Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-94I3YKGdVAwptu3-l2ZIMUDGjk.roa
File: 1-94I3YKGdVAwptu3-l2ZIMUDGjk.roa (raw, json)
Hash identifier: zTE3kkuOOV0QxtvsJKoQMaRfLIHnWV/RePv7RAbtI4o=
Subject key identifier: FB:DE:08:DD:82:86:75:50:30:A6:DB:B7:FA:5D:99:20:C5:03:1A:39
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0186ABC551A1759F42DEE410297BABFEBE14
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-94I3YKGdVAwptu3-l2ZIMUDGjk.roa
Signing time: Sat 04 Mar 2023 08:38:00 +0000
ROA not before: Sat 04 Mar 2023 08:38:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:c5:51:a1:75:9f:42:de:e4:10:29:7b:ab:fe:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Mar 4 08:38:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbde08dd8286755030a6dbb7fa5d9920c5031a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:cb:33:86:4e:e5:cd:71:9d:14:f9:69:ac:
cb:23:eb:df:bb:3c:ab:37:6a:42:5d:59:5b:88:a8:
a3:1e:c1:f7:cd:0d:76:b4:e7:e9:ea:c4:af:e9:71:
05:82:23:15:81:93:39:9a:a7:bf:aa:5e:05:5e:6d:
5e:2c:00:79:b8:1f:cf:fb:ac:0a:2d:79:6e:37:20:
34:41:6a:0b:fe:c1:0e:e2:c2:4f:47:d7:36:66:33:
49:95:af:84:ad:1e:0e:63:1c:b7:47:69:02:dc:7d:
46:69:f0:41:06:c7:da:a6:1c:11:f0:48:bd:05:5d:
54:18:a9:60:dd:1e:59:38:ef:f5:6c:3f:28:14:13:
75:07:8b:32:4d:38:ce:42:f1:7c:60:bb:69:a7:7a:
11:ee:92:aa:cd:9b:ae:3d:80:5d:98:ff:85:d8:7f:
04:43:6b:53:75:31:b1:29:34:f7:9a:de:84:bd:29:
e3:89:6c:29:f2:7e:bf:aa:33:e8:a7:91:b6:85:7f:
60:6a:5d:ed:82:bc:b8:2e:69:c8:08:a1:3a:ff:8b:
39:73:48:61:54:b0:6b:98:d6:51:b3:c0:c2:01:4e:
68:34:1f:02:ec:79:f5:6d:a9:ac:f1:29:0f:87:88:
e4:d2:46:48:fe:36:ac:1a:b4:90:b4:19:05:6b:da:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:08:DD:82:86:75:50:30:A6:DB:B7:FA:5D:99:20:C5:03:1A:39
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-94I3YKGdVAwptu3-l2ZIMUDGjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:07:9d:0f:dd:1f:55:85:d6:69:be:7a:7b:fe:a9:10:0a:8e:
9b:e8:06:5d:60:b4:ad:18:cb:47:4d:36:1c:bb:ee:45:5f:af:
25:d0:d7:7c:a5:9d:83:b8:a5:8f:9b:c6:ca:8b:a9:b5:92:44:
21:4a:eb:f2:3a:b0:d1:f3:49:0b:ca:d9:ae:58:0b:44:4a:2b:
d0:11:60:14:2b:f9:14:a0:e8:d0:5f:09:76:2a:4d:71:e4:5d:
fd:90:94:48:8f:4f:2e:75:b4:6f:75:05:2c:41:cb:15:64:33:
fd:e4:9e:a2:02:1e:f2:ac:c3:f8:91:da:cc:25:75:a0:20:85:
cf:6d:63:b0:c0:1a:4c:27:06:13:bc:9d:71:a6:3b:9a:24:c0:
49:9e:a3:e3:7e:16:de:f2:d4:89:ed:e7:f1:57:cc:c5:2e:94:
d1:d9:c1:e2:a3:5c:87:ad:09:5d:b0:07:3f:24:95:25:e7:f3:
2c:da:87:90:2a:83:8c:8a:13:1a:d2:87:a5:94:4a:21:3c:10:
1c:a2:fb:ea:10:94:9e:a3:cb:0b:b7:d0:b3:56:a0:1e:17:9e:
1e:9d:a1:7e:58:ec:0f:80:b1:46:49:2b:fa:79:16:c0:05:cf:
79:75:77:4b:aa:ca:19:56:bf:6c:cb:e5:5a:5d:37:19:89:e5:
47:c6:4c:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYarxVGhdZ9C3uQQKXur/r4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMzA0MDgzODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmRlMDhkZDgyODY3NTUwMzBhNmRiYjdmYTVkOTkyMGM1MDMxYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ7LM4ZO5c1xnRT5aazLI+vfuzyr
N2pCXVlbiKijHsH3zQ12tOfp6sSv6XEFgiMVgZM5mqe/ql4FXm1eLAB5uB/P+6wK
LXluNyA0QWoL/sEO4sJPR9c2ZjNJla+ErR4OYxy3R2kC3H1GafBBBsfaphwR8Ei9
BV1UGKlg3R5ZOO/1bD8oFBN1B4syTTjOQvF8YLtpp3oR7pKqzZuuPYBdmP+F2H8E
Q2tTdTGxKTT3mt6EvSnjiWwp8n6/qjPop5G2hX9gal3tgry4LmnICKE6/4s5c0hh
VLBrmNZRs8DCAU5oNB8C7Hn1bams8SkPh4jk0kZI/jasGrSQtBkFa9qapwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPveCN2ChnVQMKbbt/pdmSDFAxo5MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvMS05NEkzWUtHZFZBd3B0dTMtbDJaSU1VREdqay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQw
Ny8xL0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXh7DAN
BgkqhkiG9w0BAQsFAAOCAQEAmgedD90fVYXWab56e/6pEAqOm+gGXWC0rRjLR002
HLvuRV+vJdDXfKWdg7ilj5vGyouptZJEIUrr8jqw0fNJC8rZrlgLREor0BFgFCv5
FKDo0F8JdipNceRd/ZCUSI9PLnW0b3UFLEHLFWQz/eSeogIe8qzD+JHazCV1oCCF
z21jsMAaTCcGE7ydcaY7miTASZ6j434W3vLUie3n8VfMxS6U0dnB4qNch60JXbAH
PySVJefzLNqHkCqDjIoTGtKHpZRKITwQHKL76hCUnqPLC7fQs1agHheeHp2hfljs
D4CxRkkr+nkWwAXPeXV3S6rKGVa/bMvlWl03GYnlR8ZMOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org