Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ERVquYq_RmSkQMhvCHmfShjKhU0.roa
File: ERVquYq_RmSkQMhvCHmfShjKhU0.roa (raw, json)
Hash identifier: rapedweRb0UNKD6I1Bgq2T7i1L/V8vs8fJSezPaTd8s=
Subject key identifier: 11:15:6A:B9:8A:BF:46:64:A4:40:C8:6F:08:79:9F:4A:18:CA:85:4D
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182B0B8C6AB672739317D6496CC3E58D9D8
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ERVquYq_RmSkQMhvCHmfShjKhU0.roa
Signing time: Thu 18 Aug 2022 11:31:15 +0000
ROA not before: Thu 18 Aug 2022 11:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272692
IP address blocks: 213.225.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:b8:c6:ab:67:27:39:31:7d:64:96:cc:3e:58:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 18 11:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11156ab98abf4664a440c86f08799f4a18ca854d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e0:0b:32:73:00:05:b3:2b:40:be:5e:a0:
70:eb:16:16:93:6b:87:ed:aa:1d:7e:9f:5b:91:ab:
60:9e:89:c6:88:6e:fa:4b:cc:a7:57:bd:40:62:b3:
17:40:19:59:9d:ca:b7:b1:51:d8:f6:2f:10:00:9c:
6a:8f:f0:96:d8:87:8c:20:63:2d:90:6b:1a:ad:72:
44:25:a0:89:a1:bd:be:7c:18:72:5c:c1:c9:e2:20:
17:d8:92:2a:2d:4f:9a:a8:76:4a:6b:8d:7d:98:41:
84:86:5a:93:7e:81:3d:0d:51:2b:4d:52:b1:fd:ab:
3d:db:d1:84:7f:b1:23:ef:fe:5d:c7:2f:fd:dc:a8:
de:4f:7d:bb:77:ca:2f:06:44:2e:76:32:a1:bf:1d:
fa:60:32:ac:8c:1f:20:b0:e2:98:aa:f5:6b:99:e7:
a8:74:d0:3d:da:e8:ae:ea:a4:a3:68:f2:ec:3f:75:
8b:41:22:bf:1f:95:cf:22:44:0f:f3:54:a1:94:d0:
6c:bb:79:85:0f:c8:63:15:ed:6b:a7:6a:4c:2c:33:
82:b7:1a:f6:7c:86:ef:52:be:82:25:e4:a3:5d:95:
0b:bd:9a:97:0b:54:98:db:60:58:d0:a4:3c:18:11:
0c:ba:e5:11:64:15:65:90:6f:1e:f6:cc:94:ba:d3:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:6A:B9:8A:BF:46:64:A4:40:C8:6F:08:79:9F:4A:18:CA:85:4D
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ERVquYq_RmSkQMhvCHmfShjKhU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:14:3c:c0:1e:4e:51:78:ea:9f:5d:31:b1:25:74:d3:5d:26:
04:13:ce:cb:c4:38:79:cd:46:99:69:6c:a6:e0:ec:53:08:45:
6c:03:97:da:3e:5c:3e:8c:80:ab:47:5e:66:be:7b:9e:bb:49:
c0:6c:63:09:1b:f4:20:13:68:1b:cf:0f:2b:8e:76:1e:b9:dc:
19:82:17:24:9c:0d:bb:4f:61:b5:f3:df:b5:99:d6:66:f6:79:
67:07:b6:31:89:94:a4:f9:d4:2a:0f:cc:41:23:92:6e:87:6f:
9a:ed:53:0f:4a:eb:14:52:b4:96:72:b2:51:a3:5a:23:a1:94:
fd:1e:65:be:f8:2e:f5:e5:68:a0:72:3c:f8:13:11:03:63:1a:
a0:50:5c:dd:af:69:3c:a5:88:0f:5d:10:66:8a:9f:ad:61:83:
bb:e1:4e:de:06:a2:e9:9d:aa:de:c3:b7:20:13:c2:fc:4c:36:
ee:22:43:19:b9:eb:6f:18:06:f0:bc:a0:08:63:19:ba:5f:19:
a8:d7:8b:b5:87:14:53:36:67:eb:3f:40:3d:77:4a:b5:d6:c4:
58:7c:af:6e:7b:b6:77:92:33:05:6e:73:40:0a:30:2f:bb:9e:
1f:c8:59:f7:31:01:ca:8d:c5:f1:cf:a4:55:17:e9:06:18:fb:
40:90:05:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKwuMarZyc5MX1klsw+WNnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwODE4MTEzMTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTE1NmFiOThhYmY0NjY0YTQ0MGM4NmYwODc5OWY0YTE4Y2E4NTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupPgCzJzAAWzK0C+XqBw6xYWk2uH
7aodfp9bkatgnonGiG76S8ynV71AYrMXQBlZncq3sVHY9i8QAJxqj/CW2IeMIGMt
kGsarXJEJaCJob2+fBhyXMHJ4iAX2JIqLU+aqHZKa419mEGEhlqTfoE9DVErTVKx
/as929GEf7Ej7/5dxy/93KjeT327d8ovBkQudjKhvx36YDKsjB8gsOKYqvVrmeeo
dNA92uiu6qSjaPLsP3WLQSK/H5XPIkQP81ShlNBsu3mFD8hjFe1rp2pMLDOCtxr2
fIbvUr6CJeSjXZULvZqXC1SY22BY0KQ8GBEMuuURZBVlkG8e9syUutMyhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEVarmKv0ZkpEDIbwh5n0oYyoVNMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvRVJWcXVZcV9SbVNrUU1odkNIbWZTaGpLaFUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eHuMA0G
CSqGSIb3DQEBCwUAA4IBAQCfFDzAHk5ReOqfXTGxJXTTXSYEE87LxDh5zUaZaWym
4OxTCEVsA5faPlw+jICrR15mvnueu0nAbGMJG/QgE2gbzw8rjnYeudwZghcknA27
T2G189+1mdZm9nlnB7YxiZSk+dQqD8xBI5Juh2+a7VMPSusUUrSWcrJRo1ojoZT9
HmW++C715Wigcjz4ExEDYxqgUFzdr2k8pYgPXRBmip+tYYO74U7eBqLpnarew7cg
E8L8TDbuIkMZuetvGAbwvKAIYxm6Xxmo14u1hxRTNmfrP0A9d0q11sRYfK9ue7Z3
kjMFbnNACjAvu54fyFn3MQHKjcXxz6RVF+kGGPtAkAWU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org