Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: tb3YQPgjkcRxTgP5D1W6hCji1CWJHRHXjgGJZ5GNeJw=
Subject key identifier: 2F:AB:9B:92:C0:60:93:6E:E2:FB:C3:C3:84:8A:5F:35:D5:F9:97:0A
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 64C74E0218E30257AB2F0246AFEB9CF7481084CE
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS7018.roa
Signing time: Tue 06 Jun 2023 09:40:29 +0000
ROA not before: Tue 06 Jun 2023 09:35:29 +0000
ROA not after: Tue 04 Jun 2024 09:40:29 +0000
asID: 7018
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c7:4e:02:18:e3:02:57:ab:2f:02:46:af:eb:9c:f7:48:10:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:35:29 2023 GMT
Not After : Jun 4 09:40:29 2024 GMT
Subject: CN=2FAB9B92C060936EE2FBC3C3848A5F35D5F9970A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:3d:c7:c1:6b:69:76:45:bc:93:30:8e:e9:
56:29:84:57:23:a4:74:4d:74:55:5b:2c:93:9b:fc:
b5:cd:97:05:71:f7:b4:93:85:83:1e:b3:67:5b:58:
3d:bf:98:fb:24:3b:1c:46:3c:e8:8a:12:7c:f5:d0:
58:92:20:d6:cc:db:75:3e:32:cf:f3:52:45:d1:51:
11:3a:cd:ef:b5:36:d1:5d:b4:c2:9f:c8:be:25:55:
e1:25:ab:2d:e9:29:1a:0e:c7:be:6a:1e:b0:0f:77:
c2:cb:15:64:0f:65:9d:c9:85:0c:76:f6:cc:0e:b9:
e7:4e:bf:27:4f:49:ee:99:6d:a2:7b:f1:de:8c:8d:
bd:e7:2a:d1:2e:13:cb:82:66:eb:58:d7:53:60:23:
fd:a7:9c:fa:d5:75:10:da:1a:bc:e8:aa:c1:cb:29:
1b:67:4b:14:e4:80:b5:70:d4:07:cb:db:46:82:d7:
4d:d9:55:07:7a:a6:8c:bb:41:cd:1f:c6:60:c8:31:
95:6d:68:fd:73:a0:04:70:fb:2c:ee:df:90:20:f0:
df:f0:50:a4:2e:af:76:b7:af:41:74:36:4c:cb:52:
07:c5:cc:97:51:19:28:dc:d9:c8:d5:6f:c0:76:c5:
d4:b7:ed:48:bd:22:c9:b0:e4:73:3c:fc:c3:a3:a9:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:9B:92:C0:60:93:6E:E2:FB:C3:C3:84:8A:5F:35:D5:F9:97:0A
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.81.0/24
89.23.84.0/23
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c8:3f:d1:40:b3:f3:6d:35:74:1b:03:58:60:b0:b4:4e:93:
1d:d8:f7:fb:43:c3:f0:9c:45:1d:ad:40:5a:5d:d8:a2:da:78:
13:1b:d1:c4:de:40:3a:33:f5:d4:ad:c5:a9:5b:ab:ee:73:f2:
9f:35:e3:16:45:87:e7:33:1e:41:3f:99:8e:1d:85:6d:6c:de:
a4:4d:ee:5f:2e:fa:91:b9:5f:ec:45:3e:f4:83:e7:4e:f2:08:
69:2d:58:44:00:b4:35:60:f6:77:8d:ba:a3:82:bf:11:b8:17:
ce:e4:9e:df:d8:29:54:d1:f0:d5:ff:74:bd:0e:c1:ed:41:55:
81:85:30:9f:37:f2:09:f5:d5:ca:47:1d:e0:55:7c:56:77:ef:
b2:cb:2e:ab:c9:2c:9f:a4:f1:d5:7b:33:2a:5e:0e:17:51:de:
dc:61:ac:07:b6:b5:47:ec:da:4c:b0:50:43:49:43:af:f8:12:
c1:38:73:5e:e2:4c:e2:a8:d6:56:b7:d3:27:d5:bc:0e:de:40:
1e:19:2c:2a:78:ff:29:9b:72:d1:ed:42:b8:06:f7:bd:43:68:
dd:cf:1a:f7:70:63:7d:33:81:3e:1e:14:1c:85:c6:20:33:d1:
7a:e8:d8:d4:97:c0:8f:c8:85:61:f1:cd:26:c5:89:7f:e5:b3:
8a:a7:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org