Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/UR1rPF2GKKGiQ-eLjyyGYcj_eh4.roa
File: UR1rPF2GKKGiQ-eLjyyGYcj_eh4.roa (raw, json)
Hash identifier: TLdLrnJDlCjOfAFSZ/VZStIOz1vGJT6ko3XP0ZnMM7M=
Subject key identifier: 51:1D:6B:3C:5D:86:28:A1:A2:43:E7:8B:8F:2C:86:61:C8:FF:7A:1E
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01857095021977087FEA59DD977ABC5FE724
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/UR1rPF2GKKGiQ-eLjyyGYcj_eh4.roa
Signing time: Mon 02 Jan 2023 03:44:51 +0000
ROA not before: Mon 02 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 194.28.158.0/24 maxlen: 25
194.28.156.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.6.0/24 maxlen: 25
194.104.5.0/24 maxlen: 25
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:02:19:77:08:7f:ea:59:dd:97:7a:bc:5f:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511d6b3c5d8628a1a243e78b8f2c8661c8ff7a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:e0:1c:69:a3:72:44:f7:c8:6c:55:0d:4b:
82:d8:d6:94:b9:67:a2:0b:e0:f1:de:2a:2f:84:c0:
1d:77:79:b7:66:f9:fd:78:c3:92:25:35:54:d8:7e:
0d:bb:ee:a7:f1:2a:04:46:c6:9d:45:bc:b5:5b:df:
95:a7:f3:21:db:2c:17:3e:8c:0e:7d:ed:12:4c:39:
0d:cb:cc:d9:1a:1e:13:3c:ac:1c:3a:8d:e6:d0:c8:
b7:92:a6:68:48:19:86:56:f4:10:05:cf:e9:75:92:
10:33:1a:97:7b:7b:9a:03:50:0e:bd:70:5f:d2:a4:
d1:f9:ad:3b:99:cd:da:45:3d:ce:4d:07:7e:ed:6d:
e8:a4:11:a4:eb:b0:1c:50:aa:e7:4e:23:7a:f4:fd:
d5:ef:4a:a0:d3:f1:71:29:a7:a4:65:c7:9e:41:c8:
21:a3:0f:e5:73:ad:5e:e6:ce:40:52:30:43:03:d1:
a4:c4:8b:7d:d7:ab:02:ef:19:7c:b9:ad:fd:04:da:
67:61:9a:29:53:de:fc:90:72:8a:9e:2c:c8:d9:be:
7a:41:7b:f5:5a:8d:be:b2:fd:ee:16:d7:b1:01:af:
60:f3:3a:90:09:54:c6:49:39:dd:6d:c7:05:84:a3:
e9:97:14:27:4a:48:c5:1e:1d:f7:47:89:62:58:50:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:6B:3C:5D:86:28:A1:A2:43:E7:8B:8F:2C:86:61:C8:FF:7A:1E
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/UR1rPF2GKKGiQ-eLjyyGYcj_eh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
84:13:89:e2:c9:c0:33:55:57:04:ec:a1:bc:bf:1b:27:55:43:
ef:67:3a:a3:13:f9:58:bf:41:88:4e:bf:59:0d:fe:4a:8f:a3:
a8:93:b7:a1:db:ba:90:f9:32:04:b7:27:43:4b:b4:ad:7c:b0:
1a:87:51:1f:8f:ca:b5:06:50:29:19:7c:97:d2:ce:53:2b:b5:
10:12:ff:70:df:9c:10:87:9e:ca:5b:f9:dc:2e:ef:2b:6d:05:
85:44:45:1d:51:ff:b9:fe:ad:06:ca:33:d3:67:61:fb:90:0b:
e5:e8:da:a4:d6:83:1d:9e:95:f3:a2:4c:1b:7e:17:85:38:bf:
37:1e:f3:30:5d:31:8e:cb:db:dd:e6:33:e8:e3:95:14:4d:9a:
d4:94:c2:51:53:a9:47:5d:92:e1:47:56:fd:bd:d3:f9:63:a8:
3f:41:26:a0:8a:92:db:71:f6:ff:b2:70:a8:85:e9:b3:a4:17:
6f:04:87:0b:21:36:d4:5f:99:19:17:40:bb:5e:65:5d:6e:fd:
fe:21:02:aa:c7:8a:1f:c6:a9:df:69:77:2e:4b:f4:1b:85:20:
0e:9c:da:95:18:dd:bd:e6:49:5c:3d:08:88:73:3c:fa:ea:1a:
fd:f7:13:0e:ac:f5:a2:65:8d:0c:56:62:47:4e:74:b0:f6:9d:
98:82:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org