Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/vAmA5NYqNogNiTQhgGfQUxjwZXQ.roa
File: vAmA5NYqNogNiTQhgGfQUxjwZXQ.roa (raw, json)
Hash identifier: B8sMBV9vArhZHO4+WX+w3xGTnvqYZ20riUMhGUmAVMM=
Subject key identifier: BC:09:80:E4:D6:2A:36:88:0D:89:34:21:80:67:D0:53:18:F0:65:74
Certificate issuer: /CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
Certificate serial: 01255F52
Authority key identifier: 7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/vAmA5NYqNogNiTQhgGfQUxjwZXQ.roa
Signing time: Sun 30 Jan 2022 11:01:20 +0000
ROA not before: Sun 30 Jan 2022 11:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 213.232.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19226450 (0x1255f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
Validity
Not Before: Jan 30 11:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0980e4d62a36880d8934218067d05318f06574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:d3:97:2e:72:d4:62:b1:10:05:03:cf:35:
78:9d:e9:c9:9b:6c:0a:39:fb:63:f8:d0:4b:11:3a:
67:ec:e9:e5:7e:12:ea:78:5b:80:ab:d0:26:a8:c5:
a7:5e:ad:2f:91:6c:af:96:48:18:05:61:15:59:02:
56:7d:c8:83:5f:00:32:32:9a:14:84:d2:fb:7f:93:
78:6d:51:42:7e:83:2f:37:8c:bf:a9:c7:3c:a0:ec:
f4:23:a3:16:2e:5a:c5:cd:5f:e6:f0:4a:26:b0:a0:
d7:ab:7b:19:97:bd:5a:05:88:f8:78:55:63:a0:8c:
4f:42:54:2c:da:1d:bb:bd:c0:13:4c:30:95:c7:19:
b4:fe:9d:a6:9d:98:7c:ce:80:18:ce:31:a9:ab:52:
37:45:b2:15:68:85:eb:42:34:40:72:63:2a:18:ce:
83:06:f4:37:a0:70:15:b4:83:3e:35:c6:b8:a4:13:
0e:a5:1b:40:98:a5:84:21:c0:72:b5:f0:5f:f2:62:
af:83:ef:f1:7e:d1:89:b0:a8:55:9d:30:8e:b7:cd:
89:3e:68:38:87:6a:9b:78:76:72:1d:63:3e:a1:cd:
02:f6:cb:fd:67:32:18:0a:28:24:73:f3:cf:e4:0d:
a8:b1:86:56:07:a7:81:02:6c:84:3b:a8:33:95:3f:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:80:E4:D6:2A:36:88:0D:89:34:21:80:67:D0:53:18:F0:65:74
X509v3 Authority Key Identifier:
keyid:7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/vAmA5NYqNogNiTQhgGfQUxjwZXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/fkwORTB9-MjsTI1P8KMkoyWEnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.238.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f4:d0:82:08:10:97:62:d9:5d:c3:7f:d4:af:2b:45:41:02:
26:05:3b:e5:4a:55:2b:04:68:67:6c:9d:af:a5:e5:b0:87:f0:
6e:1b:53:d1:b1:a6:f3:4e:e3:cd:4b:3a:b5:c3:27:d0:97:2f:
9a:c8:18:d2:79:16:e1:83:65:a5:19:e6:e0:3e:f1:c1:3c:77:
e2:17:b8:ab:eb:1e:b2:16:3e:ff:52:ba:8a:37:fa:50:49:82:
11:01:b1:8c:d1:1f:12:f2:80:1e:ce:21:7d:04:a3:98:0e:d2:
07:38:03:f3:86:16:68:65:dd:2e:99:a9:9a:39:b4:6f:d5:3d:
3e:66:7d:75:83:03:72:b8:0d:38:5c:94:77:7f:e7:b5:eb:cf:
3d:b5:d4:6d:7e:8e:6e:ae:33:51:04:d6:37:62:00:5e:2c:4b:
41:62:c9:c0:c0:af:16:84:9f:c3:00:c0:b8:3b:ce:b4:da:77:
ca:54:ab:b9:61:3c:54:95:4a:4d:ef:84:3b:51:7a:dd:f3:94:
e2:c1:30:38:0e:10:91:0b:f3:af:6e:18:81:60:2b:dd:c0:4f:
18:47:ab:a5:d9:a6:52:c0:96:bc:a6:f9:c5:55:b2:18:41:a7:
0a:53:e8:ae:54:27:1e:8e:3a:56:b3:a1:45:80:9b:63:49:0c:
e6:ee:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:52 2023 by rpki-client on console-fra.rpki-client.org