60:00
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0181F72D4E33ADBB6B29C1D858FDE45FC10A
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/7VKSf1NhEVLqpbdxeOT7Kec9YAA.roa
Signing time: Wed 13 Jul 2022 10:49:10 +0000
ROA not before: Wed 13 Jul 2022 10:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.72.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 25
212.69.135.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:2d:4e:33:ad:bb:6b:29:c1:d8:58:fd:e4:5f:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jul 13 10:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed52927f53611152eaa5b77178e4fb29e73d6000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:a4:be:85:6f:b5:50:61:52:18:49:41:ea:
32:ad:d6:58:4d:7c:48:7b:2e:ea:e7:b6:8a:57:38:
09:be:b6:f7:9f:36:56:e0:15:62:96:a0:a5:8d:20:
1a:d7:bb:22:95:1b:d6:4e:ae:14:69:9c:f7:36:80:
6f:d2:b1:95:39:24:1e:fb:5d:06:fc:85:15:22:46:
18:b9:4d:fd:85:d2:49:e0:5b:5e:86:c2:c0:be:7b:
32:14:2d:64:ae:ff:d4:eb:92:6e:ec:8b:c6:c6:e6:
21:69:de:85:c8:c7:06:c8:b7:84:7d:a2:ce:d9:5f:
70:d3:bf:76:f7:35:18:6a:67:de:c2:7a:e4:43:11:
c4:78:ee:d6:d2:e1:f9:18:62:88:55:2f:6f:d7:29:
89:37:a6:4d:89:67:16:6d:bb:0e:e0:47:57:2b:e4:
03:ac:e8:82:53:94:0c:b5:3e:5d:07:c0:49:de:13:
a9:39:71:18:ca:15:91:16:45:c8:63:21:84:d8:eb:
c3:0d:8e:17:d0:f2:48:ad:9c:6a:36:57:49:53:a4:
f8:69:41:ab:78:4e:7f:f9:a2:96:08:00:64:6b:bf:
a2:cf:63:e2:ce:a9:84:74:5d:ea:b5:88:24:28:7d:
47:40:a5:ae:9f:24:11:72:12:f6:ca:c9:ba:17:b2:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:92:7F:53:61:11:52:EA:A5:B7:71:78:E4:FB:29:E7:3D:60:00
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/7VKSf1NhEVLqpbdxeOT7Kec9YAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
193.160.72.0/24
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2f:98:5b:89:2e:fc:db:c7:1b:a9:b2:a4:94:91:e9:85:c1:
20:d5:77:48:84:f8:1b:67:3d:a8:c5:3e:12:50:ad:a3:1e:a8:
20:ad:db:49:91:fe:18:0d:32:3d:e5:ec:51:78:55:7c:83:fc:
8d:c6:d5:bf:c9:b6:14:fa:d3:86:56:2b:c6:34:72:e5:18:6a:
3f:04:4e:89:cd:d5:89:f9:b4:0a:63:ae:30:cf:f2:60:96:90:
0e:bd:60:3e:71:05:19:5b:20:1d:ff:2e:df:9e:28:a4:80:b5:
ab:8c:1e:66:97:b4:8f:2d:bb:cf:22:81:17:b0:25:36:2f:e4:
6e:30:40:c9:50:db:5e:f2:58:52:b2:a6:2c:87:a4:94:ae:28:
d3:12:79:37:01:9b:bb:95:d2:25:5e:90:50:d8:e4:0f:63:45:
ed:13:55:b8:3c:82:cd:80:80:a4:14:af:09:9e:ea:d0:7e:3b:
01:c0:5c:54:a5:9f:98:c7:c5:c4:af:ce:26:7e:5c:5c:76:a3:
cf:39:49:e4:f1:ea:d9:29:e8:35:7d:a5:77:5f:c1:d0:c8:9d:
07:f8:4a:d4:04:22:92:02:3d:94:b7:8c:e4:75:0c:91:bc:30:
5d:37:ad:97:fa:f1:2a:b1:72:4d:fb:0a:a8:98:64:9a:01:e4:
3a:7e:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org