Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-jbRXZgbneNy3EDcHoXsAYjj94Q.roa
File: 1-jbRXZgbneNy3EDcHoXsAYjj94Q.roa (raw, json)
Hash identifier: HdpBOaMKQerMO2U6c7kCWR2Eo0zM4RDFpZ7ttpsk3sM=
Subject key identifier: FA:36:D1:5D:98:1B:9D:E3:72:DC:40:DC:1E:85:EC:01:88:E3:F7:84
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 042C090C
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-jbRXZgbneNy3EDcHoXsAYjj94Q.roa
Signing time: Mon 25 Apr 2022 06:59:27 +0000
ROA not before: Mon 25 Apr 2022 06:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 213.225.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69994764 (0x42c090c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 25 06:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa36d15d981b9de372dc40dc1e85ec0188e3f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:82:ee:1c:24:8e:13:34:df:13:1f:f7:18:
1d:d3:c7:5d:70:f0:19:33:86:3d:a8:fc:22:70:b4:
6d:97:b5:9f:4e:cf:05:c2:2c:14:16:70:14:2e:12:
16:7c:c0:29:55:6f:b0:53:47:3a:2b:9a:8e:54:b4:
67:cd:55:a3:97:2e:cb:ed:56:8e:7c:c3:12:09:47:
b5:b9:7a:9b:64:28:82:7a:7c:4a:d2:2d:b1:8d:bd:
a6:23:cb:41:bb:e2:e8:33:0d:ec:50:1c:5d:54:2a:
39:7a:8d:9c:f1:9f:3b:9a:92:55:4a:0d:a7:d2:98:
9f:0d:05:99:81:a5:38:d6:3e:4e:9d:65:a9:e2:c3:
6d:a3:39:bb:2e:a5:b0:cf:99:ee:9d:82:8f:59:23:
30:45:5a:71:d4:58:45:8b:53:75:eb:ec:e5:a0:61:
36:32:fe:57:41:22:1e:1b:84:b1:4c:b7:79:db:09:
da:65:28:59:2e:0a:e6:1e:5e:b4:97:7a:67:d1:1d:
cc:25:cf:1d:b6:93:a4:62:ba:87:4a:59:8f:cb:4d:
21:d7:04:50:aa:9f:26:fd:5a:05:74:57:05:e9:b4:
1e:56:9f:3e:40:a9:54:7f:2e:ab:08:56:1e:52:02:
68:6e:63:fe:ba:a9:99:7c:43:51:c5:83:0c:bb:18:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:D1:5D:98:1B:9D:E3:72:DC:40:DC:1E:85:EC:01:88:E3:F7:84
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-jbRXZgbneNy3EDcHoXsAYjj94Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a5:00:c9:e5:94:c0:bd:9a:9b:d1:00:2e:4b:84:dc:41:36:
7c:c4:7c:50:4a:38:da:53:64:10:c7:da:1f:6b:e5:d3:c0:56:
25:7f:8d:1d:d3:f3:53:39:e2:13:8f:c9:07:12:60:b5:b8:ce:
66:35:bd:31:f2:e1:fc:e4:03:5a:c7:03:df:00:44:d9:07:c8:
69:b4:f4:92:d1:c2:e2:a6:8b:27:5f:0b:0b:48:da:22:1c:9f:
9f:a6:64:1f:56:72:fd:30:0e:bd:67:03:d3:ea:31:20:17:47:
af:76:f4:d2:9d:04:61:83:5b:6b:1d:1d:68:0c:a7:8c:d1:0f:
6a:eb:06:b0:71:f8:23:2d:f6:a6:9c:fe:eb:19:6d:ba:44:92:
60:bb:73:de:4f:ea:1a:2c:71:75:ac:e8:76:18:bd:85:42:f7:
ff:bd:40:37:20:77:6f:51:fa:69:e8:75:6f:76:60:60:41:30:
cd:38:34:19:28:a0:95:43:44:3c:92:d5:41:6b:f8:f8:4d:dd:
fe:0c:76:32:13:8e:fc:5c:74:23:96:1b:ae:7d:6a:0b:3c:04:
4e:b7:9c:c8:7f:ce:32:c2:83:09:e9:8c:81:49:fa:dc:90:00:
80:dd:a0:c7:56:72:b3:a6:62:a7:9b:bb:b2:e7:df:37:f6:30:
43:ff:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org