Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OvWjpWwivrUka_sTJvPa9dkhXvc.roa
File: OvWjpWwivrUka_sTJvPa9dkhXvc.roa (raw, json)
Hash identifier: IbKie9JJ59HuvXE5WgnDVH/XRJMqVJl3x9wQyRfTAzM=
Subject key identifier: 3A:F5:A3:A5:6C:22:BE:B5:24:6B:FB:13:26:F3:DA:F5:D9:21:5E:F7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1E2042785E1762992F4618188086
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OvWjpWwivrUka_sTJvPa9dkhXvc.roa
Signing time: Sun 01 Jan 2023 13:54:51 +0000
ROA not before: Sun 01 Jan 2023 13:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272692
IP address blocks: 213.225.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1e:20:42:78:5e:17:62:99:2f:46:18:18:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3af5a3a56c22beb5246bfb1326f3daf5d9215ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:46:41:9a:29:5c:35:24:cd:92:eb:e2:36:
ad:79:b0:3a:93:eb:dd:48:0e:03:78:9d:4c:7b:5e:
3e:bc:0d:69:fa:19:ab:08:db:ff:12:75:f8:bf:7a:
04:1d:79:db:df:75:10:ea:60:f5:91:10:63:a8:fb:
e4:29:1f:02:bf:85:64:b0:f5:b2:98:0c:7d:75:ba:
37:ab:6c:05:86:08:e5:f5:9f:6b:ea:21:52:e9:26:
94:ae:c7:25:aa:04:7e:50:f9:24:15:18:60:ff:76:
d1:90:54:ee:71:c2:97:6d:a8:de:55:5a:7d:10:7d:
20:ff:f1:e1:97:4a:76:c8:13:fe:8c:8c:45:05:66:
1e:48:cd:50:5b:c5:e9:d6:cb:42:ae:d8:2e:69:3e:
99:b7:68:5e:3e:3f:6b:cd:21:70:16:5d:cd:08:1e:
50:ce:36:5e:18:a1:da:6a:55:0a:ec:14:74:f9:cb:
a9:55:df:3a:11:2c:9e:f0:55:bc:50:a0:e1:9c:c8:
3f:4a:12:7f:27:da:3a:25:1a:b3:40:31:b9:3c:62:
e3:74:1d:40:47:5c:e4:eb:31:06:8d:5f:79:4e:f7:
9d:24:47:a8:99:10:49:92:84:d9:cf:40:7d:43:be:
06:a8:97:0f:5d:50:a4:10:fd:eb:85:2f:a7:e4:b6:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:A3:A5:6C:22:BE:B5:24:6B:FB:13:26:F3:DA:F5:D9:21:5E:F7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/OvWjpWwivrUka_sTJvPa9dkhXvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
81:87:d2:9c:bc:05:71:54:34:bd:d3:53:70:4c:f0:df:66:4f:
ac:61:1e:e8:56:18:dd:b2:ba:4b:60:e1:17:67:ff:2e:d6:c9:
41:65:bf:f0:af:7c:33:05:fa:d8:87:1b:c9:de:3d:e3:2f:20:
36:bd:37:e4:48:e6:74:22:27:65:41:86:7c:68:90:6c:87:98:
2a:fe:38:9c:ac:bf:76:55:db:e7:ed:4d:89:f3:68:73:c3:5c:
e4:79:d6:f3:a4:7a:1e:08:1f:64:6e:11:1f:a4:2c:fa:a2:32:
15:4c:19:7b:6b:af:a7:33:16:ce:05:33:e6:e7:af:52:df:6b:
82:dd:8a:96:34:fc:1d:60:68:2a:a6:b7:16:d0:12:90:65:45:
77:fa:d2:3f:4b:65:c2:4c:3e:e6:e4:c3:68:0a:ee:a2:49:83:
cf:b7:ee:43:32:44:9d:90:22:98:ca:f1:9d:9d:03:03:db:f4:
d1:ce:b2:a6:1f:bd:b6:21:cf:95:b5:c2:9d:a0:84:dc:14:3c:
76:03:ab:87:76:55:31:f0:a6:18:d2:89:36:0e:af:09:c5:ee:
75:9c:e2:49:6e:8f:a7:b3:2b:e4:97:4a:9e:f8:11:e6:c2:03:
e9:7d:14:02:c9:a3:02:56:5a:df:da:cf:e6:35:01:2f:dd:a9:
84:74:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org