Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/xsRJ1EnCXwOGKR0HCZ9IL2tghWg.roa
File: xsRJ1EnCXwOGKR0HCZ9IL2tghWg.roa (raw, json)
Hash identifier: 623Zqm5X5Ixp1LbCVwG8Q/1BYkC0V0daUxg9cgWPXxs=
Subject key identifier: C6:C4:49:D4:49:C2:5F:03:86:29:1D:07:09:9F:48:2F:6B:60:85:68
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01857094FD8226F9181B3DD7A9B2109D6003
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/xsRJ1EnCXwOGKR0HCZ9IL2tghWg.roa
Signing time: Mon 02 Jan 2023 03:44:50 +0000
ROA not before: Mon 02 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 83.97.119.0/24 maxlen: 24
83.97.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fd:82:26:f9:18:1b:3d:d7:a9:b2:10:9d:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c449d449c25f0386291d07099f482f6b608568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:00:10:31:af:7c:89:f3:c1:27:77:20:d7:
22:1e:de:66:c5:d6:b3:20:e3:3d:74:24:5b:d2:7d:
36:72:3e:80:de:d5:cf:c9:89:0b:f2:7d:07:bf:0f:
28:0b:b9:1d:f3:9c:2b:d6:f1:8c:db:63:b6:d4:10:
71:bb:35:a1:ec:a5:9d:8d:58:7a:ff:ea:a0:05:e6:
55:f0:d5:73:f6:00:f2:d5:f2:cf:a9:38:72:49:c8:
5e:b8:f3:3f:97:96:5f:e9:6d:c0:06:44:53:d5:38:
8f:ce:6f:c6:38:54:3d:dc:9b:5f:77:fc:b7:07:b6:
b7:c4:89:79:bf:65:1c:d8:3e:b7:67:99:c1:73:2d:
10:16:76:d6:f1:9c:a6:b6:4d:a0:35:67:cf:40:d2:
dc:1e:42:98:e9:08:80:15:b3:3a:87:32:6c:d2:d2:
f1:6e:30:29:78:00:3d:e1:40:1a:46:7d:a6:37:02:
71:8b:18:71:42:60:12:2e:8b:f9:20:23:61:ed:07:
25:31:46:f1:3a:80:11:92:b3:04:d4:55:5f:41:ba:
de:59:28:83:fb:0e:3b:5d:83:d9:c7:d6:ce:cb:7c:
98:bd:7d:7d:47:18:61:f1:c5:5e:25:6a:26:9f:25:
9f:32:0f:ec:89:5b:a6:91:25:03:db:50:22:97:d0:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:49:D4:49:C2:5F:03:86:29:1D:07:09:9F:48:2F:6B:60:85:68
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/xsRJ1EnCXwOGKR0HCZ9IL2tghWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.117.0/24
83.97.119.0/24
Signature Algorithm: sha256WithRSAEncryption
20:65:5f:ab:bc:27:60:17:4d:1e:a9:5a:18:84:c7:66:83:f8:
0d:38:54:dd:3b:95:b2:e3:d7:d5:53:4c:67:8e:f0:de:04:0c:
34:ff:81:a5:32:8f:9c:4c:d6:52:b0:88:0b:a2:60:f6:7e:26:
3a:88:58:70:23:6b:29:d6:39:9a:e0:bc:14:2e:b4:1d:eb:31:
7d:e1:4e:b5:a3:e0:ba:ae:24:91:f0:12:9d:73:34:49:4e:f7:
5a:09:af:72:f8:de:70:f7:67:6a:41:a9:63:d9:fc:e3:44:72:
c6:df:c0:77:24:01:9e:79:6b:de:84:ee:70:bd:bd:7a:f7:35:
02:8c:72:3d:63:8e:98:f4:c5:93:f7:0d:9c:fd:d7:4d:49:65:
27:f9:2e:32:d8:71:8e:b6:09:46:46:e4:b2:14:87:1c:57:9e:
ce:e2:1c:a8:f9:92:c2:4f:d0:ef:12:58:53:b8:e5:ee:78:67:
92:85:48:84:ba:f9:6b:ce:c0:9d:d1:ac:83:8c:82:07:9e:0a:
d4:78:4f:37:a4:66:f4:40:24:41:8d:cf:c4:d7:7b:c2:3b:f9:
bc:33:72:68:f3:72:70:f2:ef:55:57:41:12:a2:90:77:6f:bf:
92:8e:ca:01:8e:07:fd:f6:66:f5:fe:9f:45:31:e1:fb:eb:ac:
05:6b:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org