Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa
File: 6jXXd9WurmB48eF9EMWMYDSKmFI.roa (raw, json)
Hash identifier: qkWF4EJbeD7X2RhLoRKDX58V+bvp/dVZ/TYRgC5KE4E=
Subject key identifier: EA:35:D7:77:D5:AE:AE:60:78:F1:E1:7D:10:C5:8C:60:34:8A:98:52
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 02FD0DAA
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa
Signing time: Sat 01 Jan 2022 13:07:50 +0000
ROA not before: Sat 01 Jan 2022 13:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 213.255.232.0/22 maxlen: 22
213.255.236.0/22 maxlen: 22
213.255.252.0/22 maxlen: 22
83.229.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50138538 (0x2fd0daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: Jan 1 13:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea35d777d5aeae6078f1e17d10c58c60348a9852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:7e:cf:63:b2:c7:18:15:b2:d9:5d:bf:fd:
79:eb:4f:e0:60:c9:a2:be:83:88:3d:0b:cf:43:9e:
38:8f:4c:94:8e:61:51:3e:20:ac:df:eb:d8:63:a8:
fa:2b:4d:e3:23:d0:03:80:1f:f1:dd:3e:14:1e:b4:
da:91:e2:74:72:d6:2d:ae:92:6c:f2:9e:3f:61:b8:
54:d5:a0:04:4a:09:45:2d:7c:3f:a0:98:4e:ef:53:
eb:6d:3b:ec:e3:a1:d1:ae:83:aa:39:84:34:6a:0c:
bd:03:1c:7a:c3:d0:16:c4:f0:6d:a5:be:dc:0e:43:
a4:77:66:34:13:14:8b:68:a8:87:cd:12:88:80:1c:
b8:49:26:a4:5d:09:f3:56:a1:14:8a:e0:a9:b8:3d:
c7:99:61:51:e1:83:01:b5:e2:b8:66:2d:2b:66:01:
4f:56:fe:6b:74:11:8d:72:ab:ea:53:4c:7f:6f:cc:
61:06:80:6a:04:bf:63:70:95:c4:a8:80:d2:72:95:
0c:22:8f:11:47:d6:46:e0:8c:88:68:bf:b8:c4:78:
95:a7:e1:f2:da:46:20:55:b0:fc:32:18:1d:cd:ed:
07:25:34:4d:36:bd:a2:7c:f8:a3:87:a6:96:07:97:
fe:c2:a2:6c:55:07:ab:dc:78:b4:6b:5e:66:11:98:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:D7:77:D5:AE:AE:60:78:F1:E1:7D:10:C5:8C:60:34:8A:98:52
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.52.0/22
213.255.232.0/21
213.255.252.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:07:5d:88:16:20:57:13:06:12:62:be:72:29:22:f0:07:4d:
f9:68:43:e5:13:5d:00:9b:58:6d:76:17:0e:45:f9:23:d5:e1:
4b:47:7d:38:a5:6e:aa:63:36:b6:97:b8:1f:15:44:60:41:68:
b1:b3:9e:67:39:03:56:66:9b:26:d4:48:f5:2d:2d:19:8e:f7:
52:ff:38:c2:2d:c8:8b:c6:6e:da:4d:2b:5f:bf:86:2a:ca:99:
06:8f:fe:f9:07:e4:3c:c2:ba:3c:a8:ef:12:c3:fb:c5:69:e1:
8a:db:59:16:fe:98:02:91:24:d4:fc:ea:36:bd:cf:b2:00:db:
ad:78:b1:4a:16:44:6a:29:24:bb:50:a8:f7:52:c4:0e:1b:6d:
80:17:53:4f:8b:5c:1b:10:5d:49:45:6e:11:eb:ac:64:f2:50:
5a:d6:14:d7:7b:e1:a8:fb:49:43:eb:4d:ad:be:ef:56:82:b0:
91:0d:b0:00:3b:fe:10:3a:f2:3b:e5:e5:24:b5:b0:73:41:4b:
7e:e8:70:a0:59:7c:9b:5b:52:ae:0e:73:bf:13:56:ac:b0:b9:
17:d5:3d:d4:eb:61:60:f5:df:cb:55:e9:d5:9f:50:c9:39:eb:
51:8c:93:b6:58:79:a1:b5:4a:8a:88:5a:b5:9c:50:2a:5b:cd:
92:ba:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:10 2024 by rpki-client on console-fra.rpki-client.org