Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/S9rW99MrrKupw-2SemNN_ueczdk.roa
File: S9rW99MrrKupw-2SemNN_ueczdk.roa (raw, json)
Hash identifier: 8Jn0CpFj0KqgSHpmF6+seSQMCaR+rTleG56Cu54a5ts=
Subject key identifier: 4B:DA:D6:F7:D3:2B:AC:AB:A9:C3:ED:92:7A:63:4D:FE:E7:9C:CD:D9
Certificate issuer: /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial: 01856CE642C2A579C01B14E9793072730C0D
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/S9rW99MrrKupw-2SemNN_ueczdk.roa
Signing time: Sun 01 Jan 2023 10:35:07 +0000
ROA not before: Sun 01 Jan 2023 10:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 194.37.80.0/24 maxlen: 24
185.247.118.0/24 maxlen: 24
185.181.10.0/24 maxlen: 24
185.227.108.0/24 maxlen: 24
185.227.111.0/24 maxlen: 24
2a07:3b80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:42:c2:a5:79:c0:1b:14:e9:79:30:72:73:0c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Validity
Not Before: Jan 1 10:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bdad6f7d32bacaba9c3ed927a634dfee79ccdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:9c:7b:ef:c1:c6:14:51:45:5c:e3:2d:18:
26:31:4e:3c:6a:64:2c:4f:fe:b1:82:d5:90:ee:df:
a4:04:88:2b:a5:15:9e:92:9b:41:7d:a1:65:b9:d8:
33:e6:41:59:a8:c5:ff:e8:1c:b3:95:08:d0:33:28:
ac:50:61:c2:a6:8e:76:55:67:52:16:f8:a9:15:fa:
e0:2b:33:a8:14:ed:78:8c:99:ae:d3:93:55:e9:be:
2e:01:35:3d:6e:b7:f0:6d:16:28:ed:d4:2d:e1:ea:
87:77:5d:4d:9b:45:e0:cb:6e:ed:15:4d:9a:fe:7d:
2b:a4:6d:b3:42:31:96:52:a7:1e:f2:9a:4d:f8:6e:
73:fd:b2:49:5f:57:03:75:7a:12:8d:cc:de:01:43:
d4:12:eb:56:6a:3b:16:46:2a:e0:4f:40:79:32:ff:
1d:e5:58:d2:13:c6:19:9a:be:57:61:30:7e:b7:e8:
e0:de:9b:21:0e:b4:3e:7d:a8:6b:82:89:55:13:fd:
7f:1d:b2:4f:a4:83:58:7d:5c:1e:49:b6:72:5b:60:
11:d5:7f:9c:a7:c6:3c:13:55:c1:61:fe:52:87:da:
28:07:b9:00:3f:54:63:78:2f:c2:2f:21:11:22:02:
ae:6e:42:fa:29:ea:88:55:9f:13:c1:34:f2:da:ad:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:D6:F7:D3:2B:AC:AB:A9:C3:ED:92:7A:63:4D:FE:E7:9C:CD:D9
X509v3 Authority Key Identifier:
keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/S9rW99MrrKupw-2SemNN_ueczdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.10.0/24
185.227.108.0/24
185.227.111.0/24
185.247.118.0/24
194.37.80.0/24
IPv6:
2a07:3b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
73:93:c0:61:db:73:3a:71:68:3b:23:7f:f3:eb:71:ce:29:f3:
ee:76:e4:f4:27:d3:f9:38:df:09:2d:ac:cb:21:f4:45:6d:dd:
69:dd:7b:52:74:00:3e:36:4c:24:3b:7a:1f:a8:04:d3:7d:64:
ba:de:ab:09:93:c0:41:b6:6e:fa:2e:25:e0:db:11:0a:94:3b:
60:30:2f:10:6c:c2:a7:49:7d:d0:3b:e5:40:3d:89:97:7b:ea:
12:c5:b3:29:d3:86:03:50:8e:c6:14:db:0b:1b:0d:cd:f2:bc:
01:10:92:95:00:9a:da:7f:64:38:e4:5f:2c:9a:de:08:24:f7:
e0:12:1d:25:67:41:06:33:28:11:fc:e0:bd:82:eb:21:04:82:
c7:69:48:f6:71:ae:52:d7:e5:f6:7b:d4:47:3a:a1:eb:bd:28:
55:86:0a:e6:a0:34:6c:5c:55:44:df:bd:5c:8b:c7:ab:d1:8a:
fd:d7:8e:69:ef:25:f7:bb:8f:9a:5e:bd:c8:ac:70:c2:0e:5b:
a3:f8:a7:af:eb:4c:76:52:ba:c0:ee:1a:f9:07:a3:a3:6b:24:
ba:c2:8e:45:01:aa:d1:3b:1e:78:90:aa:b1:54:63:a2:87:a7:
62:ea:83:52:83:8c:ed:ad:b5:3c:d1:59:6f:e3:7c:32:36:8b:
a7:b4:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org