Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8w_7V2T1ijcFGL8RUcK73ejFVMY.roa
File: 8w_7V2T1ijcFGL8RUcK73ejFVMY.roa (raw, json)
Hash identifier: kUkJGnwagLRJLE+iyGQtBNOGGfp96MxY1/g0TUd5VhE=
Subject key identifier: F3:0F:FB:57:64:F5:8A:37:05:18:BF:11:51:C2:BB:DD:E8:C5:54:C6
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01842F7AD0D5037E715DFDCDBF17C354754E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8w_7V2T1ijcFGL8RUcK73ejFVMY.roa
Signing time: Mon 31 Oct 2022 19:18:08 +0000
ROA not before: Mon 31 Oct 2022 19:18:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.2.236.0/22 maxlen: 24
141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:7a:d0:d5:03:7e:71:5d:fd:cd:bf:17:c3:54:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Oct 31 19:18:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f30ffb5764f58a370518bf1151c2bbdde8c554c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:e0:08:6c:a7:86:22:66:53:13:ad:b3:09:
85:fe:ff:9b:1e:1c:50:5c:9f:ff:1a:75:61:07:e9:
5b:5d:b9:04:a3:bb:2d:cc:73:39:d3:e9:5f:6e:06:
69:2f:aa:e5:9a:7c:b8:ba:d9:a2:48:ab:06:b7:f9:
f1:db:64:e1:7b:6e:26:b6:3a:0a:3d:40:70:20:e5:
fa:c3:1f:58:aa:ca:d2:0a:48:c2:8b:3a:52:ba:65:
c0:07:f2:4c:cd:bb:9d:f9:b9:e3:38:c1:08:04:e3:
41:5e:1b:df:40:36:c1:1b:b0:57:a1:72:d3:e6:4f:
41:73:86:5f:d0:d6:3e:80:ae:6b:d7:7a:d4:bc:67:
ed:a6:35:95:05:19:ba:3b:e0:63:49:09:e4:41:e3:
6e:af:ad:ed:05:c1:ae:d7:94:04:ef:1e:2e:5c:a1:
0f:af:9c:85:47:8a:f0:48:49:e9:ce:a9:90:78:17:
26:a8:ac:56:78:d4:13:68:59:5a:08:e4:c5:a1:eb:
b7:28:30:8e:55:ee:34:ed:80:8d:5a:3a:7b:a1:1a:
12:1d:ea:7f:ec:ba:d8:47:8a:87:fb:86:50:a2:8b:
8a:6d:1b:72:1a:3f:27:bf:ca:9b:6e:b3:62:e8:59:
a4:ef:26:a4:a4:19:3b:d2:56:f0:8f:66:35:dc:da:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:FB:57:64:F5:8A:37:05:18:BF:11:51:C2:BB:DD:E8:C5:54:C6
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8w_7V2T1ijcFGL8RUcK73ejFVMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:59:3a:7a:57:87:c7:ce:53:d9:cd:2b:cf:f3:de:f0:94:d8:
b1:48:2e:9f:38:95:0c:6d:d3:d3:36:e7:75:f5:97:e1:a9:18:
5f:1f:62:b9:9b:3f:28:fa:fe:93:5e:fd:8f:4c:33:d5:20:49:
33:5c:a9:09:66:f3:c2:cd:0a:c2:9e:2b:58:cd:4c:d6:56:a5:
64:f8:bc:87:4f:08:68:9a:e7:40:c9:c0:1d:46:46:2b:98:80:
88:5b:97:bd:17:db:db:48:16:44:f5:c9:3e:02:4c:e4:bc:32:
9c:71:90:ee:d0:63:1a:77:3a:dc:c9:06:4a:8b:19:73:5d:50:
b8:fa:a0:34:15:c2:24:66:17:c8:2e:f8:e7:31:6e:39:0d:7d:
30:14:2c:e6:77:0a:a7:63:0c:25:d9:0f:76:17:6b:20:7f:7d:
db:81:75:3c:9e:28:55:77:bb:a7:a9:c1:26:70:e5:fb:84:74:
5c:f3:c3:91:bd:95:c0:b1:47:dd:90:a7:77:dd:c0:7b:4b:9f:
ec:5b:66:06:7c:c7:e7:50:b4:83:e6:8f:39:88:71:4a:c9:0c:
75:14:dd:27:fb:61:92:62:cc:46:74:75:a9:3d:85:56:2a:b1:
a9:58:bd:56:e9:2b:04:87:26:cd:59:37:8b:b4:4a:57:c3:8c:
37:db:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org