Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/0NH2gTtS5xAS52CHP12U_r7v3pE.roa
File: 0NH2gTtS5xAS52CHP12U_r7v3pE.roa (raw, json)
Hash identifier: moj1ctC/QtlRdM0xP1iY1y4v7/QojFPBNMmHpeB8ag4=
Subject key identifier: D0:D1:F6:81:3B:52:E7:10:12:E7:60:87:3F:5D:94:FE:BE:EF:DE:91
Certificate issuer: /CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
Certificate serial: E4409B
Authority key identifier: 7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/0NH2gTtS5xAS52CHP12U_r7v3pE.roa
Signing time: Sat 01 Jan 2022 07:54:24 +0000
ROA not before: Sat 01 Jan 2022 07:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 213.232.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14958747 (0xe4409b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
Validity
Not Before: Jan 1 07:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0d1f6813b52e71012e760873f5d94febeefde91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:32:b8:87:17:77:df:24:30:17:5a:52:17:
3d:89:ee:60:4a:23:13:5b:ed:41:a4:31:e9:49:ca:
c0:59:20:db:07:4e:45:93:14:1f:21:77:88:38:0d:
45:34:8a:95:b0:1d:c4:41:59:81:49:73:a6:aa:a7:
c0:55:a4:d9:7a:24:a3:7f:09:33:63:b3:6e:5c:e8:
e3:d9:e6:b4:b3:c6:a7:10:19:37:9e:bd:9e:aa:e5:
0d:97:49:0b:82:07:c2:f2:32:19:a6:41:27:54:33:
af:da:2a:c9:1c:30:dd:9e:e1:62:68:a0:b9:52:32:
27:47:81:82:d7:02:a0:49:e8:6c:e1:c2:3a:82:db:
50:53:a3:fd:75:9d:1a:a0:fe:e7:5a:11:57:55:28:
d7:82:6d:a1:0c:60:60:93:bb:b5:4e:22:22:2e:e8:
04:e6:e9:35:0f:85:aa:60:2d:84:30:14:a4:38:ee:
45:97:20:3c:5a:b1:8e:9d:09:1a:46:df:44:da:21:
54:59:78:8e:61:3b:5b:b9:68:c0:8d:6c:ef:c2:aa:
b8:7c:de:2b:f1:f4:f6:8b:67:29:1a:c5:f1:4e:fa:
39:44:b8:07:30:54:0f:99:e2:52:7d:78:63:33:90:
d1:ed:f0:f4:31:4a:16:3c:af:08:ec:25:c7:28:f7:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:F6:81:3B:52:E7:10:12:E7:60:87:3F:5D:94:FE:BE:EF:DE:91
X509v3 Authority Key Identifier:
keyid:7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/0NH2gTtS5xAS52CHP12U_r7v3pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/fkwORTB9-MjsTI1P8KMkoyWEnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.238.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fa:4b:80:d9:df:a1:9f:a0:81:eb:ea:aa:c3:6d:1e:7d:be:
5f:54:81:8c:8d:90:3c:9f:ca:31:b2:ce:9a:37:dd:5f:dc:fa:
9b:3e:e2:15:1e:9c:32:68:c6:eb:c9:93:08:55:91:8e:b8:4c:
16:4b:7b:eb:91:1b:26:35:ca:96:b5:9c:17:3d:66:16:b9:84:
80:43:f1:e1:cd:2c:28:72:52:bf:eb:1f:e0:7e:e4:4c:6d:6b:
c4:84:4e:82:37:c9:8a:ec:23:25:55:39:fe:33:5c:e8:ff:5a:
7c:95:d7:58:14:a9:86:f8:6d:76:46:d9:ba:eb:23:0d:93:d0:
3e:54:4b:7d:49:68:02:2c:bf:6b:25:b5:96:ab:b5:7d:82:f0:
e0:96:ca:c4:62:6c:47:a5:d0:d6:87:4a:d5:eb:31:a8:89:fa:
18:15:a8:8c:26:7d:a6:cd:d0:b7:0e:4d:7b:21:52:08:14:29:
c2:7b:6b:1e:4a:13:9e:4a:b4:83:91:f3:aa:b5:fe:48:66:fd:
21:3e:8c:7a:fc:39:5d:53:49:ee:b8:c7:2c:a9:d0:83:bb:ee:
53:af:cc:fc:38:dc:f0:46:cc:d6:65:0b:18:a1:38:fa:e2:8b:
5a:53:a7:a0:ec:6f:22:6d:31:9c:f1:c2:2a:a6:f3:eb:70:92:
ed:7c:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:47 2023 by rpki-client on console-ams.rpki-client.org