Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa
File: lqwEfBy33mcyXu0RjZwyUQidgLs.roa (raw, json)
Hash identifier: eBZTQCYPD3IANnsVXkE/BLxkW7sLeukeWNTPVebSZBs=
Subject key identifier: 96:AC:04:7C:1C:B7:DE:67:32:5E:ED:11:8D:9C:32:51:08:9D:80:BB
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01838EE1D4B2CF6E7F2FD399A04EE0E9178A
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa
Signing time: Fri 30 Sep 2022 14:51:48 +0000
ROA not before: Fri 30 Sep 2022 14:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.160.72.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 25
212.69.135.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:e1:d4:b2:cf:6e:7f:2f:d3:99:a0:4e:e0:e9:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Sep 30 14:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ac047c1cb7de67325eed118d9c3251089d80bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:e6:a0:8b:1b:3e:3c:dc:25:02:95:93:ce:
1f:50:99:f2:2c:60:6d:29:2c:2c:0d:0a:97:3a:68:
8b:16:9f:6c:b3:b3:49:13:ca:50:2a:f2:d0:31:80:
53:bf:08:9e:3a:fa:15:80:51:2f:82:61:cd:93:2b:
29:f5:9a:1d:c9:83:ec:14:e3:02:9c:44:6a:86:0e:
27:49:55:fb:49:46:a3:27:a0:a8:05:ab:bb:d8:88:
c9:a1:e3:14:c6:63:3e:5e:1e:6d:22:f0:3c:7d:af:
67:45:a6:ef:19:de:8f:55:04:ae:aa:2c:15:a1:54:
6f:58:ae:89:f5:de:ae:8b:57:57:d6:40:7d:4d:fb:
88:fa:22:21:75:9a:f1:72:11:55:dd:4e:01:28:c6:
73:9e:f5:ad:b1:2c:9b:4a:34:1e:f9:fa:0f:e5:a4:
ad:94:65:7d:9c:be:69:3d:e9:03:98:35:00:15:88:
78:3a:28:68:04:08:86:68:3f:f8:2a:d3:1c:69:fb:
dd:fe:87:a7:39:c0:ce:b5:08:38:88:5b:24:d4:b5:
4a:b8:44:0e:e4:b3:b0:74:fa:8a:40:dc:d0:ae:5a:
98:df:71:6b:98:a2:4b:cb:d7:22:ce:cc:e8:d6:eb:
82:9a:43:b6:89:59:ab:5c:b7:58:a2:d5:08:97:73:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:04:7C:1C:B7:DE:67:32:5E:ED:11:8D:9C:32:51:08:9D:80:BB
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqwEfBy33mcyXu0RjZwyUQidgLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.239.0/24
193.160.72.0/24
193.228.48.0/22
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
09:89:f7:99:ff:a7:08:4d:eb:fd:b2:a4:2e:93:c5:8a:06:b4:
07:91:80:ac:7c:b5:fc:7e:a5:4b:1f:cf:96:54:4d:5d:56:42:
ed:7a:e0:3c:4d:7d:bb:62:b8:c7:b5:e3:72:de:0f:38:8f:e1:
dd:f3:84:5f:74:4b:3c:a3:31:bd:4a:f8:7d:6e:50:94:99:31:
ef:0d:c3:c5:c8:7d:f8:de:67:e8:cf:2b:e4:29:b4:e3:09:28:
7c:0b:13:2c:a0:5d:28:e9:a3:f1:d3:cb:51:90:b7:88:5f:c0:
83:dd:50:ca:f6:0f:79:a1:06:03:20:51:6e:a6:4d:d3:4f:dc:
49:cc:67:79:22:a8:b8:ab:0d:7d:4b:1f:f8:0e:fa:e1:e4:ec:
a9:15:96:a1:dc:e8:38:99:41:f3:66:ac:df:ac:67:92:24:bf:
9e:97:23:35:0a:29:3e:1d:47:34:26:14:40:f6:4e:99:45:d7:
e8:30:c3:12:f8:15:a4:9b:79:ea:d7:67:d5:b0:04:1a:d4:bc:
16:21:df:23:e5:c9:22:db:a6:10:e7:c9:c3:bf:0e:58:75:f8:
dc:82:2e:f9:69:2c:f7:bc:9c:40:16:94:78:22:87:49:89:e7:
ca:5e:4e:8f:3e:0e:2a:10:22:69:c9:1c:66:53:ce:52:d6:2a:
79:e3:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net