Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/CkZ_xnKTucmEtJ_Ohq4Ewj0Sxm0.roa
File: CkZ_xnKTucmEtJ_Ohq4Ewj0Sxm0.roa (raw, json)
Hash identifier: ASwGslZW8bddiDvuQbRUIvZfbr4vLDdx6/6s9KQyvPg=
Subject key identifier: 0A:46:7F:C6:72:93:B9:C9:84:B4:9F:CE:86:AE:04:C2:3D:12:C6:6D
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1B5E6C1BF84D88830BB6649629DE
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/CkZ_xnKTucmEtJ_Ohq4Ewj0Sxm0.roa
Signing time: Sun 01 Jan 2023 13:54:50 +0000
ROA not before: Sun 01 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 82.118.25.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
45.80.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1b:5e:6c:1b:f8:4d:88:83:0b:b6:64:96:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a467fc67293b9c984b49fce86ae04c23d12c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:24:01:34:fa:ff:3d:cc:d7:0b:a4:a3:b3:
af:a7:49:fb:52:1c:2a:fa:6c:df:5f:c2:cf:f2:2c:
07:99:08:b3:18:26:2a:13:88:f8:6d:b7:d9:e0:82:
10:25:bc:48:27:78:25:4d:80:dd:1a:51:aa:bc:24:
98:0a:42:99:fc:f8:b3:a7:45:ac:3c:04:1d:d8:04:
00:45:32:91:bd:0e:cd:08:bd:cd:e0:ce:34:e4:82:
1b:b1:d3:a2:be:76:80:ee:02:36:86:a8:29:9f:d4:
45:28:ea:22:7c:11:59:09:29:56:a4:14:2e:8a:34:
c6:10:2b:1d:da:cc:4e:af:77:ba:ea:06:6a:0a:33:
fa:26:bf:f0:ac:d6:b3:2d:f9:e0:a1:6f:3c:67:b7:
92:2c:0c:96:4e:d3:6d:26:0b:92:15:91:32:ee:59:
ac:af:3a:88:78:8f:99:39:79:67:aa:8a:8c:eb:a0:
d3:07:86:06:88:c6:4d:dc:78:81:43:33:94:25:51:
c1:b9:7c:f3:ae:d9:8a:1c:bd:41:e9:60:a5:5e:27:
0e:aa:4f:3e:23:90:7a:fe:8e:3a:65:70:96:b4:51:
18:74:02:c7:a0:1f:d1:e5:78:7f:db:8d:17:f6:7b:
82:0b:fb:06:a3:8c:30:95:c1:ba:8b:8c:be:ec:8d:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:46:7F:C6:72:93:B9:C9:84:B4:9F:CE:86:AE:04:C2:3D:12:C6:6D
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/CkZ_xnKTucmEtJ_Ohq4Ewj0Sxm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
82.118.25.0/24
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7b:ba:54:b1:8c:fd:7d:1a:a6:35:62:60:c5:64:48:af:f7:
63:cf:0c:56:dd:2a:4a:f1:01:4f:23:c8:02:ab:8c:0d:10:da:
03:78:06:74:4a:55:63:97:cb:71:d1:a8:17:26:6f:4c:3f:74:
57:f6:d5:3d:93:ab:ae:94:94:68:28:3e:50:a3:f4:88:0f:e9:
fe:3f:8e:c0:5e:07:b1:a6:48:ca:1c:41:53:98:ce:86:82:9d:
9e:f9:ce:7b:d7:a5:d5:ad:8e:29:0d:71:e9:b1:5b:1a:98:a9:
fd:bf:0e:31:ed:b8:48:6a:17:8b:92:65:16:f5:d4:ea:47:95:
b5:36:a8:cc:11:2c:28:76:85:4f:30:44:77:89:16:a2:b1:db:
5e:87:b4:2a:d5:41:24:66:ed:bd:7a:87:5c:2f:bc:46:ae:91:
73:13:3a:15:21:b6:86:a4:95:a6:b5:64:9f:6e:96:41:2c:8d:
f6:89:53:5b:fa:ab:5a:ae:51:56:98:3e:1f:66:01:3c:4d:81:
e9:43:04:0d:93:56:f9:4f:71:62:ef:5a:8b:72:87:82:a7:3c:
9d:a0:28:08:62:68:57:34:ff:18:be:c5:92:28:c7:e8:9e:63:
ab:92:8f:2b:a7:b3:18:9c:d2:95:6f:02:3e:5b:da:5d:bb:3f:
0f:fa:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org