Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/LsP1CYplIrqW5YW_I5TXfKFNus4.roa
File: LsP1CYplIrqW5YW_I5TXfKFNus4.roa (raw, json)
Hash identifier: P4W3C+ioEm22dJGyyu4zJqBPgBHkmOx3Vru2u8x5Mfo=
Subject key identifier: 2E:C3:F5:09:8A:65:22:BA:96:E5:85:BF:23:94:D7:7C:A1:4D:BA:CE
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04EBB7E0
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/LsP1CYplIrqW5YW_I5TXfKFNus4.roa
Signing time: Fri 01 Jul 2022 10:26:41 +0000
ROA not before: Fri 01 Jul 2022 10:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.2.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82556896 (0x4ebb7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 1 10:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ec3f5098a6522ba96e585bf2394d77ca14dbace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:b5:c6:8f:31:f6:eb:50:dd:03:3f:68:9c:
41:36:c7:38:d3:3c:1a:e5:5e:46:b0:7e:8d:cb:7c:
23:45:cb:45:74:02:71:63:d2:2b:3e:ad:5d:ff:fa:
0f:33:8d:55:69:22:b7:4e:51:f7:11:01:b7:7e:8e:
33:d3:09:3c:9a:21:8d:63:47:37:ff:99:8c:8d:03:
11:68:6d:8b:38:f2:cf:6f:c1:a6:96:b5:95:40:5f:
38:a4:d4:4a:b7:34:71:68:e2:18:8e:51:e5:fe:19:
a5:c3:0a:17:9c:20:13:5a:f5:60:b6:40:a7:e4:c3:
a7:36:63:c3:58:30:ea:c7:c8:e0:99:e4:58:d3:12:
6b:c7:3d:7d:26:df:9f:d3:e2:60:7e:74:3e:01:d0:
8d:6f:68:d2:1b:32:92:2d:52:2b:e1:ca:c4:e5:13:
0f:1e:29:6a:67:f1:66:34:37:9b:8c:ad:df:8f:73:
89:03:34:03:d1:d9:cb:ee:60:b5:00:a2:b4:fb:c8:
b2:b9:f1:1a:8d:5d:18:85:71:ef:4e:71:14:98:06:
b5:74:08:fe:5f:2d:cb:49:f0:8a:2b:64:5a:61:c1:
83:41:ca:9b:b1:e6:53:f8:88:0b:36:51:d7:22:a2:
f9:07:c4:36:37:9d:9a:7a:2e:a7:ad:2a:1b:a7:da:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:F5:09:8A:65:22:BA:96:E5:85:BF:23:94:D7:7C:A1:4D:BA:CE
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/LsP1CYplIrqW5YW_I5TXfKFNus4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:05:5f:e6:c1:b2:e2:17:c3:79:fe:d2:04:14:1c:6b:3b:06:
05:cb:64:1c:6c:3f:b2:20:94:22:9c:0e:55:4c:b0:26:38:eb:
fa:e6:94:dc:44:fe:bf:03:c7:6d:d9:f1:fe:d0:aa:0d:2b:66:
f5:1f:97:01:b9:1d:2e:38:ac:a1:a2:00:73:a5:d2:11:b2:df:
12:92:f2:8a:cc:14:e5:d1:97:7d:61:50:36:04:7a:a3:d3:ea:
15:3d:5e:7e:8c:57:c3:19:3a:79:1d:40:f5:4e:9a:ee:dd:b0:
25:66:22:c6:71:2a:84:8b:db:8e:60:dc:bd:12:37:f7:ae:61:
57:ce:d8:a1:2e:28:92:0e:e4:37:e2:73:87:78:50:00:90:fd:
02:b5:61:9f:ea:5f:a4:97:32:4a:f1:95:82:e6:10:0a:e0:da:
9e:e7:3a:99:20:7b:90:93:f9:ae:f6:fd:58:5c:42:8b:4b:ba:
8c:f7:ed:6d:5d:16:5d:4a:fa:e4:5c:23:2a:e8:a1:6e:9c:ea:
b9:2a:9f:30:db:50:c4:67:0c:de:10:2b:01:58:89:31:dd:dd:
c9:c6:1d:e1:e0:8c:56:83:a5:ee:73:a4:24:35:0c:3e:8f:6a:
d8:9e:23:11:8e:50:92:b4:c6:c0:67:4a:ae:5a:93:f1:c6:a6:
88:8b:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org