Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fsO1D_CvhTQpJIrMnBBSUxmvN1M.roa
File: fsO1D_CvhTQpJIrMnBBSUxmvN1M.roa (raw, json)
Hash identifier: rhAKWrX3/tU2YE9PjqO4sOIZd6b1OM6IRMDp0MhLJls=
Subject key identifier: 7E:C3:B5:0F:F0:AF:85:34:29:24:8A:CC:9C:10:52:53:19:AF:37:53
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08F3A9F9
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fsO1D_CvhTQpJIrMnBBSUxmvN1M.roa
Signing time: Tue 22 Mar 2022 22:01:34 +0000
ROA not before: Tue 22 Mar 2022 22:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150186489 (0x8f3a9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 22:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec3b50ff0af853429248acc9c10525319af3753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:0c:87:99:41:b1:07:98:9e:fc:69:fc:ca:
30:6a:ef:5f:30:ff:c9:ba:e1:5f:fe:87:c1:81:91:
c1:e7:b3:21:45:2a:2d:79:1d:f6:37:e6:f8:c2:39:
42:b1:2e:03:44:9d:0a:bf:b1:4d:9b:63:83:1a:e3:
42:79:d5:59:db:d0:87:46:47:85:50:dc:a0:c9:5a:
b2:92:19:f7:5c:d8:1b:24:cb:5a:b2:e5:38:c1:28:
66:62:a4:cc:c2:eb:34:fb:f2:f0:44:f9:d1:05:0f:
3a:e4:09:4c:e5:92:e0:be:c2:a4:74:66:9f:36:7a:
e3:ef:1c:04:8f:49:dd:42:77:a9:71:05:30:ab:60:
0c:2f:e1:77:97:b3:6a:f3:1f:34:90:6f:53:26:00:
b5:5a:7d:e9:a4:6a:6e:c4:7b:4e:72:79:e4:a3:7e:
03:e8:52:d8:8d:81:02:39:41:4c:19:74:7b:a0:24:
e9:fa:de:6a:86:c8:d2:8f:18:11:e6:01:42:dd:75:
1b:6e:c9:43:5d:c5:1a:db:44:48:4b:b3:64:19:02:
a8:6a:55:e7:3a:ac:e0:5e:d1:25:a9:26:72:46:21:
a6:04:c4:58:97:26:bb:fc:ec:95:7f:6c:dc:3b:7f:
89:9f:0f:71:02:63:39:bd:fc:00:1a:a2:e8:a5:bf:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:B5:0F:F0:AF:85:34:29:24:8A:CC:9C:10:52:53:19:AF:37:53
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fsO1D_CvhTQpJIrMnBBSUxmvN1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
18:b6:62:2a:62:dd:c3:5a:9b:2b:1b:13:89:55:a1:d0:eb:73:
c1:91:c2:b7:5c:3e:da:d8:f9:17:e7:8f:52:47:56:ab:f4:0c:
b3:ba:3e:66:3d:bf:22:04:2f:15:00:22:66:52:59:9b:38:75:
e1:8a:4d:90:ee:28:c9:67:52:a8:96:eb:3f:8e:ba:d9:45:76:
db:d1:37:59:a6:4a:94:05:a5:30:4e:b6:6a:4e:46:1d:4a:e7:
3f:b8:48:92:fe:04:10:ad:d6:5b:6e:54:08:77:35:89:9c:17:
3a:e3:6d:88:72:94:ab:39:7a:d7:ae:21:af:29:13:6c:f4:b7:
ba:ee:e6:c7:df:79:90:33:aa:2e:f6:20:b2:f6:cb:7c:5b:6b:
d8:be:f4:61:2f:39:5b:53:f4:af:06:0f:3f:76:db:41:6c:76:
93:31:54:b2:4c:50:16:ea:50:37:17:f3:32:81:10:f5:75:d3:
2c:3a:dc:07:41:ac:9a:48:52:f1:3a:a3:c1:99:bb:1e:39:65:
cb:eb:93:c5:cf:68:17:5d:69:7a:92:61:6e:f3:f1:2c:15:30:
f7:77:25:8e:01:c8:61:91:ec:27:f9:4f:8c:21:af:77:c5:c9:
75:cb:53:b6:68:6e:c6:5c:84:21:23:0d:e9:f9:f9:39:ef:8b:
6c:d8:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org