Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oTwRCuUl-K6b0EBiSrTvsPScqT0.roa
File: oTwRCuUl-K6b0EBiSrTvsPScqT0.roa (raw, json)
Hash identifier: 0Koq3jnBkJvsLmr8aK8vbOamZLTPcQdwZqHN750/csM=
Subject key identifier: A1:3C:11:0A:E5:25:F8:AE:9B:D0:40:62:4A:B4:EF:B0:F4:9C:A9:3D
Certificate issuer: /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial: 03EA16E5
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oTwRCuUl-K6b0EBiSrTvsPScqT0.roa
Signing time: Sat 01 Jan 2022 09:56:45 +0000
ROA not before: Sat 01 Jan 2022 09:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 217.74.22.0/23 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65672933 (0x3ea16e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Validity
Not Before: Jan 1 09:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13c110ae525f8ae9bd040624ab4efb0f49ca93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:3b:03:34:b3:bc:c1:a1:fa:1a:8f:df:59:
26:f7:8f:45:90:d4:c8:26:cb:df:48:36:a6:c0:1c:
ee:a1:2f:6e:ea:13:93:f2:2c:32:9e:28:0c:9b:34:
b3:07:8f:26:8c:4d:58:b9:a8:12:ad:8a:4d:6a:4e:
64:28:4a:0e:3b:09:21:11:6a:0f:f5:97:93:fd:fd:
77:20:61:fd:46:33:2b:fc:78:84:79:c3:b5:a7:1b:
3f:5b:be:a7:4e:f2:40:bc:44:59:0f:32:57:44:f0:
c7:79:c0:fb:8d:fe:a8:30:8b:c2:10:23:01:ae:f2:
9e:0b:84:1b:10:30:f9:ba:c8:d9:6c:9a:21:db:87:
b9:9a:7b:0c:1d:9d:d1:9c:5e:04:8a:ad:1c:98:56:
8e:6a:2d:d7:a3:ec:56:1a:57:5e:62:e9:47:65:d0:
da:be:3a:32:ff:a9:de:f5:1e:ac:fc:00:79:51:d3:
6f:73:6b:92:41:5d:66:65:4d:00:62:9b:01:94:d8:
c3:d9:f1:85:9e:5b:53:8c:54:95:5f:ee:d0:fb:93:
ee:c5:cc:2b:73:fd:bf:63:f9:e8:08:12:98:87:5f:
f7:f8:5a:40:13:b4:46:40:0c:e7:b9:4b:49:9a:88:
75:3c:08:76:cb:23:17:f0:eb:8b:de:10:fa:cf:1e:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:11:0A:E5:25:F8:AE:9B:D0:40:62:4A:B4:EF:B0:F4:9C:A9:3D
X509v3 Authority Key Identifier:
keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/oTwRCuUl-K6b0EBiSrTvsPScqT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
0e:10:d6:98:77:3b:87:bf:6e:6c:a9:38:cd:88:92:87:2d:bf:
ab:27:09:a2:4b:1e:23:00:18:a4:64:eb:c5:23:2e:e0:dc:06:
34:6c:35:35:63:0a:f8:0e:63:83:0b:07:6a:3f:4d:f1:c2:10:
74:a8:01:1e:6d:04:b2:68:3d:22:70:50:73:2e:f2:90:13:66:
5c:37:ee:5c:28:8b:af:ac:57:b7:ad:ca:2f:d1:25:82:2d:cb:
1e:67:40:df:c9:48:0b:4c:d7:19:7a:8e:f3:89:80:d5:c9:e0:
27:af:81:6f:62:58:f5:4e:bc:a8:ea:9f:01:71:6d:60:8a:07:
78:31:ed:c1:4b:81:97:1a:27:2f:b8:3a:12:fb:75:61:bb:da:
e2:dd:5a:5d:96:ba:84:14:40:56:0a:81:a7:b1:97:92:fe:82:
2e:58:69:06:57:72:f4:63:2b:3c:c5:06:af:ac:26:0b:30:37:
5a:34:7c:ac:92:26:5b:4a:22:2c:1c:45:0f:da:b1:a2:49:2d:
d6:66:01:f3:5d:80:83:4d:1d:34:72:4b:53:11:90:8e:dc:b7:
b8:96:bb:4a:3b:a1:72:56:f0:fd:43:24:61:87:c0:86:41:c3:
b1:16:28:85:a1:61:1c:e0:5d:b2:58:ef:38:f2:98:a1:97:2c:
86:5b:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net