Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/53l7sULCwRxHotaupBFxeMILdoM.roa
File: 53l7sULCwRxHotaupBFxeMILdoM.roa (raw, json)
Hash identifier: gfE3m7gZf23QHNOhLtKzjpMOXp7gf/YRYjXAYHlUdlY=
Subject key identifier: E7:79:7B:B1:42:C2:C1:1C:47:A2:D6:AE:A4:11:71:78:C2:0B:76:83
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 030E241E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/53l7sULCwRxHotaupBFxeMILdoM.roa
Signing time: Sat 01 Jan 2022 01:50:29 +0000
ROA not before: Sat 01 Jan 2022 01:50:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 213.225.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51258398 (0x30e241e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7797bb142c2c11c47a2d6aea4117178c20b7683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:1c:74:46:1f:f1:6e:8b:14:89:f6:99:31:
8c:0a:70:97:ea:aa:91:60:d5:1e:73:62:b0:cf:d6:
e1:0b:85:3b:b2:2e:f1:ae:a4:81:f1:0b:e5:41:c8:
2d:31:88:72:9c:63:ae:95:a4:29:c1:7b:fd:d7:0a:
2e:f2:89:fc:e0:42:7c:ef:93:2e:09:fb:d9:64:1d:
99:af:4a:83:11:a2:d5:1c:27:d8:b7:95:46:ea:9e:
28:c6:ee:be:94:ba:1e:f3:43:7c:7c:4f:f1:20:63:
2f:1a:dd:f4:3f:7e:2b:cc:e4:8e:73:9b:4a:a2:2c:
79:02:9e:02:aa:76:55:64:68:3b:85:b3:ec:4b:62:
dd:df:5f:93:a7:2a:bd:dd:8b:78:29:21:6a:2f:3f:
97:af:d4:a4:9e:da:25:a0:e4:7c:20:fa:02:cf:c3:
c5:c0:bc:a4:70:ed:7e:54:ec:0b:a6:eb:2d:2a:98:
5d:29:67:d6:77:0c:74:e2:60:c0:cd:eb:53:5e:a5:
81:e6:06:fe:94:df:4a:1c:f3:a2:a4:55:34:3b:56:
3d:5e:6b:5f:0f:45:6b:4b:61:6a:33:41:bf:bb:d8:
ce:90:fa:1a:a9:71:f2:1f:73:83:58:50:9f:9e:03:
ae:cf:17:da:4a:ac:d2:ab:0a:c4:ab:43:ad:c5:ca:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:7B:B1:42:C2:C1:1C:47:A2:D6:AE:A4:11:71:78:C2:0B:76:83
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/53l7sULCwRxHotaupBFxeMILdoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
23:03:c2:db:2b:bd:26:6a:e7:8e:1c:b5:97:31:1a:80:62:de:
14:7a:b5:98:a9:37:7c:ef:be:c5:8e:fb:11:dd:05:fc:76:22:
ad:e8:42:38:35:5c:17:27:84:89:df:b5:84:13:00:72:53:22:
1f:a5:c0:f5:03:c9:9b:70:75:7c:ed:e5:28:cb:67:a5:9e:b4:
9e:08:b8:62:fe:c1:31:19:a2:17:b1:00:2a:38:24:60:81:27:
14:9a:79:2d:d4:7a:7f:9c:ec:4d:0e:6e:fe:60:fe:a5:f3:9d:
ed:91:62:7e:28:4d:5e:51:1c:f0:f3:4c:c5:59:8c:eb:4f:7c:
21:40:ea:31:05:23:ed:b0:28:b1:da:c4:5d:b7:9b:3e:31:44:
77:94:2c:1c:e9:9b:06:e4:69:02:e9:c7:ca:be:06:10:f4:0e:
6b:f0:f8:54:37:14:ba:1d:56:21:3b:93:75:52:f1:52:5b:70:
01:7f:c4:0b:d1:ad:7d:40:16:17:88:a2:84:6a:dc:64:17:e9:
ec:db:d0:df:8d:3f:ba:f9:cd:3c:18:b3:a0:ad:d9:e3:20:0a:
f7:4b:15:9d:aa:0d:b1:ee:9c:3b:ab:2d:1d:5f:1d:0d:d7:65:
bc:b8:dd:26:e2:8e:f2:34:92:b9:94:66:34:c6:ba:53:4d:e7:
33:3a:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org