Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/pQ9K8niQ0n1m1qrhcfDhV-wnc4k.roa
File: pQ9K8niQ0n1m1qrhcfDhV-wnc4k.roa (raw, json)
Hash identifier: 4YrVVvCgUkREGoYSjzI3rBiKXrrXiC3xP4edQbeN/V8=
Subject key identifier: A5:0F:4A:F2:78:90:D2:7D:66:D6:AA:E1:71:F0:E1:57:EC:27:73:89
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0182846ABC97ED8BE88EFA4C0B1E54BE756D
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/pQ9K8niQ0n1m1qrhcfDhV-wnc4k.roa
Signing time: Tue 09 Aug 2022 21:02:43 +0000
ROA not before: Tue 09 Aug 2022 21:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 83.97.119.0/24 maxlen: 24
83.97.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:6a:bc:97:ed:8b:e8:8e:fa:4c:0b:1e:54:be:75:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Aug 9 21:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a50f4af27890d27d66d6aae171f0e157ec277389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:22:6b:20:cd:75:83:94:9f:96:a4:11:f1:
e2:91:da:8c:3c:02:ec:c1:12:12:d0:0f:16:fd:a0:
f8:51:e9:64:00:81:36:49:8a:6e:55:52:ab:2c:7d:
dc:76:39:bc:02:a7:fa:78:79:71:d6:20:66:d7:51:
c3:e8:bc:10:fa:f1:55:5c:69:11:73:d0:c7:04:ed:
48:62:95:b0:83:6b:a1:17:2a:ed:43:07:e1:1a:35:
37:0a:d4:24:97:02:2a:b4:1b:6c:20:93:98:ad:a0:
4b:36:c7:4b:d5:c0:9d:61:13:7e:f9:00:ea:96:7c:
ac:6b:63:a9:7b:20:6c:fc:2e:af:39:54:a7:9a:9d:
b8:89:2a:6e:ce:25:37:ea:6b:e5:c7:8c:7d:5c:4e:
cd:3c:84:5e:67:c1:71:21:b7:07:1d:bc:44:b3:5d:
66:b3:81:c6:9d:a4:e0:fd:e5:39:9b:79:50:0f:8f:
4b:40:1f:99:cd:fd:af:b4:ab:b6:a6:79:85:3d:cc:
35:e6:06:55:83:11:2f:5b:f1:b7:0d:d3:ed:e4:64:
bd:a6:3b:d8:6b:f2:c4:cc:b6:8d:dc:49:60:d2:27:
17:70:47:70:0e:d7:b8:c4:5b:98:c9:4e:d9:92:ed:
53:46:9e:9b:fa:b2:1a:34:8b:c4:19:b6:54:70:e7:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:4A:F2:78:90:D2:7D:66:D6:AA:E1:71:F0:E1:57:EC:27:73:89
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/pQ9K8niQ0n1m1qrhcfDhV-wnc4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.117.0/24
83.97.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3e:cb:f5:17:6f:88:f8:06:f6:63:a9:83:8d:1a:42:b3:35:
06:0f:f3:36:3f:74:b0:c7:8f:2c:fd:e5:6c:ab:99:da:16:97:
c9:a8:b9:39:d6:d1:bc:57:76:fe:9e:0e:20:63:6d:50:d2:3c:
75:d0:26:50:8d:34:c4:e4:4a:61:01:15:84:5e:9b:29:45:df:
49:87:08:e1:78:a0:99:06:b7:1a:56:19:68:6b:5f:47:83:8a:
54:c9:09:a6:3b:8b:fb:71:35:1d:02:af:a9:7c:e9:2c:5c:ca:
ec:42:0f:0f:a6:31:90:6a:ef:83:f0:a9:9a:16:62:1e:e8:fb:
68:d9:4a:26:0f:d7:61:0e:6b:2b:a1:8d:e3:30:b2:35:b4:fc:
40:97:b3:9a:db:8b:59:d3:c6:77:24:8a:1d:a4:63:a2:e2:d5:
5d:fa:d6:31:00:4f:6f:74:91:2f:bd:c2:d5:24:27:2b:55:20:
92:33:11:1b:05:68:0d:f2:1c:ae:ed:d9:0f:a1:68:a5:53:0d:
66:35:2a:06:cb:2f:fd:1e:55:27:ec:88:e6:67:f4:66:30:0c:
e6:f8:6b:3d:24:16:89:39:61:de:dd:0d:a0:3c:d3:ce:b8:22:
fc:23:08:72:be:3a:2e:ee:08:73:e5:1b:d8:b4:5e:9d:7d:90:
e4:9b:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org