Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/JddSqasNH5UnCi1OtVab1U82gN0.roa
File: JddSqasNH5UnCi1OtVab1U82gN0.roa (raw, json)
Hash identifier: WPNUy0PBTicVrGt2FiJwsrNpfjuCeoOmodSS98eDhmI=
Subject key identifier: 25:D7:52:A9:AB:0D:1F:95:27:0A:2D:4E:B5:56:9B:D5:4F:36:80:DD
Certificate issuer: /CN=8c1571ad2108d8e6999f2780f89576ee097593e1
Certificate serial: 093B9DA8
Authority key identifier: 8C:15:71:AD:21:08:D8:E6:99:9F:27:80:F8:95:76:EE:09:75:93:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBVxrSEI2OaZnyeA-JV27gl1k-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/JddSqasNH5UnCi1OtVab1U82gN0.roa
Signing time: Sat 01 Jan 2022 03:55:38 +0000
ROA not before: Sat 01 Jan 2022 03:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28889
IP address blocks: 193.187.254.0/24 maxlen: 24
193.46.102.0/23 maxlen: 23
193.46.101.0/24 maxlen: 24
193.46.100.0/22 maxlen: 22
193.187.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154901928 (0x93b9da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1571ad2108d8e6999f2780f89576ee097593e1
Validity
Not Before: Jan 1 03:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d752a9ab0d1f95270a2d4eb5569bd54f3680dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:be:ac:17:2c:40:94:c9:3e:a8:22:00:89:
ab:af:5e:8f:ac:14:21:7c:e1:e5:f7:e5:b6:59:30:
e2:1f:8e:fb:a1:87:3e:4d:09:7a:bd:36:72:a1:c0:
e3:e0:18:39:30:e2:eb:36:fe:f1:fa:ea:3e:2c:7a:
ee:91:a5:fc:d2:20:44:ec:40:7f:3a:ac:ea:cf:92:
dc:18:51:79:32:87:0d:50:d7:a8:b5:14:3a:8e:6c:
80:a3:25:8b:6f:94:32:3f:62:88:f6:f9:b8:07:67:
cc:4f:98:c2:e4:33:09:8a:83:b9:98:d6:aa:d4:76:
e3:a8:5d:1b:a0:81:c8:d4:b0:f5:b5:b5:64:7a:77:
7e:e1:0a:5e:1e:85:fd:26:a7:c5:d3:10:95:88:d6:
29:1a:5a:10:7a:14:3d:2c:02:06:05:62:43:45:0c:
2b:37:a4:3c:94:a0:19:0d:2c:6f:81:20:b6:4a:f4:
84:9f:70:99:f6:90:99:e0:28:cb:b9:b1:6e:7f:6c:
a0:41:2a:b0:c6:e3:a1:80:bd:03:bb:50:08:a8:b3:
9a:b2:67:49:18:ab:14:ff:5e:e7:61:8d:43:ec:60:
e5:8a:29:bc:53:54:20:b3:3f:ba:6c:34:81:22:14:
f6:ba:f2:66:71:d7:6f:04:c6:38:83:9a:c1:2d:78:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:52:A9:AB:0D:1F:95:27:0A:2D:4E:B5:56:9B:D5:4F:36:80:DD
X509v3 Authority Key Identifier:
keyid:8C:15:71:AD:21:08:D8:E6:99:9F:27:80:F8:95:76:EE:09:75:93:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBVxrSEI2OaZnyeA-JV27gl1k-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/JddSqasNH5UnCi1OtVab1U82gN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/158fe1-176a-4f09-8ade-99fd1ab2fbe8/1/jBVxrSEI2OaZnyeA-JV27gl1k-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
5a:9c:01:70:bb:10:2f:c3:06:7e:9f:c5:8a:47:52:f4:fa:ab:
fe:2d:19:ad:9e:d5:ad:c4:17:b4:87:36:7c:0c:2a:8b:28:86:
e8:27:3a:81:a1:38:16:1e:02:8e:4a:7e:37:33:27:28:10:94:
8e:50:f7:f1:03:42:b5:88:1b:3c:b2:b0:55:b7:d6:11:d2:56:
c3:5b:83:84:93:58:0d:df:55:97:1e:57:b3:19:b3:52:66:ff:
98:ee:01:1c:4a:17:b7:8a:1c:44:62:3a:47:a8:b9:94:3d:5e:
9d:81:3b:06:7d:19:ea:e9:0e:ef:66:cb:87:8d:d8:43:e4:5f:
5e:92:18:8f:ac:d3:a4:9b:7a:df:12:c9:ed:75:d3:0c:3e:d4:
5b:b9:21:14:8f:33:f8:72:3c:c0:c7:3f:1b:67:81:74:a5:11:
2a:74:1c:76:d8:45:59:23:5b:48:b8:04:c4:48:20:a1:2c:e0:
08:c5:e0:d7:29:8b:4c:34:26:82:ce:06:58:fe:10:56:42:c0:
45:8e:65:76:86:06:32:ff:1f:dc:42:35:ba:ff:5d:89:5d:fe:
66:2d:49:16:50:b5:1d:94:93:ea:bf:07:95:bf:d7:55:e2:93:
75:7a:b8:af:11:df:aa:60:a0:f8:fb:10:cb:50:4d:4b:11:89:
e4:60:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net