Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WRpi4SzOR7hvYguFDJIWOZLlffs.roa
File: WRpi4SzOR7hvYguFDJIWOZLlffs.roa (raw, json)
Hash identifier: LJWgFr5Pl3p+zAAty63vU+VZMQE/Ms8a9bbrHsnlh10=
Subject key identifier: 59:1A:62:E1:2C:CE:47:B8:6F:62:0B:85:0C:92:16:39:92:E5:7D:FB
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01827D5D34EF702B020D77FEAB7CEB82BAC7
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WRpi4SzOR7hvYguFDJIWOZLlffs.roa
Signing time: Mon 08 Aug 2022 12:10:36 +0000
ROA not before: Mon 08 Aug 2022 12:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1
IP address blocks: 212.2.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:5d:34:ef:70:2b:02:0d:77:fe:ab:7c:eb:82:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 8 12:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591a62e12cce47b86f620b850c92163992e57dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:bc:a2:0d:ce:ef:54:76:26:4f:24:16:4b:
47:7f:f3:39:cf:10:04:45:19:c8:d5:95:06:44:51:
ec:11:2f:69:6c:64:9e:73:5d:ca:2a:3b:3b:63:5a:
80:ec:22:56:23:55:09:c0:e1:b5:d6:8b:03:1b:de:
a4:d4:47:53:ad:84:2c:dd:b5:c8:07:fa:1f:cb:99:
16:e4:dd:f3:87:a3:df:06:16:77:af:c2:a1:1b:b1:
5e:3b:3e:80:a5:33:70:f0:1d:35:a4:09:86:a4:45:
36:66:61:f3:02:6d:3d:da:2f:fa:3f:b1:8d:5a:11:
cb:93:71:9b:e6:7c:94:5d:dc:62:be:c0:e2:32:46:
ec:c8:a6:4f:99:ea:1b:fb:c6:e1:ea:fb:e9:e7:33:
40:ef:0f:b9:37:ee:9b:46:5b:52:8b:35:39:ba:0c:
30:13:3e:82:20:36:f4:dc:99:be:6b:8b:f9:39:98:
23:a2:4f:63:0a:64:ec:1f:9b:0a:b1:3c:2a:f6:24:
09:60:43:d5:c1:fe:f2:81:97:d1:3e:a1:76:bd:bc:
41:f2:2d:21:6b:ac:40:e1:38:6f:16:6d:5e:0c:af:
4d:3b:ec:23:ce:a7:f9:6a:b8:c5:af:60:bd:9d:dd:
a5:89:3f:26:5d:fa:61:a9:3e:a0:b0:3c:63:d9:34:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:62:E1:2C:CE:47:B8:6F:62:0B:85:0C:92:16:39:92:E5:7D:FB
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WRpi4SzOR7hvYguFDJIWOZLlffs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:cd:4b:8a:37:97:e9:24:55:a6:63:28:ae:0c:45:f0:0f:ba:
d9:0c:ab:e5:67:ce:c7:aa:fe:68:ee:be:db:86:8b:be:1c:8c:
64:14:f1:f3:d2:cd:6b:9a:2c:80:85:35:e5:43:51:95:d1:5f:
d7:da:0f:be:65:23:a0:aa:16:68:9c:c7:d5:b5:23:7c:05:1c:
95:a7:f4:b2:85:d4:0f:5f:ee:2a:19:a0:ea:4a:8b:af:ee:d8:
2b:a8:f4:58:c2:dd:a8:33:ef:61:c9:5e:1c:94:eb:b3:1a:06:
66:20:2d:54:0b:11:42:ce:f4:39:68:78:03:a3:ea:79:cc:2a:
e4:85:8d:21:1b:cd:04:54:c4:a9:82:2c:47:f4:d1:f0:78:c0:
7b:00:83:c8:f5:5b:60:c5:72:1f:6c:ca:7a:3c:ba:11:6d:2e:
18:1b:e3:72:65:9f:4c:65:24:53:6a:5c:ca:1e:c1:a4:37:c3:
2f:5a:66:e0:d6:9c:1d:aa:21:e5:83:eb:3e:82:1d:c7:96:e7:
84:1a:02:3f:bb:83:0c:0a:46:c1:9e:91:4b:77:e9:7f:78:1f:
04:e2:66:28:e2:1c:80:9e:51:25:3b:01:7c:21:7d:3f:84:7e:
4a:3c:5d:e4:43:a3:39:ef:22:7b:f7:47:b6:0a:05:85:71:64:
8a:0e:09:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJ9XTTvcCsCDXf+q3zrgrrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwODA4MTIxMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTFhNjJlMTJjY2U0N2I4NmY2MjBiODUwYzkyMTYzOTkyZTU3ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJK8og3O71R2Jk8kFktHf/M5zxAE
RRnI1ZUGRFHsES9pbGSec13KKjs7Y1qA7CJWI1UJwOG11osDG96k1EdTrYQs3bXI
B/ofy5kW5N3zh6PfBhZ3r8KhG7FeOz6ApTNw8B01pAmGpEU2ZmHzAm092i/6P7GN
WhHLk3Gb5nyUXdxivsDiMkbsyKZPmeob+8bh6vvp5zNA7w+5N+6bRltSizU5ugww
Ez6CIDb03Jm+a4v5OZgjok9jCmTsH5sKsTwq9iQJYEPVwf7ygZfRPqF2vbxB8i0h
a6xA4ThvFm1eDK9NO+wjzqf5arjFr2C9nd2liT8mXfphqT6gsDxj2TRJGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkaYuEszke4b2ILhQySFjmS5X37MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvV1JwaTRTek9SN2h2WWd1RkRKSVdPWkxsZmZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ALuMA0G
CSqGSIb3DQEBCwUAA4IBAQDJzUuKN5fpJFWmYyiuDEXwD7rZDKvlZ87Hqv5o7r7b
hou+HIxkFPHz0s1rmiyAhTXlQ1GV0V/X2g++ZSOgqhZonMfVtSN8BRyVp/SyhdQP
X+4qGaDqSouv7tgrqPRYwt2oM+9hyV4clOuzGgZmIC1UCxFCzvQ5aHgDo+p5zCrk
hY0hG80EVMSpgixH9NHweMB7AIPI9VtgxXIfbMp6PLoRbS4YG+NyZZ9MZSRTalzK
HsGkN8MvWmbg1pwdqiHlg+s+gh3HlueEGgI/u4MMCkbBnpFLd+l/eB8E4mYo4hyA
nlElOwF8IX0/hH5KPF3kQ6M57yJ790e2CgWFcWSKDgn6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org