Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/pqG4vptQDkPHXiTN5KREOfaGEmc.roa
File: pqG4vptQDkPHXiTN5KREOfaGEmc.roa (raw, json)
Hash identifier: 0sR4jMSccp5noYaPbCcc3HGWR5ohUoIMgGKogX4wtPg=
Subject key identifier: A6:A1:B8:BE:9B:50:0E:43:C7:5E:24:CD:E4:A4:44:39:F6:86:12:67
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 04301112
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/pqG4vptQDkPHXiTN5KREOfaGEmc.roa
Signing time: Thu 12 May 2022 09:21:02 +0000
ROA not before: Thu 12 May 2022 09:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 213.255.232.0/22 maxlen: 22
213.255.236.0/22 maxlen: 22
213.255.252.0/22 maxlen: 22
83.229.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70258962 (0x4301112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: May 12 09:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6a1b8be9b500e43c75e24cde4a44439f6861267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:3d:f6:94:69:62:f7:19:ee:53:fa:e4:a2:
ac:b8:71:10:64:fd:1c:c3:c9:ae:c5:eb:cf:31:dc:
db:e9:f7:7c:3d:fb:a2:e1:19:e8:60:f8:8f:65:77:
26:39:b7:43:00:9a:b8:24:34:e4:3e:7c:d2:10:aa:
42:85:49:dc:b3:6e:14:43:80:df:aa:15:3b:a4:2a:
33:79:10:a0:36:d8:09:b0:b2:7c:69:a3:34:9a:8e:
ee:69:4a:81:0a:6d:af:e3:80:e1:44:3c:17:d8:9e:
db:3d:5c:5e:cb:3b:04:10:72:38:5d:5d:e0:09:20:
9f:d7:96:43:91:5f:15:9f:b7:c8:6d:e0:48:d1:99:
49:81:1d:84:5a:b9:97:ae:32:c0:35:84:58:f5:76:
b2:78:82:d1:b8:52:9c:e5:61:f7:06:60:38:d2:8c:
21:1c:4f:ac:e5:df:af:30:f6:c9:06:47:91:b1:33:
57:27:66:87:64:de:4f:a7:d6:92:91:06:60:e9:78:
17:bc:8f:3b:8a:d5:92:36:95:00:51:44:83:28:8f:
8a:cf:29:3f:b5:10:61:45:92:d1:18:56:69:5f:37:
9c:f6:cd:55:5f:a8:7a:d2:c3:e7:b7:a2:6b:47:06:
0d:45:b2:28:35:80:a7:7e:08:b5:d3:d5:73:8a:b9:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:B8:BE:9B:50:0E:43:C7:5E:24:CD:E4:A4:44:39:F6:86:12:67
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/pqG4vptQDkPHXiTN5KREOfaGEmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.52.0/22
213.255.232.0/21
213.255.252.0/22
Signature Algorithm: sha256WithRSAEncryption
06:3f:dd:2f:de:2b:b8:45:14:b5:57:50:97:79:ea:2b:07:e3:
6e:18:9a:9a:8d:53:c6:88:19:39:2c:7f:78:74:24:d9:91:70:
5e:5d:77:57:23:32:63:ac:7c:70:7e:40:58:68:b7:60:e1:7b:
65:f9:60:50:33:db:f3:93:5b:4f:57:79:80:cd:cd:97:68:ba:
61:6c:86:a3:3b:fd:9e:da:78:13:40:60:36:48:67:8f:6b:d8:
55:49:8e:0f:d9:5d:b8:eb:9b:61:d7:1c:98:e2:c1:0b:40:73:
d4:bb:df:e1:0c:88:8b:f6:1c:6f:11:06:ee:ce:bd:41:9e:5d:
72:5c:b5:a1:df:2d:64:46:71:66:36:e2:d4:89:de:cf:c4:33:
4c:13:4a:09:f1:59:ad:26:40:5a:f7:1b:90:20:07:22:55:c8:
fd:54:5e:ee:ee:7e:3a:25:df:a1:4d:a4:ff:89:a3:75:73:d7:
2d:be:4a:35:bd:03:4c:58:d3:8c:90:e7:d9:2d:01:fe:cc:d0:
fb:c8:10:73:45:f0:41:54:78:40:59:13:1d:98:15:d2:80:25:
bb:2b:0f:e6:22:db:22:fd:65:27:5f:e1:6c:cc:e4:62:1c:a9:
38:01:8b:dc:c9:37:08:d5:fa:9a:e2:96:33:81:0b:ab:44:8f:
e7:5a:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org