Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/kfrfrlgKRjlopeYV-yURg_ll0ns.roa
File: kfrfrlgKRjlopeYV-yURg_ll0ns.roa (raw, json)
Hash identifier: gW489FE73+BlCeVEgqIlNFTAg/3hZbeXqhvleKH6kHo=
Subject key identifier: 91:FA:DF:AE:58:0A:46:39:68:A5:E6:15:FB:25:11:83:F9:65:D2:7B
Certificate issuer: /CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Certificate serial: 015A4566
Authority key identifier: 6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/kfrfrlgKRjlopeYV-yURg_ll0ns.roa
Signing time: Sat 09 Apr 2022 17:22:12 +0000
ROA not before: Sat 09 Apr 2022 17:22:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22693222 (0x15a4566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Validity
Not Before: Apr 9 17:22:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91fadfae580a463968a5e615fb251183f965d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:81:23:6e:ec:fc:da:57:3e:29:2d:29:32:
b1:c7:bc:d4:29:df:ce:9b:26:3b:4c:4c:38:d5:64:
13:a3:cf:c0:15:fc:d0:df:b8:92:e1:af:30:e3:dd:
fc:c7:fa:d0:99:d1:88:7e:30:10:ad:03:7b:65:62:
0a:b0:88:ed:7b:60:11:44:7b:be:42:c9:7c:23:64:
09:3e:83:a4:45:c4:26:ab:14:87:4e:56:dc:34:28:
7c:38:d2:00:b8:df:2d:db:5f:3c:f9:4c:32:6b:89:
50:e1:65:be:d0:1b:2a:85:98:ba:d8:51:f0:dc:24:
33:ac:65:a1:6e:ca:23:9e:44:0a:1a:aa:b8:dd:80:
09:25:90:5c:27:e7:3b:37:73:97:58:e8:68:f7:69:
4b:37:e8:8c:1b:ee:ab:3a:5d:a8:8c:98:05:d9:59:
4d:c4:56:ea:7f:47:95:34:b2:36:d4:7e:65:0e:ab:
14:39:c2:5f:67:76:d3:07:82:17:cf:51:07:16:97:
bf:8c:29:28:60:4c:5e:a4:33:4f:03:dc:37:f5:9b:
b2:3e:ef:21:7c:c0:bb:32:9a:5d:35:30:33:47:c2:
5b:56:20:24:22:c7:b4:b1:4f:62:8f:84:78:77:4a:
d6:63:af:d4:38:d2:81:aa:bd:2b:d8:48:53:68:16:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FA:DF:AE:58:0A:46:39:68:A5:E6:15:FB:25:11:83:F9:65:D2:7B
X509v3 Authority Key Identifier:
keyid:6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/kfrfrlgKRjlopeYV-yURg_ll0ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
57:58:59:9f:e2:d9:ac:72:4b:75:66:f4:82:91:e9:7e:1b:34:
1a:17:5b:bb:a6:47:40:85:8a:a8:e7:c8:45:cc:81:c9:ef:2a:
d8:85:56:50:dc:37:22:26:a5:96:3a:27:92:da:89:31:4e:db:
53:5a:75:65:be:c9:48:c6:d1:95:09:1c:e3:09:0c:bd:a8:17:
be:7f:f8:96:bf:16:7f:76:9c:39:68:6e:29:4f:02:51:84:08:
85:e4:0b:ea:53:4a:ca:4d:d7:15:5d:88:8f:46:25:90:f2:04:
66:1a:33:19:44:af:be:b5:f8:d7:ee:0a:92:cd:ec:fa:1d:d3:
5b:10:d0:35:3a:a4:be:f8:cd:fa:1c:a3:ef:3e:5c:6b:ad:09:
e5:01:1b:5d:c0:11:f9:c1:91:ea:28:0a:e8:4a:9a:88:a4:96:
8a:b9:69:23:56:ce:72:9e:f3:f3:c9:fb:8c:39:fe:c3:71:2b:
53:a5:b1:eb:07:57:8e:d0:ab:ff:95:5e:cf:5e:f4:99:60:2f:
4b:01:54:7d:74:19:43:99:8c:5a:5a:bb:03:a6:31:bf:b4:ac:
cb:f3:2e:e2:a2:1e:e8:3c:11:2f:88:3b:52:c2:80:3c:3a:d7:
2b:3f:b3:65:a2:c9:b6:3d:0a:9a:53:80:f2:d3:f0:e3:be:eb:
d2:67:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org