Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/rv4x-2jKDdVCXOld94M84yf4IL8.roa
File: rv4x-2jKDdVCXOld94M84yf4IL8.roa (raw, json)
Hash identifier: oK6wk7weRLPC94x74CbvkvauK7pYn0bzJnuwQor4zHM=
Subject key identifier: AE:FE:31:FB:68:CA:0D:D5:42:5C:E9:5D:F7:83:3C:E3:27:F8:20:BF
Certificate issuer: /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial: 04AE3A9A
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/rv4x-2jKDdVCXOld94M84yf4IL8.roa
Signing time: Thu 12 May 2022 09:10:39 +0000
ROA not before: Thu 12 May 2022 09:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.227.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78527130 (0x4ae3a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Validity
Not Before: May 12 09:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aefe31fb68ca0dd5425ce95df7833ce327f820bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:5f:68:e4:4b:75:a7:c4:81:70:b5:25:d0:
34:fb:37:89:41:2b:47:a8:b4:2e:11:34:0b:21:02:
1b:da:41:20:91:82:ed:fe:f1:3a:d5:f2:8b:78:c8:
fd:30:30:3f:14:53:09:35:06:8b:fd:86:ac:1a:f4:
95:14:45:6f:19:54:53:fa:ad:50:5d:50:25:69:03:
9d:66:24:44:10:8d:36:36:64:3e:9c:55:c0:ac:42:
38:eb:db:00:1a:d9:f6:74:6e:b9:10:79:44:3a:45:
bd:63:96:2c:5f:5a:8c:01:14:fd:04:74:24:f4:1f:
5b:d9:de:a7:29:93:a7:0d:44:bb:89:40:32:d2:0c:
07:27:f4:d5:af:45:c8:77:d9:7d:aa:62:fc:d4:ce:
61:19:d0:91:09:f7:29:32:43:76:97:f6:bb:44:96:
d4:7d:3b:df:ff:bd:02:c5:ac:70:14:e5:07:6d:e2:
95:7b:ec:b5:44:53:04:dc:59:0d:19:f0:44:5e:b4:
4e:ea:ad:af:27:72:c6:fc:34:ad:a1:ba:c4:5b:f3:
ba:21:d1:20:4b:20:c4:42:42:60:eb:ce:80:35:77:
4a:47:90:1c:98:30:b3:5f:82:51:d7:f1:b6:7a:87:
4d:07:c7:12:3b:5e:58:56:d3:f0:a6:45:d3:91:f8:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FE:31:FB:68:CA:0D:D5:42:5C:E9:5D:F7:83:3C:E3:27:F8:20:BF
X509v3 Authority Key Identifier:
keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/rv4x-2jKDdVCXOld94M84yf4IL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
92:27:71:aa:96:1d:92:a9:f2:e8:d4:c0:bf:b7:0d:67:0a:9d:
a2:61:18:b4:7b:9a:d5:4c:49:5c:52:c7:bf:ec:c6:9c:90:dc:
6f:a6:6f:15:82:55:84:ef:d3:91:14:21:82:b2:92:00:01:40:
d2:51:42:55:84:63:a8:9f:84:6f:82:68:f0:2f:de:c4:93:bd:
de:32:9a:8d:49:00:9c:6f:99:36:74:3e:71:3c:f2:da:69:54:
67:41:51:6f:66:27:15:25:fd:0b:b8:e3:c0:40:14:e8:ea:fc:
1d:6a:17:82:16:d9:5d:e8:c5:f2:c6:f2:0e:52:05:2e:1b:88:
a6:4f:6a:f7:0d:7b:84:da:4f:46:ef:c7:e4:47:df:93:9c:e5:
75:2e:52:4f:7e:28:fc:3e:ab:52:5b:14:13:d4:6b:a2:42:05:
a6:54:af:8c:1a:fe:f2:f6:ff:34:35:24:80:55:e4:50:54:ad:
9f:bd:52:80:54:91:ee:f3:2a:c2:16:0e:b0:3e:64:f6:fc:96:
5b:7f:8a:15:23:2b:46:72:50:2d:82:7c:2d:fc:89:3c:e1:5b:
54:8d:02:6c:4b:30:c2:57:7c:80:01:ff:c8:2f:03:18:8c:ee:
8c:68:76:a5:74:71:ee:81:36:5c:fe:09:67:8f:1a:07:07:c8:
74:e5:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org