Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa
File: YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa (raw, json)
Hash identifier: kTF50TRLsKwTJSXRY/X8CErRj70GCaNk5irtUa1cBDU=
Subject key identifier: 63:18:D5:BB:36:58:87:DF:8C:BF:FB:D4:F1:C5:F9:36:F3:57:15:1A
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08F51E6C
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa
Signing time: Tue 22 Mar 2022 22:01:34 +0000
ROA not before: Tue 22 Mar 2022 22:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150281836 (0x8f51e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 22:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6318d5bb365887df8cbffbd4f1c5f936f357151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:d0:09:c6:db:68:9a:78:e7:45:81:2a:5f:
a3:1c:d2:4a:a9:c6:40:21:b2:35:9b:1f:cd:08:f7:
fa:b4:fe:9d:96:c2:9f:09:ad:3d:70:4c:a0:d7:4b:
56:a0:9c:44:65:b1:19:2c:fa:ff:3e:0c:21:ec:65:
a0:47:2a:10:ad:b9:25:71:ff:de:d2:72:60:1e:2b:
eb:6b:c7:22:1e:e1:51:f6:e8:b5:ad:30:de:c2:6a:
7d:46:a6:5d:88:3f:61:e3:06:a1:59:4c:e6:1a:e0:
e8:6b:93:cc:21:9c:e0:20:db:02:d4:3b:86:fa:a7:
8c:90:df:2a:7f:a8:1d:94:19:cd:ab:7a:a4:e4:a0:
91:ec:4f:31:9e:c0:2a:71:24:16:3b:82:56:39:68:
e7:74:3c:ff:9d:37:1d:4c:d3:4c:6d:95:1c:fb:35:
c9:7b:f6:f1:1d:c5:2f:88:cd:10:e5:44:93:b8:9b:
06:b9:90:ed:7c:2c:61:87:43:41:d9:b5:11:b7:0b:
47:5b:80:1f:84:04:5b:d2:67:7f:6d:99:34:5d:3e:
c6:23:fc:b1:f8:81:b6:c1:87:0c:3d:70:8a:e6:2e:
87:59:55:f1:9a:66:ff:ce:11:fe:18:5d:b5:71:69:
3d:a5:92:41:c5:64:df:d2:4d:03:e3:51:78:e5:3c:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:D5:BB:36:58:87:DF:8C:BF:FB:D4:F1:C5:F9:36:F3:57:15:1A
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/YxjVuzZYh9-Mv_vU8cX5NvNXFRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
0c:70:27:c7:f9:84:0d:de:ef:af:a5:37:40:85:d9:bd:1b:55:
3b:56:9b:af:28:de:a7:88:b7:c6:42:f3:e8:f7:7a:60:2c:b7:
2e:f5:96:56:a7:38:6f:bb:c3:ff:02:4f:4d:1b:73:bf:26:76:
45:43:20:7d:bd:8e:3c:58:de:ab:12:fe:e3:19:1c:96:c2:12:
22:1e:84:57:2d:9f:3f:f2:5c:06:cc:c7:42:94:ab:2f:96:c0:
36:d1:88:02:da:d8:e1:a7:5e:05:23:01:bc:80:81:35:bd:3d:
ce:54:38:c3:d4:96:8c:67:04:e3:4a:0d:dc:b2:02:c9:aa:c6:
ea:fd:0c:56:b8:ed:65:65:18:a0:61:39:a7:7d:19:0f:0c:72:
34:86:4e:62:3a:60:20:88:01:b8:2e:a0:fe:ee:52:28:39:89:
cf:15:dc:a0:5f:28:a6:32:1f:f3:05:23:47:34:30:29:7a:25:
0b:f7:c5:69:d3:8a:a1:11:ba:2c:61:5f:e5:7a:4b:bf:a9:41:
dc:35:2c:44:63:2d:80:88:b5:be:00:09:ab:62:6c:88:d2:48:
90:48:81:0b:15:f2:eb:32:28:d7:ec:9d:bb:b9:6a:45:85:ad:
9f:b4:ae:a3:07:5a:27:17:46:2b:0f:1f:d0:71:0b:59:6b:67:
15:50:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org