Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa
File: fvi0MxC35F552BdU7i4QsEbVPWQ.roa (raw, json)
Hash identifier: oh5hWeQnNSF6LkMBfxA3QlE6qG5MHUzoDpA6WlIYttU=
Subject key identifier: 7E:F8:B4:33:10:B7:E4:5E:79:D8:17:54:EE:2E:10:B0:46:D5:3D:64
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0181F72D500A5127DE239B5A8214E9BAF1B5
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa
Signing time: Wed 13 Jul 2022 10:49:10 +0000
ROA not before: Wed 13 Jul 2022 10:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 193.160.72.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 25
212.69.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:2d:50:0a:51:27:de:23:9b:5a:82:14:e9:ba:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jul 13 10:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef8b43310b7e45e79d81754ee2e10b046d53d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:1e:0e:36:38:5a:66:da:dd:0c:31:6b:83:
de:0a:28:ad:4e:ad:94:2b:9b:fb:1a:30:9a:0f:ff:
ee:3a:99:37:52:0e:cb:58:74:a3:fa:ba:1b:1d:94:
3c:a1:d0:e7:04:f4:93:da:f6:28:c1:13:02:cd:32:
47:fc:01:5b:96:6a:6c:26:76:5b:c7:8f:9d:80:8e:
97:bd:09:8a:26:68:b3:a1:bd:da:23:14:5c:5c:b6:
36:74:62:06:06:1a:71:b4:b6:4c:2b:19:70:e3:5b:
39:61:cb:4c:90:31:f5:a6:73:4f:28:76:ea:f3:37:
e1:06:03:a7:6e:b2:db:4c:10:f1:6a:f0:e4:d3:8c:
03:73:a1:0f:8d:86:78:4f:fc:58:b8:ac:f5:79:92:
e1:52:8c:a5:7b:ba:69:1d:53:50:d3:31:b5:73:c9:
ca:eb:88:d4:c8:75:42:c5:ba:11:ea:c4:fa:5f:5c:
cf:41:8b:ec:8b:8c:dc:df:90:1c:8b:ac:02:a2:8e:
e3:05:1a:fa:28:ee:90:31:5f:07:49:30:54:eb:6c:
b9:71:60:80:ca:09:5b:58:c6:b2:da:7f:0e:b3:81:
6f:34:ca:98:a4:e5:dd:24:5a:ae:f0:30:39:e1:cb:
f4:e3:f4:21:53:ba:c1:65:5f:bd:ee:bc:78:d2:8d:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:B4:33:10:B7:E4:5E:79:D8:17:54:EE:2E:10:B0:46:D5:3D:64
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/fvi0MxC35F552BdU7i4QsEbVPWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
193.160.72.0/24
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
92:55:42:8e:09:07:7a:9b:4f:af:dc:d5:34:f4:0d:64:fe:36:
05:f9:9b:c2:46:81:10:22:4f:1a:59:02:d3:ef:cd:bf:a9:59:
52:2f:f9:ff:81:a9:16:85:fd:9d:db:5c:bd:ff:c5:de:f2:7c:
07:51:16:b5:09:9a:14:9a:44:fa:a5:02:6f:db:78:51:d3:cf:
ec:5a:a9:e8:a5:b7:45:56:0c:f3:50:ef:3b:10:6d:38:05:98:
57:fb:3a:52:ef:66:d5:a1:1f:8f:e4:7f:31:6a:b0:f4:d5:1a:
89:c0:ec:ee:19:ef:43:7b:32:32:d2:33:1b:69:91:4c:48:a6:
1c:6f:8c:11:9d:92:c5:92:d7:06:4a:4b:c2:d7:e8:c8:6c:b4:
39:04:5f:51:20:d9:2a:b6:6e:fe:fb:be:5d:dd:7f:02:ec:80:
c5:3a:b2:c8:ff:fb:c2:47:2b:a4:09:46:fd:0e:c7:fa:eb:ec:
6a:b8:d6:ee:e9:f0:66:e7:14:67:d5:11:0e:5f:c2:ec:6b:48:
e9:02:7f:91:43:0f:1c:9f:4d:09:e4:94:70:90:66:93:e2:f0:
64:bb:9b:31:4c:aa:4d:fc:25:a5:8e:8f:93:38:d7:74:48:f4:
92:e4:80:ef:27:2d:44:ec:f9:55:ae:9f:f0:9c:d1:f8:84:19:
18:85:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net