Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/hIyEjDAKsLgmlbJVBRF77DbrF60.roa
File: hIyEjDAKsLgmlbJVBRF77DbrF60.roa (raw, json)
Hash identifier: qahxfB+qhxVgOFebCZo8jbsgoaT0XPC214/53L5xmKI=
Subject key identifier: 84:8C:84:8C:30:0A:B0:B8:26:95:B2:55:05:11:7B:EC:36:EB:17:AD
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 091DA522
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/hIyEjDAKsLgmlbJVBRF77DbrF60.roa
Signing time: Mon 28 Mar 2022 22:39:16 +0000
ROA not before: Mon 28 Mar 2022 22:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.160.72.0/23 maxlen: 24
194.28.156.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.28.157.0/24 maxlen: 25
194.104.4.0/24 maxlen: 25
212.69.132.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152937762 (0x91da522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 28 22:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=848c848c300ab0b82695b25505117bec36eb17ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:f5:88:35:2b:64:5e:f8:a7:3b:9d:22:fd:
bb:67:38:7d:80:28:c2:35:ca:76:8c:92:8a:d7:bd:
fb:a5:22:0a:66:31:28:36:1f:48:bf:fb:11:ad:7d:
31:b6:3b:46:a3:cc:d2:02:0c:ab:07:df:04:c0:17:
9d:7f:05:73:a5:87:5a:d7:e9:77:b1:d1:95:60:ff:
fd:34:63:39:a1:c1:07:ff:c5:dc:1f:ab:9f:e2:d6:
76:4e:aa:d7:58:c7:6c:0b:91:f7:05:81:98:d7:d4:
53:6e:41:06:2f:fe:6b:d1:3d:f6:53:03:9d:da:cc:
dc:cb:71:01:17:c2:34:97:7b:66:e7:6c:28:56:cf:
11:d8:54:a7:f7:f7:e0:4e:d3:b4:a1:ba:08:e3:4b:
1a:b9:72:e1:72:dc:a6:89:d5:83:31:34:67:47:d3:
da:37:aa:df:08:0c:34:e8:a7:5f:47:c5:09:a1:e6:
8f:97:71:cf:64:f6:5e:b5:93:d9:e5:d6:45:00:9d:
32:fc:7a:07:45:35:72:22:1f:9d:ee:f7:31:03:3e:
dd:ed:8e:3d:7e:2d:ac:a7:5a:41:a0:b7:ac:58:60:
6b:04:c1:1a:b6:30:5a:a5:57:4d:2e:d6:92:12:dc:
b9:b9:d0:ec:4d:13:36:c3:1f:be:31:78:54:2b:91:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:84:8C:30:0A:B0:B8:26:95:B2:55:05:11:7B:EC:36:EB:17:AD
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/hIyEjDAKsLgmlbJVBRF77DbrF60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.72.0/23
194.28.156.0-194.28.158.255
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
15:c5:05:7c:3b:18:54:d7:19:33:8d:8b:6f:b5:32:c6:63:3c:
44:48:e9:2d:6f:e5:57:32:ba:7d:57:5e:af:8a:df:1d:95:2c:
37:7e:fc:95:2b:d2:20:c0:ba:50:fd:d3:77:f1:61:29:0c:f2:
52:b6:27:8c:b1:1f:e0:cb:35:9d:fd:c3:e2:a4:b0:b8:9c:6f:
5c:69:5f:7c:5c:98:96:ff:54:dc:c3:47:82:86:de:6f:22:2a:
62:24:f2:35:11:93:de:88:87:69:e7:e2:12:56:8e:0d:7e:7e:
63:7d:1d:2a:40:55:b3:6e:cd:f3:2c:d1:ae:39:ab:05:4e:75:
75:20:59:05:30:d8:34:90:88:f0:0c:a0:ed:20:d0:dd:4b:9d:
48:1a:0c:de:b4:9e:f3:45:5b:2b:18:ca:5e:7e:0f:be:28:5e:
10:50:85:10:dd:2a:ce:5b:72:75:5d:28:7a:57:f5:3b:e5:d5:
1d:35:46:ea:a0:1c:e3:b5:24:da:b0:50:62:b9:1a:74:28:a4:
19:23:00:e5:bf:8f:47:5a:cf:67:a1:23:e2:e7:7e:63:94:3b:
c4:23:58:54:09:29:9e:bf:71:61:a9:c4:04:df:08:3a:c0:5d:
75:00:37:94:88:1c:09:24:95:17:25:ad:b1:62:43:5d:7f:2d:
b0:3f:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org