Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/AP6sDpzVQiejQD2nJwLUjCDsDPE.roa
File: AP6sDpzVQiejQD2nJwLUjCDsDPE.roa (raw, json)
Hash identifier: +MT3pJ3t6l4rzarMUvyxNirHo0jRi19DDcpg2+nYQKs=
Subject key identifier: 00:FE:AC:0E:9C:D5:42:27:A3:40:3D:A7:27:02:D4:8C:20:EC:0C:F1
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 042CCDA0
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/AP6sDpzVQiejQD2nJwLUjCDsDPE.roa
Signing time: Wed 11 May 2022 13:43:02 +0000
ROA not before: Wed 11 May 2022 13:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 213.255.212.0/22 maxlen: 22
213.255.220.0/22 maxlen: 22
78.138.4.0/22 maxlen: 22
213.255.232.0/22 maxlen: 22
213.255.236.0/22 maxlen: 22
213.255.252.0/22 maxlen: 22
83.229.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70045088 (0x42ccda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: May 11 13:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00feac0e9cd54227a3403da72702d48c20ec0cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:69:6f:82:ba:b4:ff:a6:3c:0e:63:9c:98:
07:b4:b3:2b:70:76:27:0f:a0:9c:fe:e0:da:76:d6:
58:a7:6c:00:a2:ba:bb:4a:de:40:f5:c9:5f:55:d7:
df:33:0a:7b:67:c2:00:6e:44:87:dd:6b:8e:fe:cb:
0f:03:76:82:e5:f6:c5:79:cd:2e:3c:84:41:1b:0b:
94:e3:06:fb:8d:a5:4b:4e:fd:8d:64:15:5a:ae:85:
f5:ac:c1:fd:7b:35:5d:5f:25:39:62:bb:4b:14:2e:
7b:dc:0a:c1:2b:95:f9:6b:e1:92:54:95:c4:61:01:
48:46:67:2e:3e:27:ab:0f:f6:23:1d:c5:ab:8b:09:
c1:6b:ab:76:cb:0c:89:eb:94:fb:da:89:c2:85:67:
ba:c4:0e:ca:c0:f8:ca:24:e3:ea:4b:53:c9:be:56:
7c:33:01:8a:5d:f3:bf:17:57:eb:6f:f1:22:b2:68:
82:81:70:3f:01:40:ec:71:a0:bc:29:77:c2:54:38:
24:27:c8:4d:22:7f:b1:d9:89:bc:46:b9:87:a6:fe:
a7:2a:d6:f0:a1:0d:e9:6b:99:46:cb:5b:64:71:be:
a9:44:c7:34:d3:e5:cf:ef:49:b0:45:b9:26:90:03:
65:8f:ff:0e:28:29:5f:9e:f3:bf:a0:78:7a:3f:83:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:AC:0E:9C:D5:42:27:A3:40:3D:A7:27:02:D4:8C:20:EC:0C:F1
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/AP6sDpzVQiejQD2nJwLUjCDsDPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.4.0/22
83.229.52.0/22
213.255.212.0/22
213.255.220.0/22
213.255.232.0/21
213.255.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:21:40:4b:9f:25:21:85:60:ca:42:56:05:94:e4:bd:19:4a:
0a:ef:ff:6d:64:03:13:de:74:ee:49:de:9c:be:a9:6a:a0:e4:
95:f3:25:b0:24:86:13:f3:a2:03:46:75:6e:76:9b:2d:ba:18:
38:9b:9e:86:02:88:f5:a8:35:d1:27:63:6e:8c:a7:a3:38:bd:
8a:d2:db:b5:7f:c4:60:a9:f2:a5:9d:b2:ac:fc:ba:da:13:7d:
ea:34:09:14:72:7d:6b:6b:f8:bb:c6:8d:ca:8b:9e:29:5c:c7:
5a:32:11:a4:46:d0:e5:e2:de:cb:34:45:20:bc:db:07:21:a9:
d7:07:bd:a2:ae:72:b5:d5:e9:28:6d:e4:5c:69:14:e1:31:55:
0b:e3:c9:71:63:e0:04:64:20:80:16:cc:8c:78:7c:57:ca:71:
fc:47:84:79:43:df:55:0d:e3:02:b1:cf:06:6c:41:a1:9a:11:
69:93:8f:d9:89:84:48:1c:54:c2:44:f5:de:14:c6:31:29:70:
c7:c4:75:42:8e:6d:00:e1:c9:ac:ee:ec:5c:fe:ab:3d:ce:23:
0c:01:59:bb:c8:50:06:e7:a7:76:3f:8a:15:0a:9b:8a:ac:eb:
f2:9d:9a:ca:5b:6e:f1:e1:d5:f5:aa:55:ea:85:07:36:26:d9:
90:38:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org