Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CgDSxF8cOcooDnSGjghLRxocPE.roa
File: 1-CgDSxF8cOcooDnSGjghLRxocPE.roa (raw, json)
Hash identifier: yO76YUVud1WuUG6UsWJH4D+KM/REUd3PD8alyKh3lRk=
Subject key identifier: F8:28:03:4B:11:7C:70:E7:28:A0:39:D2:1A:38:21:2D:1C:68:70:F1
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03766A5A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CgDSxF8cOcooDnSGjghLRxocPE.roa
Signing time: Tue 08 Feb 2022 13:54:01 +0000
ROA not before: Tue 08 Feb 2022 13:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 213.225.237.0/24 maxlen: 24
213.225.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58092122 (0x3766a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Feb 8 13:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f828034b117c70e728a039d21a38212d1c6870f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:c8:42:66:36:a0:fb:3b:bb:d2:65:25:47:
04:72:54:fb:e2:d6:3d:12:10:f9:57:d7:ca:fd:95:
82:c5:a3:1b:fb:9c:36:a6:d5:33:f3:7e:2f:f7:fd:
1e:5d:dc:83:79:34:04:d3:6b:45:2b:77:dd:e2:00:
ae:58:2e:6b:07:23:34:e1:37:1f:4f:5a:b0:d1:c8:
36:66:c1:af:b8:e2:27:d6:f7:e4:dc:d2:f6:1e:2b:
d8:f2:fb:e5:b6:c2:a4:9c:d3:3e:a5:7e:e8:bf:d8:
d2:c0:7f:42:a6:7b:21:32:48:bc:c1:74:ce:13:6c:
9f:09:93:65:cb:2c:c0:a4:d7:aa:5e:70:7a:01:20:
d9:d1:a1:90:6a:7b:4d:fd:61:29:c4:1b:2a:bc:0b:
ab:5c:db:ab:58:46:10:63:65:87:74:9d:59:d9:e8:
8b:92:7f:57:1c:5f:b5:13:16:e3:35:0c:9d:83:b8:
d5:ff:ad:48:2e:00:c9:e8:de:fa:ef:c6:ab:31:67:
55:9f:e4:8a:a2:cd:16:53:aa:af:e1:a7:53:29:7d:
7b:70:fd:c6:db:2f:34:68:ec:08:32:75:3f:b4:dc:
fc:63:2b:0b:f0:80:ce:77:bf:48:b1:9d:a4:f2:73:
62:a7:a4:e7:83:69:48:35:35:a0:92:45:e2:7c:db:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:03:4B:11:7C:70:E7:28:A0:39:D2:1A:38:21:2D:1C:68:70:F1
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CgDSxF8cOcooDnSGjghLRxocPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0-213.225.238.255
Signature Algorithm: sha256WithRSAEncryption
13:81:06:b8:89:53:c0:3f:a5:05:fa:4e:99:c0:2d:ce:59:2a:
6b:66:7a:ab:15:1a:37:ff:3f:26:09:bb:db:37:cd:59:79:01:
1e:63:d5:ff:f1:77:e8:57:35:ed:7c:cd:1a:87:3e:ca:00:00:
f6:8a:da:e1:50:d5:8e:3d:44:83:c8:c8:02:87:97:9d:8a:cb:
03:88:64:50:bc:9b:8c:25:ed:85:f8:fc:7f:c1:ee:ab:26:81:
98:71:bb:33:0c:80:c1:39:e0:82:e5:91:9b:6f:e5:54:e0:d2:
28:3e:f9:05:54:26:13:fe:79:77:66:66:bc:1c:0c:83:7e:6c:
2a:b8:dd:ee:95:2d:35:dd:3f:c7:a6:8b:96:19:8d:91:55:4f:
8b:66:fb:b1:34:b5:c1:c0:8f:a2:15:fb:aa:43:3e:63:17:0f:
d7:f5:8e:41:d3:c6:3c:0e:58:6c:80:dd:c3:b3:c9:4b:27:ec:
f5:a7:1e:4c:31:f0:ad:18:0f:d9:c3:ee:de:47:f0:2d:22:b9:
7b:db:b9:24:f0:11:aa:2e:b3:1e:f8:b4:f5:6c:b7:23:ab:3f:
af:ce:fa:bb:75:2c:7e:f7:64:e8:03:d6:a9:f3:4b:db:b1:f4:
4c:6e:66:e8:0e:e8:76:be:2f:d9:68:25:5c:ad:6d:af:b7:8a:
f7:f3:50:8b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEA3ZqWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDIw
ODEzNTQwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjgyODAzNGIxMTdj
NzBlNzI4YTAzOWQyMWEzODIxMmQxYzY4NzBmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQ5yEJmNqD7O7vSZSVHBHJU++LWPRIQ+VfXyv2VgsWjG/uc
NqbVM/N+L/f9Hl3cg3k0BNNrRSt33eIArlguawcjNOE3H09asNHINmbBr7jiJ9b3
5NzS9h4r2PL75bbCpJzTPqV+6L/Y0sB/QqZ7ITJIvMF0zhNsnwmTZcsswKTXql5w
egEg2dGhkGp7Tf1hKcQbKrwLq1zbq1hGEGNlh3SdWdnoi5J/VxxftRMW4zUMnYO4
1f+tSC4Ayeje+u/GqzFnVZ/kiqLNFlOqr+GnUyl9e3D9xtsvNGjsCDJ1P7Tc/GMr
C/CAzne/SLGdpPJzYqek54NpSDU1oJJF4nzb2q0CAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT4KANLEXxw5yigOdIaOCEtHGhw8TAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
LzEtQ2dEU3hGOGNPY29vRG5TR2pnaExSeG9jUEUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4
LzAxZjg1My1kNDQ1LTRhY2UtYThkOC0yMjcwMWI0YmI0MDcvMS9JWUZNOHNvLUY1
azBuTTFNZm1wMjFqLURTajAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEANXh7QMEANXh7jANBgkqhkiG
9w0BAQsFAAOCAQEAE4EGuIlTwD+lBfpOmcAtzlkqa2Z6qxUaN/8/Jgm72zfNWXkB
HmPV//F36Fc17XzNGoc+ygAA9ora4VDVjj1Eg8jIAoeXnYrLA4hkULybjCXthfj8
f8HuqyaBmHG7MwyAwTngguWRm2/lVODSKD75BVQmE/55d2ZmvBwMg35sKrjd7pUt
Nd0/x6aLlhmNkVVPi2b7sTS1wcCPohX7qkM+YxcP1/WOQdPGPA5YbIDdw7PJSyfs
9aceTDHwrRgP2cPu3kfwLSK5e9u5JPARqi6zHvi09Wy3I6s/r876u3Usfvdk6APW
qfNL27H0TG5m6A7odr4v2WglXK1tr7eK9/NQiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org