Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/nslJ4sfV4t3Yp_PKM4mzxXoUyh0.roa
File: nslJ4sfV4t3Yp_PKM4mzxXoUyh0.roa (raw, json)
Hash identifier: /xIhly4RV7CsZRvVYGedkCyBcpYZ7CVkbnyJoC2k8DQ=
Subject key identifier: 9E:C9:49:E2:C7:D5:E2:DD:D8:A7:F3:CA:33:89:B3:C5:7A:14:CA:1D
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01829C027064A1A17F859C6FDBCA62D8C963
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/nslJ4sfV4t3Yp_PKM4mzxXoUyh0.roa
Signing time: Sun 14 Aug 2022 10:59:41 +0000
ROA not before: Sun 14 Aug 2022 10:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 83.97.118.0/24 maxlen: 24
83.97.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9c:02:70:64:a1:a1:7f:85:9c:6f:db:ca:62:d8:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Aug 14 10:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ec949e2c7d5e2ddd8a7f3ca3389b3c57a14ca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:6a:1b:c4:05:2e:fa:e3:cf:8f:4f:1a:33:
b7:3f:a3:5e:d3:7c:73:49:3c:f3:fb:d6:3d:9d:45:
09:09:20:f8:16:f9:bf:7e:5d:7e:d2:0d:8f:b9:8e:
0e:07:50:25:41:39:42:4b:50:22:11:47:d8:06:e6:
97:c2:b0:3e:cc:ea:9a:ee:de:58:fc:ed:f7:9a:21:
cb:81:ac:d6:bf:b8:a6:76:cb:10:d3:90:f9:57:66:
b5:71:51:c6:72:95:00:1b:c4:d2:6a:2a:a7:86:0d:
8d:b5:cd:29:00:9f:52:ad:6f:e8:1e:52:6b:ca:91:
92:61:16:f6:bc:c2:fe:b2:8e:1f:b7:3f:dc:46:c1:
dd:7c:c1:e3:47:62:c9:a4:df:bc:63:aa:38:71:73:
17:f4:b8:2b:4e:cb:5d:26:95:aa:c3:bb:aa:2f:70:
77:94:bd:97:31:cb:0a:46:57:18:f6:33:76:77:ea:
9d:68:86:ad:c7:aa:92:9b:21:1a:cb:e4:99:31:e2:
cc:c3:80:a1:f0:af:3e:41:56:25:65:f2:cc:90:18:
cf:f9:81:ab:66:c6:af:75:8b:9f:e7:7e:97:90:47:
2d:40:c9:b3:ec:4a:73:ca:42:9b:49:c9:68:f1:2f:
db:ac:c2:09:fa:23:c5:2d:0e:fe:aa:9f:f5:75:e4:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:49:E2:C7:D5:E2:DD:D8:A7:F3:CA:33:89:B3:C5:7A:14:CA:1D
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/nslJ4sfV4t3Yp_PKM4mzxXoUyh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.116.0/24
83.97.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:05:34:0c:41:3e:5b:7c:ea:f0:aa:f7:e8:fe:2b:a0:99:09:
2f:ab:98:c1:d0:48:56:16:2c:74:aa:c4:31:e9:42:c9:81:da:
9f:47:be:4f:cd:84:f9:e4:f1:09:de:a5:cc:14:e9:27:c3:a3:
20:a8:a7:bc:5e:41:46:98:af:17:6e:07:6b:b6:df:33:21:1d:
3d:43:8b:86:94:aa:51:fd:34:e2:29:c5:82:ac:45:17:62:bc:
a5:e0:1c:45:3a:8b:1a:a2:98:e7:a2:ec:f1:ed:3d:bc:2b:b5:
b8:dc:7a:85:98:90:ce:15:7d:40:a8:a9:3d:64:98:3c:ab:97:
9e:b4:5f:60:6c:5a:89:dd:06:e0:bc:e5:ec:51:3b:34:72:c2:
6f:35:77:7f:3f:b8:0e:c3:95:4b:49:d1:ec:c8:7a:f5:53:5b:
48:6d:6c:94:a7:33:63:26:d6:60:8b:1c:a5:32:65:94:d9:73:
b8:6c:c0:c0:b1:95:7c:50:e0:27:72:2e:c3:f2:66:b6:23:04:
7a:52:e2:ee:81:5e:80:61:a1:6f:5b:10:0d:1d:8e:72:f9:28:
01:35:60:52:c7:a5:eb:79:1a:b3:55:62:60:14:c4:35:39:7d:
ff:04:d3:27:c1:24:91:2f:86:94:a2:f9:7f:b5:ab:f8:d5:3d:
3f:31:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org