Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEKINdOxUkUILNK52L3tqztn5WY.roa
File: MEKINdOxUkUILNK52L3tqztn5WY.roa (raw, json)
Hash identifier: D7E/56qyWGxgrN3badMlq/wX2+2M3mnmaTmANxjmONE=
Subject key identifier: 30:42:88:35:D3:B1:52:45:08:2C:D2:B9:D8:BD:ED:AB:3B:67:E5:66
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1BE7D6886A00921FCF00E784BDF5
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEKINdOxUkUILNK52L3tqztn5WY.roa
Signing time: Sun 01 Jan 2023 13:54:50 +0000
ROA not before: Sun 01 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 213.225.237.0/24 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1b:e7:d6:88:6a:00:92:1f:cf:00:e7:84:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30428835d3b15245082cd2b9d8bdedab3b67e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:f5:2d:28:74:c2:7a:f7:ab:51:bd:60:0d:
5b:ac:cd:8f:34:17:de:7c:b4:81:64:81:7a:7a:32:
71:4e:82:b4:8b:f3:23:f6:48:04:98:10:2d:27:68:
27:1f:96:22:b9:6a:3d:ba:22:83:f0:51:e5:08:3b:
f5:07:9d:46:34:20:e2:83:aa:8c:d7:f3:c6:6c:05:
8b:03:f6:33:4b:50:08:7f:80:c2:b4:5d:69:d1:b4:
72:c4:f8:b5:75:c9:23:5f:b4:4c:cb:ce:a5:7c:5d:
ef:32:73:00:c9:61:e4:4e:3e:d9:3a:6a:e6:c1:e9:
41:6d:d0:cd:e5:ee:e8:9f:63:ee:e4:50:86:96:84:
56:6e:c2:5b:df:c3:a0:ea:39:98:04:32:e3:31:f8:
a9:f7:d5:c6:b3:0e:e1:50:6a:9d:5f:86:72:19:20:
dc:2c:5c:db:14:98:e7:d9:e0:22:c7:55:d0:2b:d6:
cd:34:c7:8c:be:ba:cd:20:38:b1:c8:a3:f4:9b:bf:
7c:48:28:16:cb:b2:b8:ba:d7:b7:31:80:72:87:d1:
56:26:56:9d:31:20:ce:8c:9a:95:c3:7d:2c:76:a0:
e5:09:db:35:bd:11:9f:f9:ef:f1:08:8d:36:f9:85:
e6:73:ba:bb:d0:87:2b:00:62:27:ef:ba:41:5c:9d:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:88:35:D3:B1:52:45:08:2C:D2:B9:D8:BD:ED:AB:3B:67:E5:66
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MEKINdOxUkUILNK52L3tqztn5WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/23
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e3:f1:4d:2c:b1:d5:8d:60:b2:53:f5:d7:a5:ff:7a:a5:9b:
6b:ff:b1:fe:33:9b:49:7e:c3:00:38:30:c7:99:41:97:95:e3:
b2:5c:a0:6c:be:bb:7d:99:eb:75:ef:ce:10:f9:59:45:a6:8e:
f4:e3:18:99:40:ec:5f:d3:0f:dc:00:a2:d3:cd:45:6c:b9:68:
74:5e:18:3c:38:dc:01:30:3f:78:af:98:fd:79:41:2c:0a:ee:
48:ca:89:01:c3:f7:c5:dd:4d:13:f6:a2:eb:a8:d2:0b:26:df:
95:63:90:90:16:d6:6f:7e:74:7e:ab:89:d6:86:89:e1:48:f0:
5e:4e:33:96:ba:c1:99:95:67:dd:9f:9a:df:f7:34:5a:4b:16:
cc:cb:c4:ae:19:5e:e7:0d:b5:46:70:b1:67:eb:8e:3d:04:da:
eb:fe:03:eb:7d:96:3b:1e:86:db:35:62:c0:2d:21:31:fd:4c:
e5:75:f5:66:23:98:98:e9:a8:de:84:db:e1:47:7d:b5:39:af:
e3:d9:1d:2d:9d:74:b2:d9:96:1b:96:0f:68:e2:df:44:6d:14:
28:ac:e6:19:53:14:28:b1:5e:a9:a5:27:d4:a8:fb:39:39:00:
10:ef:ba:7a:fd:c7:b3:7a:f5:8b:f8:bc:15:8d:e1:a8:fe:59:
6f:a5:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org