Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Cm3FB-WRBkrP53-mEMjm9yqZq4o.roa
File: Cm3FB-WRBkrP53-mEMjm9yqZq4o.roa (raw, json)
Hash identifier: D+0hM2pgBeeXeQ/keRl6MdYk1k/7tBHTDtO5xlnCdk8=
Subject key identifier: 0A:6D:C5:07:E5:91:06:4A:CF:E7:7F:A6:10:C8:E6:F7:2A:99:AB:8A
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04674B78
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Cm3FB-WRBkrP53-mEMjm9yqZq4o.roa
Signing time: Tue 17 May 2022 17:56:29 +0000
ROA not before: Tue 17 May 2022 17:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 213.225.239.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73878392 (0x4674b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 17 17:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a6dc507e591064acfe77fa610c8e6f72a99ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:ec:36:58:cf:21:58:c6:a7:41:02:69:57:
ae:6b:07:0a:57:21:0e:20:f5:ef:75:65:fd:5b:cd:
df:16:3b:00:ac:3b:7a:e8:08:eb:59:2d:b4:83:ce:
a9:92:10:29:b8:49:48:f0:ec:c7:ee:83:f0:37:1b:
07:67:97:43:70:31:41:5c:3b:af:4a:e3:f6:e8:cb:
8f:2c:04:41:fb:5f:cd:7a:19:76:59:79:f0:f3:97:
e9:fb:d6:67:cc:af:b0:1f:42:8e:9d:76:d0:d0:d6:
ae:9a:91:a6:a2:66:d5:ad:5d:10:11:25:ea:0d:c1:
63:dc:88:b7:0d:a2:c9:3f:dd:b8:59:f8:3f:66:f7:
6d:53:7e:15:f1:ed:a6:57:22:2b:78:6d:3c:ac:11:
c6:08:d2:8c:50:33:ee:52:a4:16:26:d7:3b:c7:f4:
d6:cf:6f:a2:0a:15:fe:97:76:a6:a9:b6:9e:43:27:
0f:4b:33:79:52:98:06:7f:b9:28:77:98:ae:7f:45:
dc:1d:04:4a:e6:f1:16:5e:e5:65:6e:92:b8:65:37:
04:72:06:83:df:d4:3c:a5:02:5f:6c:55:a5:78:e1:
8b:1c:6f:ac:5e:01:c2:87:b4:fc:4b:e7:29:68:e9:
c6:14:5e:37:86:c3:2e:02:a0:7c:31:00:33:fc:55:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:C5:07:E5:91:06:4A:CF:E7:7F:A6:10:C8:E6:F7:2A:99:AB:8A
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Cm3FB-WRBkrP53-mEMjm9yqZq4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/23
213.225.237.0/24
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:08:cc:33:a2:97:61:33:b5:8f:e6:f1:f6:45:e6:83:ca:53:
e2:9d:5a:ac:c1:af:e1:f4:80:f6:b0:e1:59:42:b7:50:68:6e:
69:a2:75:21:ac:82:97:dd:09:c0:4a:04:49:9d:c9:90:90:4a:
7e:05:67:d3:02:cb:ed:94:b1:b3:ac:90:24:94:57:f0:d7:12:
d4:a4:90:a8:90:5b:ed:57:d1:66:37:85:c2:b0:1e:ad:34:2c:
51:39:b8:21:f7:5a:c2:45:33:a3:72:c8:8e:be:f8:d3:ea:f5:
6b:8a:7c:6b:6a:74:3d:88:3a:7f:fa:b0:8e:34:4f:b2:2b:14:
4f:06:68:36:ea:83:b0:a8:c3:b0:ce:07:1a:30:62:de:eb:0c:
4e:1b:bf:73:09:a0:86:26:77:48:85:f4:24:32:20:8f:d6:1c:
d6:62:c5:e0:37:48:4c:06:37:18:f2:ed:7e:0c:75:75:92:2b:
08:3c:73:61:b9:42:fb:1d:86:be:d4:8a:b8:13:32:d9:2c:29:
e5:8c:9d:01:d4:d9:d8:57:36:48:d1:51:68:8a:6c:5d:27:10:
96:84:9b:bd:2e:41:a3:9b:d7:5b:54:bb:f7:6d:d2:58:fd:18:
df:62:11:cb:76:91:9f:0f:a0:c2:87:23:94:60:c1:93:06:3a:
d9:01:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org