Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/FRIQOj7HkqxA7pegDtcgjPAKXh0.roa
File: FRIQOj7HkqxA7pegDtcgjPAKXh0.roa (raw, json)
Hash identifier: 2FuA+jrb7J/JBbN/SK/FOGc2kSJVFsUSlNBbxyGCbAA=
Subject key identifier: 15:12:10:3A:3E:C7:92:AC:40:EE:97:A0:0E:D7:20:8C:F0:0A:5E:1D
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0818F4EC
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/FRIQOj7HkqxA7pegDtcgjPAKXh0.roa
Signing time: Sat 01 Jan 2022 13:04:48 +0000
ROA not before: Sat 01 Jan 2022 13:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.160.72.0/23 maxlen: 24
194.28.156.0/23 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/23 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/23 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135853292 (0x818f4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 1 13:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1512103a3ec792ac40ee97a00ed7208cf00a5e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:a2:34:3a:be:99:60:d5:bb:42:6d:46:75:
c2:d5:ff:8b:ec:87:3e:f2:f9:c4:15:5c:06:44:78:
b9:13:b5:ce:5d:ee:56:52:46:89:be:02:00:ed:2d:
e6:87:f8:39:a2:52:36:94:2e:87:d5:dc:f5:9c:ca:
2f:12:dc:27:4c:40:f3:46:c4:aa:ae:db:a6:20:45:
f4:a7:25:0d:05:7f:b5:00:4a:15:8f:dd:ba:5c:89:
f4:28:e3:7d:05:a7:eb:fc:81:e8:9e:d3:6f:64:b8:
6d:c3:6f:de:e1:d8:11:7c:25:bd:4d:0c:28:58:89:
d8:21:5b:1d:88:5e:67:8c:18:24:4f:d3:ab:c5:15:
ce:05:bf:3e:c7:9f:d2:c0:21:2c:1e:88:8b:d5:11:
ac:bc:60:85:c9:e3:46:86:22:ee:47:99:7b:36:78:
96:ee:30:8c:64:8c:93:b9:bb:22:06:72:85:ea:03:
f2:1b:dc:b6:76:27:ba:45:87:b9:bf:4f:a1:a9:65:
f9:fd:c1:80:62:7b:8c:f1:33:aa:ff:64:ce:ef:f5:
62:75:12:07:05:9e:e7:5a:ef:d3:34:49:72:06:f8:
16:e1:ed:15:66:1a:94:46:09:80:d2:52:53:f1:f9:
f2:db:8d:e2:cd:1e:06:db:09:7a:15:2a:6f:29:aa:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:10:3A:3E:C7:92:AC:40:EE:97:A0:0E:D7:20:8C:F0:0A:5E:1D
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/FRIQOj7HkqxA7pegDtcgjPAKXh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.72.0/23
194.28.156.0-194.28.158.255
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
36:5e:2b:9f:57:43:c8:72:ff:fe:95:8a:a5:24:d1:f1:ff:8e:
9c:ff:6e:fa:11:ec:ab:54:37:e2:6b:f2:5e:77:f1:ea:39:d5:
8b:51:f8:2d:6a:5a:ed:c4:15:65:ea:4f:71:86:b7:2d:0e:a9:
d9:7b:3e:d6:c4:98:ce:71:c3:ee:3a:c0:26:7e:ba:44:b8:7f:
1c:35:3d:6d:56:9d:e1:5a:56:f0:4d:02:3f:ec:4e:97:2e:d4:
ff:97:ab:32:9f:69:8a:bb:be:b3:bd:d3:01:65:09:5e:9e:3d:
45:94:2c:9a:ca:a8:52:02:1f:fd:e2:05:53:87:9f:ff:b4:c3:
1d:7c:b4:e7:53:89:ac:fb:c7:74:32:e2:3c:6b:f0:9f:37:05:
20:b4:cf:9f:5b:98:87:45:95:9e:3b:c1:b3:22:e5:c1:02:0c:
17:e4:7c:04:b8:34:81:92:6b:41:b3:79:4b:e8:51:5c:0b:01:
3a:61:a9:3c:67:d8:27:f7:6f:e5:fc:17:20:9e:44:22:3b:69:
57:ec:d3:45:66:1a:50:1b:22:44:24:fc:20:86:ff:13:09:92:
e3:eb:05:45:7b:22:3e:dd:98:0b:22:83:0d:e6:f9:ce:4b:5a:
0e:ef:82:f5:98:4c:bd:39:e2:39:c5:68:9b:46:d1:28:7f:f3:
d0:f1:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org