Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/1KIaSig-BSSVXw9eH-ZA61tl9xE.roa
File: 1KIaSig-BSSVXw9eH-ZA61tl9xE.roa (raw, json)
Hash identifier: ntJtcn6DJm2yO/FSJ6nCilsyw1mslQC+6MsRFLWt5ls=
Subject key identifier: D4:A2:1A:4A:28:3E:05:24:95:5F:0F:5E:1F:E6:40:EB:5B:65:F7:11
Certificate issuer: /CN=39797feced2b687ef946b57539dd0fe54d3d1ba2
Certificate serial: 089A5274
Authority key identifier: 39:79:7F:EC:ED:2B:68:7E:F9:46:B5:75:39:DD:0F:E5:4D:3D:1B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXl_7O0raH75RrV1Od0P5U09G6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/1KIaSig-BSSVXw9eH-ZA61tl9xE.roa
Signing time: Sat 01 Jan 2022 14:57:29 +0000
ROA not before: Sat 01 Jan 2022 14:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41959
IP address blocks: 195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
193.242.146.0/23 maxlen: 23
195.80.229.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
195.93.142.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144331380 (0x89a5274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39797feced2b687ef946b57539dd0fe54d3d1ba2
Validity
Not Before: Jan 1 14:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a21a4a283e0524955f0f5e1fe640eb5b65f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:4a:64:8e:b9:53:6f:76:02:4d:d1:f8:b4:
49:3e:db:3f:dc:45:cc:20:0f:31:dc:89:45:aa:c0:
0c:b3:35:2b:3b:37:91:66:1e:5d:a3:2d:f7:34:42:
e3:f3:97:74:3a:29:81:c9:5f:03:27:45:fa:c3:5d:
dd:f2:00:27:3d:3c:1f:8b:93:75:a5:74:10:4f:3a:
67:be:0f:84:19:31:46:4c:3c:f9:53:b6:0a:e1:ce:
f1:86:cb:77:36:4b:a8:ac:48:52:73:25:cd:a3:a8:
c1:de:9e:1f:37:11:d9:96:13:c3:59:05:42:bd:af:
f2:3b:ec:2a:a7:5c:49:5b:be:66:50:94:8c:60:80:
bb:1e:0f:88:46:04:f5:0e:4b:30:fc:46:17:fe:2b:
f0:ea:ab:79:7b:de:3b:b2:42:59:01:60:a9:41:6a:
2b:e8:71:38:0e:b5:db:e2:0a:fd:61:77:f3:0c:f1:
a0:57:1d:e6:e3:a5:a0:2a:3c:c4:7a:66:9b:13:85:
c4:88:c5:b4:1a:d1:83:ea:f9:7b:c2:1c:aa:61:2b:
05:04:89:2d:45:fb:ca:06:5e:74:19:0a:ff:8c:21:
f0:7a:4b:b0:fe:70:9c:20:ab:d0:39:2b:3c:bb:e5:
16:ca:53:51:bd:8b:d6:04:b9:38:8f:75:90:08:d5:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:1A:4A:28:3E:05:24:95:5F:0F:5E:1F:E6:40:EB:5B:65:F7:11
X509v3 Authority Key Identifier:
keyid:39:79:7F:EC:ED:2B:68:7E:F9:46:B5:75:39:DD:0F:E5:4D:3D:1B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXl_7O0raH75RrV1Od0P5U09G6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/1KIaSig-BSSVXw9eH-ZA61tl9xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/OXl_7O0raH75RrV1Od0P5U09G6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.96.0/23
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:35:7e:50:2c:e7:2b:ac:33:12:16:dd:47:c0:8c:f7:c4:b6:
6d:25:34:f2:40:d7:8b:15:4c:17:13:e9:7e:8f:2a:98:42:e9:
55:fb:b1:74:93:87:07:0c:2f:19:8b:17:40:a2:ae:fd:dd:6d:
9c:89:a2:02:ba:35:c8:0b:89:6a:3c:e6:d2:57:b1:f8:18:02:
57:0b:2d:8d:5a:9e:7c:ae:9c:8f:42:86:e1:b5:95:da:63:69:
15:37:32:ec:be:b1:a9:64:86:a5:66:90:4b:d2:11:ab:01:6c:
d8:da:3d:6c:04:fc:1b:8d:3e:98:c1:98:d3:f3:7d:7f:69:45:
5d:62:d3:64:1d:8e:7c:c5:f6:56:15:ef:c1:ba:c6:ce:18:c0:
3c:c4:ed:49:5a:84:f9:50:2b:d6:0d:bf:b3:35:99:78:7c:4a:
2f:54:02:7e:de:a6:b2:3a:cd:76:f9:ef:97:23:ca:0a:59:40:
ef:19:f6:6d:55:b2:4f:b3:ac:16:b3:f3:8b:97:5c:70:e7:c9:
5a:3b:13:6e:aa:b3:a2:41:2b:1d:50:9c:93:d7:16:9d:22:29:
1e:20:b8:83:ed:83:07:4e:38:2b:0a:00:bd:98:05:fa:a5:cd:
12:53:b1:89:8b:bd:9a:af:ac:33:a0:4c:ff:fc:d6:bf:36:ff:
19:fa:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org