Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/G0jCoF2-xws1XXhighOIdYfDsF4.roa
File: G0jCoF2-xws1XXhighOIdYfDsF4.roa (raw, json)
Hash identifier: BOQTaZ4TvIqt2yw4E1GN9/kdzpCccTBGq3GBATxkhgA=
Subject key identifier: 1B:48:C2:A0:5D:BE:C7:0B:35:5D:78:62:82:13:88:75:87:C3:B0:5E
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182D187DB1768C43AA47198E4808554D567
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/G0jCoF2-xws1XXhighOIdYfDsF4.roa
Signing time: Wed 24 Aug 2022 20:25:17 +0000
ROA not before: Wed 24 Aug 2022 20:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200435
IP address blocks: 213.225.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:87:db:17:68:c4:3a:a4:71:98:e4:80:85:54:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 24 20:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b48c2a05dbec70b355d78628213887587c3b05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:6e:fe:bd:29:fa:ab:6b:d7:ee:bb:a8:a7:
b9:30:a0:d0:86:80:b4:47:3c:35:8f:25:c7:0b:3d:
54:8d:e9:1d:a8:16:cb:25:93:e8:c8:f5:82:cf:79:
0c:27:b3:2f:cd:06:b2:df:04:d9:37:61:34:19:e8:
72:0b:81:31:9a:4a:e7:c5:c0:67:e6:fa:2e:39:25:
8d:ab:cc:0a:fe:34:4a:27:a5:67:80:e9:55:8e:40:
97:13:5e:88:e7:54:9b:14:b9:f5:f8:39:8d:a3:cf:
4d:25:5f:43:32:52:c7:eb:50:2f:11:d4:79:1b:a4:
e2:70:65:ba:ff:51:99:26:8c:a4:ed:48:76:77:da:
cc:85:d4:b2:7e:8d:f0:3f:46:12:31:30:27:30:b4:
db:af:9d:36:7c:ca:7a:9d:ee:ee:4b:44:73:94:11:
21:c4:4e:96:38:87:28:80:0e:1b:d6:42:1a:ae:9c:
a5:b7:6a:fd:56:f6:bd:d2:0e:4f:f8:63:91:a9:6b:
fa:dc:95:cc:f1:3f:ba:d0:ba:37:c1:68:5f:7c:26:
3c:30:ae:ed:cc:63:4b:59:d3:e7:e5:d0:49:5f:9d:
46:31:11:d8:fc:3a:47:c0:59:2e:76:58:6d:2e:1c:
a5:7c:ac:57:33:45:a6:0a:a0:c3:81:6c:6c:a1:dc:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:C2:A0:5D:BE:C7:0B:35:5D:78:62:82:13:88:75:87:C3:B0:5E
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/G0jCoF2-xws1XXhighOIdYfDsF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f4:95:81:5a:41:8d:27:4c:4e:12:af:08:ca:16:0a:e7:ed:
c4:de:33:c1:38:9a:79:80:44:60:5b:f1:20:3c:9c:41:d6:b0:
fa:21:5f:31:59:02:18:07:d6:06:38:69:e9:ca:25:3c:0c:82:
48:19:59:bc:b1:f1:1b:d6:88:53:8d:07:3f:c2:12:8c:16:92:
83:46:ce:73:b5:fd:b4:01:37:7e:68:cd:0a:a8:71:59:b6:34:
66:f0:42:48:e1:31:32:e9:77:b4:3a:9f:bd:b8:96:bd:f7:23:
b9:ef:5f:20:59:b1:89:5f:70:44:1a:96:88:d3:b7:ed:3c:b9:
a7:04:70:fe:78:03:c7:f2:c1:15:50:b9:9a:61:09:33:ef:c3:
de:08:ae:a1:1c:e3:0a:ca:5e:1f:e6:a5:d8:55:73:91:29:41:
79:f4:02:42:27:e3:98:90:19:cf:bb:66:bc:57:cf:9e:fc:37:
fe:a6:17:76:48:46:b6:89:52:91:89:fd:3d:c5:de:2a:c1:b5:
24:31:4f:a6:8c:c2:22:6d:b7:68:c7:1a:23:8b:bb:d2:79:ca:
a8:65:50:02:5f:f3:50:27:b7:7f:b8:dc:c6:6e:93:de:55:d3:
29:28:88:d7:a7:44:da:18:c3:30:08:10:7f:4f:71:9e:77:75:
23:d8:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org