Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/50Gui1HPFFEQma43cI1ppuI9SEg.roa
File: 50Gui1HPFFEQma43cI1ppuI9SEg.roa (raw, json)
Hash identifier: V871xOK6OyH5MTnkdK7Hl7VyimdhvnAFcg2GuZez26k=
Subject key identifier: E7:41:AE:8B:51:CF:14:51:10:99:AE:37:70:8D:69:A6:E2:3D:48:48
Certificate issuer: /CN=df8b9a703c54d23cf27fe711a7b059dbbd0fa639
Certificate serial: 01761307
Authority key identifier: DF:8B:9A:70:3C:54:D2:3C:F2:7F:E7:11:A7:B0:59:DB:BD:0F:A6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34uacDxU0jzyf-cRp7BZ270Ppjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/50Gui1HPFFEQma43cI1ppuI9SEg.roa
Signing time: Sat 01 Jan 2022 11:02:38 +0000
ROA not before: Sat 01 Jan 2022 11:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 702
IP address blocks: 91.240.72.0/24 maxlen: 24
185.42.233.0/24 maxlen: 24
185.42.232.0/24 maxlen: 24
2a04:7040:1471::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24515335 (0x1761307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8b9a703c54d23cf27fe711a7b059dbbd0fa639
Validity
Not Before: Jan 1 11:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e741ae8b51cf14511099ae37708d69a6e23d4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:dc:5d:06:32:8f:da:1b:b6:50:14:86:ef:
75:0a:e3:28:5f:dc:18:04:fa:c4:03:64:f9:62:31:
12:e7:dd:6f:d5:2a:f1:62:65:23:fe:54:a7:7d:e7:
6b:9e:1e:b0:92:ce:ac:69:44:81:9f:7c:76:9b:60:
17:4c:d4:d9:c4:f5:1e:4d:d1:de:44:2e:51:cf:fc:
a0:ae:bd:ca:23:b0:82:41:70:04:dc:4c:03:61:13:
b0:90:ee:64:4b:5e:c0:21:86:6c:84:23:74:8c:3b:
de:46:ac:33:b7:56:eb:52:8c:af:11:8b:d1:30:ab:
0d:c5:bd:10:e5:3d:d4:45:65:6c:6c:24:b8:44:f2:
75:38:9b:ac:6f:0a:d5:42:c4:a4:74:33:bc:94:3a:
b9:74:37:14:b3:64:9a:4f:c7:4d:de:66:13:f9:d8:
f8:ec:bd:8c:7d:fb:e2:9e:d3:c0:67:0b:e0:b0:f0:
7b:32:64:34:07:89:28:67:02:ab:38:60:97:f3:a3:
b0:a1:de:81:91:35:58:95:e1:66:f9:b4:1e:6a:1c:
18:f9:db:0c:80:14:19:28:90:49:f2:77:8c:66:8f:
0b:fe:10:3b:44:d4:99:58:52:27:39:f9:14:2d:98:
6c:ae:19:a2:8e:11:74:1e:1b:a3:07:0a:4b:62:e8:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:AE:8B:51:CF:14:51:10:99:AE:37:70:8D:69:A6:E2:3D:48:48
X509v3 Authority Key Identifier:
keyid:DF:8B:9A:70:3C:54:D2:3C:F2:7F:E7:11:A7:B0:59:DB:BD:0F:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34uacDxU0jzyf-cRp7BZ270Ppjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/50Gui1HPFFEQma43cI1ppuI9SEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/34uacDxU0jzyf-cRp7BZ270Ppjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.72.0/24
185.42.232.0/23
IPv6:
2a04:7040:1471::/48
Signature Algorithm: sha256WithRSAEncryption
13:7d:78:70:fc:42:5a:87:9c:37:01:13:52:0a:9c:4f:f1:8d:
53:a0:4d:0d:9b:d4:07:5c:9d:87:42:b9:91:89:c6:72:25:0f:
d7:fc:50:b2:dc:fc:ac:66:8f:1d:a0:a0:9c:c9:8f:ad:9f:80:
0f:1f:4f:c7:c6:f0:cb:97:6e:5b:51:26:05:f5:aa:8b:ef:4a:
ab:e9:a0:8e:1c:7c:84:dd:e8:64:29:13:b2:cb:bb:8d:a2:0e:
29:f0:42:c5:5e:e8:75:b4:fc:a9:89:e6:0d:5f:8c:4e:21:60:
70:11:8e:5f:bc:ce:5c:a3:72:1f:86:d9:a8:c3:c5:7d:c9:ee:
8d:cf:7a:45:eb:b3:e9:85:16:93:d9:18:ba:41:ea:be:2c:93:
88:de:b3:6a:ff:29:e4:18:6e:42:f2:ac:a5:10:e3:f5:29:b3:
f2:27:72:22:48:0a:4f:5c:50:fd:a7:1e:c8:da:df:3b:23:7d:
d8:ef:7f:67:99:8b:ef:11:e0:d6:88:94:a9:d3:e9:c1:64:19:
a3:fc:e7:a0:ce:33:ad:ea:e4:fe:dc:14:48:ea:61:00:04:62:
36:85:cf:68:f8:2a:6b:ba:7a:89:33:fd:99:a5:a9:8e:3b:84:
2d:93:29:48:d1:0b:6d:b7:ea:4e:ee:c4:10:ec:ff:c4:a7:54:
a7:f7:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org