Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/CmhVdcVDxoX27m7cRhpFYOsay5g.roa
File: CmhVdcVDxoX27m7cRhpFYOsay5g.roa (raw, json)
Hash identifier: CLfhKT0gjdcE3WvK/NAAFqV+CV9KNP/CoxKCZ7DIOg4=
Subject key identifier: 0A:68:55:75:C5:43:C6:85:F6:EE:6E:DC:46:1A:45:60:EB:1A:CB:98
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08F6AB3D
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/CmhVdcVDxoX27m7cRhpFYOsay5g.roa
Signing time: Tue 22 Mar 2022 22:01:35 +0000
ROA not before: Tue 22 Mar 2022 22:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150383421 (0x8f6ab3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 22:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a685575c543c685f6ee6edc461a4560eb1acb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:b7:cd:0e:53:eb:96:b4:34:20:e3:36:38:
e5:7b:ed:33:bc:9d:3a:43:c9:ef:b4:3f:7e:c2:71:
9a:3b:50:5d:39:cd:7f:77:a3:ac:78:ef:8a:5e:8e:
08:2e:5e:d1:5d:a8:09:81:8d:bb:92:ef:9a:50:b9:
fc:9f:98:e3:0a:f9:fa:04:4a:c3:35:2b:a2:50:75:
53:f7:5d:f5:bc:94:74:4a:94:dc:fc:e5:d0:a9:a8:
b5:cd:a8:f6:e8:28:ac:6c:76:a5:d3:88:fc:dd:8f:
d7:fb:8d:c0:6a:c0:e7:65:70:56:88:98:43:d5:02:
c1:13:09:28:86:c9:db:f6:de:ad:35:4e:1c:33:89:
bf:a2:4b:fa:cc:1d:8e:ff:f0:4f:bc:7b:db:84:d0:
51:2e:31:82:65:c9:02:3a:7b:c8:72:33:7a:08:5b:
68:89:23:98:b9:bf:d3:19:ba:f4:60:06:1c:88:b3:
ce:3e:88:15:8c:c4:0c:99:a9:dc:c0:1b:2f:03:d3:
01:8c:88:99:6a:7c:47:c6:83:9c:e4:9b:ef:1d:29:
42:b4:d6:91:05:27:56:ae:24:95:95:b6:de:5e:54:
f9:5b:d7:1c:ac:94:0f:81:01:7c:3b:11:5f:87:99:
97:41:76:98:bf:4f:c4:95:d3:49:66:0f:62:f7:8f:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:55:75:C5:43:C6:85:F6:EE:6E:DC:46:1A:45:60:EB:1A:CB:98
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/CmhVdcVDxoX27m7cRhpFYOsay5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
ab:37:02:27:8b:13:03:74:7c:e6:f4:37:18:52:9d:66:e4:7a:
f2:3c:23:8b:b4:90:a6:58:c6:df:3d:fb:c0:f9:a5:21:ab:68:
f4:71:c3:08:e0:dc:ca:33:be:23:59:97:17:db:39:ad:55:3d:
d9:30:24:6b:ea:ad:ca:a4:51:75:ab:36:f9:6c:52:9c:fa:79:
bd:a3:8f:89:a5:4f:09:e8:bb:4b:ba:f9:eb:ff:a3:90:ad:a0:
73:1e:eb:08:62:33:f0:0d:64:36:83:a1:70:cf:e3:fa:a4:31:
5a:7d:81:bc:ef:7f:47:25:91:cf:b1:4a:b5:ad:ae:7e:17:d7:
f5:ff:c8:98:a8:54:88:a9:1c:c5:be:85:0c:a0:55:ec:aa:41:
5a:4f:83:03:3d:d3:18:1e:f4:76:5e:bd:4a:e3:11:aa:c1:ff:
97:d9:98:e4:4b:03:71:25:3d:62:64:ed:f3:4f:16:a7:1e:87:
ce:46:a3:f8:2b:4d:b1:b3:d8:e6:a2:85:26:a3:9f:9c:9a:4e:
05:3a:b6:b7:0c:26:a6:96:de:4f:f7:3d:47:b6:82:5b:83:56:
d6:5b:83:2d:12:69:a1:e3:89:02:4c:4d:49:78:b2:64:68:ac:
2e:04:02:2f:c6:e3:de:90:e1:ed:29:13:60:fd:88:03:a7:bb:
a6:9d:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org