Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/UtALf8omQMgjKMibkf3rgOFzHBg.roa
File: UtALf8omQMgjKMibkf3rgOFzHBg.roa (raw, json)
Hash identifier: Ife0r63rMhFFfkuCwkmPDWNr54u0S4J1JDBlvufZ2y4=
Subject key identifier: 52:D0:0B:7F:CA:26:40:C8:23:28:C8:9B:91:FD:EB:80:E1:73:1C:18
Certificate issuer: /CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Certificate serial: 0187989F7BE6EFCEDB938E9872C6B9A2A98A
Authority key identifier: B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/UtALf8omQMgjKMibkf3rgOFzHBg.roa
Signing time: Wed 19 Apr 2023 08:26:41 +0000
ROA not before: Wed 19 Apr 2023 08:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:9f:7b:e6:ef:ce:db:93:8e:98:72:c6:b9:a2:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Validity
Not Before: Apr 19 08:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d00b7fca2640c82328c89b91fdeb80e1731c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:b1:18:3f:b4:e2:60:c4:5f:51:a5:b0:ab:
f1:fa:cc:11:67:5a:47:fb:3b:26:45:5e:21:a7:16:
c8:5a:f2:85:99:e2:aa:cc:88:f6:84:07:e3:9d:f9:
23:d6:48:dc:bd:0f:de:8a:77:fd:10:7e:ae:d2:93:
7f:38:58:7d:0b:60:bd:c8:fb:18:5b:c3:f5:49:ef:
20:0f:85:31:ab:21:ce:00:a6:e8:00:bb:31:cd:40:
82:1e:9a:b5:ad:ea:d1:88:e3:9c:95:e0:19:41:24:
d7:bd:d3:cc:c4:21:04:41:e7:39:a9:21:83:ad:bd:
50:64:06:a4:89:1c:3b:a7:d5:6d:d6:41:50:d9:5b:
61:99:cf:e9:54:bf:2f:2c:61:32:5e:68:66:5e:37:
ae:31:63:83:31:8a:e9:fa:86:49:b8:27:5f:53:25:
2b:2c:f6:ff:97:fa:f0:18:8f:ce:ea:77:47:6a:1c:
b5:37:6c:c6:85:df:2b:09:c4:70:2d:3d:f5:a9:9f:
32:0b:f1:67:ca:5e:9f:3e:aa:19:e1:9e:14:5d:78:
6d:5a:a5:68:b9:5c:f2:72:10:4d:21:43:6e:f5:19:
55:7b:22:ee:d5:7d:12:3b:97:b4:b4:dc:7d:28:37:
8c:ed:32:98:16:40:dd:8b:ff:e5:48:44:ab:4b:41:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:0B:7F:CA:26:40:C8:23:28:C8:9B:91:FD:EB:80:E1:73:1C:18
X509v3 Authority Key Identifier:
keyid:B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/UtALf8omQMgjKMibkf3rgOFzHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:92:2d:6c:14:ec:1e:f3:bd:6c:0d:1c:1e:f5:4a:2c:09:be:
e4:09:1f:95:4e:54:ed:4b:17:45:0b:27:1d:c8:59:c7:99:89:
91:6a:a9:15:2c:6e:25:e7:40:85:68:5c:32:2f:ee:ca:0d:48:
67:13:90:0f:07:8f:3f:fe:0d:ad:ec:da:67:4a:d5:2a:40:05:
84:03:cf:6e:8b:82:42:39:e6:7f:54:89:3f:27:fb:b4:61:f5:
5b:8c:30:d3:bc:ae:8b:4b:87:51:37:df:78:ad:e0:62:b2:db:
e4:3b:49:75:0f:c1:26:23:42:02:75:ba:42:a2:e7:86:40:b0:
fd:82:cc:1a:5b:10:4e:98:cd:9a:14:fd:b2:f4:2c:55:dd:e8:
b9:58:68:02:90:82:26:fd:9c:78:64:6c:20:be:10:59:29:3d:
12:33:5e:de:0f:ee:94:ac:69:1f:03:8d:6b:ed:41:53:f8:e7:
62:df:51:03:d1:3c:44:9e:a5:16:95:91:34:45:22:72:fc:0b:
83:32:07:35:2f:15:49:c0:b0:3e:b0:7d:ed:7d:ef:49:ed:78:
6b:b0:11:75:e2:0f:22:b0:59:1c:21:20:3c:68:94:73:50:96:
d7:9d:57:d5:9e:23:e5:f4:1e:93:1f:5f:61:f5:46:70:1d:48:
0c:93:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 15:53:34 2023 by rpki-client on console-ams.rpki-client.org