Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/LQe5Fyr1qN7hJjZrQmOajtCRKig.roa
File: LQe5Fyr1qN7hJjZrQmOajtCRKig.roa (raw, json)
Hash identifier: 7277n3L2x5i1zIY0L3j6mSi+2OXQARETMZQ8vQHEWNw=
Subject key identifier: 2D:07:B9:17:2A:F5:A8:DE:E1:26:36:6B:42:63:9A:8E:D0:91:2A:28
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01837B9B2462E9ED83DAC3F8FF1ED2BEB535
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/LQe5Fyr1qN7hJjZrQmOajtCRKig.roa
Signing time: Mon 26 Sep 2022 21:01:48 +0000
ROA not before: Mon 26 Sep 2022 21:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.72.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 25
212.69.135.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:9b:24:62:e9:ed:83:da:c3:f8:ff:1e:d2:be:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Sep 26 21:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d07b9172af5a8dee126366b42639a8ed0912a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:38:6a:fd:7d:48:79:69:6e:88:9b:c2:1c:
36:b9:ac:3a:3b:15:07:4a:44:bf:d4:07:d8:8e:32:
35:f5:a5:32:c8:80:c4:e3:ac:97:98:f8:62:57:ec:
31:b9:f2:a1:8e:c0:12:eb:83:4d:83:c2:96:37:aa:
a9:dd:7b:7c:a8:8f:33:89:87:66:3a:02:b5:d1:7f:
e2:2b:b1:94:b6:70:aa:bf:24:01:95:cb:f4:8f:fd:
53:23:1f:e6:76:a4:83:4f:f9:7d:c4:86:db:46:f3:
4f:f1:e1:5e:03:5b:30:24:de:47:04:ce:42:dd:f3:
01:37:b4:34:88:e6:0c:4c:83:11:98:29:91:f1:e1:
97:ea:f2:7e:97:b1:41:0f:71:5a:f2:24:92:de:99:
d9:45:da:a3:39:74:c4:c9:b7:4a:3f:70:a2:1a:49:
3b:d9:c1:6a:a7:9d:ca:5e:dd:82:9b:5e:68:82:15:
8f:a5:32:a7:bd:53:de:90:78:2f:d4:a6:03:6d:21:
03:0d:b4:78:ed:32:77:40:35:be:01:71:16:05:dc:
0a:14:17:fb:a1:fc:19:e9:78:de:be:a4:9a:64:ef:
ea:44:cc:6e:48:7f:da:24:59:85:9b:74:a8:af:f5:
16:89:1b:ba:88:79:8f:6c:16:fb:64:ce:eb:4e:a7:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:B9:17:2A:F5:A8:DE:E1:26:36:6B:42:63:9A:8E:D0:91:2A:28
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/LQe5Fyr1qN7hJjZrQmOajtCRKig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
193.160.72.0/24
193.228.49.0/24
193.228.51.0/24
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2c:d7:54:fe:e7:a6:a2:37:b4:45:6f:62:e3:07:97:4a:d2:
3d:4c:0b:5f:2f:66:7e:8a:97:86:8c:3c:c9:06:f4:dd:dd:0f:
b2:84:be:d9:c1:17:86:e1:f3:5a:45:45:ad:0c:cf:c9:3c:8d:
62:68:c9:4f:8e:ed:9a:f6:66:ed:43:c8:fe:23:08:62:d4:c0:
d4:f9:4b:58:f8:f0:69:31:97:a0:b3:15:31:0c:bf:c3:bf:72:
9f:15:73:2f:59:ea:c3:16:97:0e:2b:df:7b:38:48:68:45:c7:
28:e0:cc:75:98:68:f6:35:66:b8:b7:0a:12:1b:17:8d:5f:58:
91:84:bb:94:b7:93:84:31:d6:e7:8c:a4:ad:92:0a:47:ba:66:
68:44:06:c9:96:fd:a0:a0:9d:4c:e7:e1:77:4d:c2:e1:a9:d3:
64:33:09:38:bd:79:e0:ad:58:58:7c:17:28:15:23:c4:e4:0a:
67:92:f5:09:bf:40:bf:70:6b:5c:6e:4f:6f:a7:45:18:41:11:
cd:eb:dd:97:91:e8:14:4c:a7:21:c8:c1:0a:e1:b3:d7:bf:b0:
9b:99:03:d7:64:67:1b:e5:5b:7e:6f:5f:fe:90:9c:6d:58:ea:
0e:81:fc:c0:d5:c5:ef:7e:4e:3e:7a:d7:20:01:57:96:11:db:
12:a9:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org