Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/d3AePNPR3dOADuCwcy5yv0AZsUI.roa
File: d3AePNPR3dOADuCwcy5yv0AZsUI.roa (raw, json)
Hash identifier: 94FOTKVO81wXDacYUBwjNyf7PBG6ZX1y3VgyzqXU2JU=
Subject key identifier: 77:70:1E:3C:D3:D1:DD:D3:80:0E:E0:B0:73:2E:72:BF:40:19:B1:42
Certificate issuer: /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial: 06850712
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/d3AePNPR3dOADuCwcy5yv0AZsUI.roa
Signing time: Wed 02 Mar 2022 23:49:35 +0000
ROA not before: Wed 02 Mar 2022 23:49:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 194.156.112.0/22 maxlen: 24
91.240.163.0/24 maxlen: 24
91.240.89.0/24 maxlen: 24
178.239.22.0/23 maxlen: 23
95.214.84.0/22 maxlen: 22
88.218.144.0/22 maxlen: 24
91.240.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109381394 (0x6850712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
Validity
Not Before: Mar 2 23:49:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77701e3cd3d1ddd3800ee0b0732e72bf4019b142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:77:30:2a:7d:61:71:0f:2d:bb:11:1d:6a:
39:65:f0:ca:94:aa:2f:fd:92:2a:be:40:23:f0:61:
a7:60:6c:18:e0:3e:1c:cf:cc:52:9a:7d:8d:22:bd:
49:28:f3:b4:34:bd:02:ab:d8:68:41:7c:b4:46:1d:
7c:69:a1:9c:df:15:0f:7c:ee:cc:de:dc:fb:b4:5c:
1a:3f:4b:60:0b:69:8a:2a:68:32:63:ff:04:de:4d:
49:2f:3b:f7:2c:0e:30:b6:20:b7:fe:59:d0:ac:7b:
6a:97:c3:2a:cf:7f:71:32:cb:00:f2:9d:23:7f:77:
00:3f:f5:c5:54:08:71:0f:7e:54:83:5f:59:10:a7:
39:31:d5:e0:94:a9:92:23:c0:8c:a8:17:e9:cf:a0:
c8:00:be:f3:10:90:74:05:ef:b0:13:d5:bf:10:17:
fc:e5:b5:00:ad:f0:49:ef:99:44:81:a8:cc:02:c0:
b7:8c:14:db:d5:88:60:61:02:b6:e0:92:fc:1e:14:
03:b2:0c:9b:02:b1:84:2f:e4:3c:1e:5b:5a:25:e3:
6b:bf:9d:97:20:ab:7f:91:66:48:6e:66:d1:84:8c:
89:6c:16:23:75:e1:f4:8f:60:52:3d:aa:93:27:45:
d0:3b:8c:50:1c:e6:bb:34:5e:45:03:99:2e:88:fc:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:1E:3C:D3:D1:DD:D3:80:0E:E0:B0:73:2E:72:BF:40:19:B1:42
X509v3 Authority Key Identifier:
keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/d3AePNPR3dOADuCwcy5yv0AZsUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.144.0/22
91.240.89.0/24
91.240.128.0/24
91.240.163.0/24
95.214.84.0/22
178.239.22.0/23
194.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
22:25:3b:b0:75:28:1c:61:3e:9b:ab:78:23:d6:9b:c6:8d:e4:
61:97:76:36:8e:9d:c3:ce:42:b9:f0:14:0b:15:45:0f:dc:4f:
bb:1c:0f:6c:6f:18:ec:bb:de:cc:3d:19:4c:88:37:0f:5a:8f:
d6:ce:a5:49:c1:bc:1c:5d:0a:a3:6a:9a:86:c8:a1:5d:82:93:
c5:0d:ee:26:17:7f:45:24:91:9f:b7:7a:06:1c:e4:52:4a:0b:
16:4f:e8:0c:eb:e0:54:64:06:2e:6d:57:ae:00:66:c9:1a:16:
92:7b:76:18:ce:92:57:db:bb:c4:9a:d5:8f:7b:a8:68:29:08:
7b:5d:c6:9d:a8:1b:2a:59:b4:40:0c:33:ba:2f:05:e1:57:67:
15:aa:72:9c:85:5f:0d:d8:4e:71:8d:c1:0f:15:24:bd:94:05:
0d:99:dc:31:2b:2e:f6:47:4b:d9:ee:b3:98:ca:b2:35:e0:96:
0d:28:d0:34:98:e7:24:b4:05:eb:dc:22:8b:ac:fd:0b:06:91:
f2:95:5a:38:1f:77:bb:67:70:6d:1c:01:5d:24:03:a3:ab:c7:
6a:bf:3c:6d:c1:41:37:6d:69:9f:07:f5:48:f7:70:f6:e2:a9:
5f:41:6e:ba:97:bf:12:04:52:f8:92:41:ab:46:97:4b:3c:d6:
80:14:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org