Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZqF-izgkSxcIMBZQvScMueIRIMs.roa
File: ZqF-izgkSxcIMBZQvScMueIRIMs.roa (raw, json)
Hash identifier: tUU5j6Mc/8bsY4VwqTAN2M7JUWYIHCQpZts9B1Me3as=
Subject key identifier: 66:A1:7E:8B:38:24:4B:17:08:30:16:50:BD:27:0C:B9:E2:11:20:CB
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182D187DB9CB627006415FE93E2B3966899
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZqF-izgkSxcIMBZQvScMueIRIMs.roa
Signing time: Wed 24 Aug 2022 20:25:17 +0000
ROA not before: Wed 24 Aug 2022 20:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 213.225.237.0/24 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:87:db:9c:b6:27:00:64:15:fe:93:e2:b3:96:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 24 20:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a17e8b38244b1708301650bd270cb9e21120cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:8a:da:5d:0a:c3:e7:52:1b:69:cb:3d:06:
bb:26:8f:6d:2d:9a:5c:61:44:c0:a3:ab:f7:81:eb:
09:3c:ce:05:41:1e:c3:98:20:db:d3:d9:73:3f:b1:
16:b2:4c:ae:8a:84:02:11:34:e7:9e:60:c1:8b:b0:
4b:f9:9e:8c:56:95:f3:02:ba:f0:13:fb:3e:eb:c5:
0c:64:bf:05:15:15:fc:4d:f8:62:4a:43:c8:71:4f:
f8:98:ef:d5:f1:54:79:f0:d1:7d:0f:05:c8:c6:fe:
e4:56:43:27:e4:5b:d3:63:df:73:72:d9:08:0d:91:
52:e1:cc:b5:05:d6:2c:01:f8:8e:ce:bd:f0:c5:3a:
db:89:64:b8:48:ad:17:c4:fb:e2:44:cc:88:69:c6:
77:1e:e3:2e:ca:94:80:7f:6a:04:f6:49:f2:cd:d6:
fe:c2:88:cb:d8:53:21:d3:e4:7e:99:8d:68:14:fe:
a3:b3:51:ef:2e:e8:24:d7:4e:9b:38:fd:b7:1f:35:
bf:d7:fd:0c:79:8a:88:62:9a:f0:87:c0:0e:6a:9a:
03:45:10:0e:6e:36:26:39:e6:80:89:9a:97:97:89:
f9:2c:29:7a:ac:ba:98:ab:4b:14:4d:06:28:21:47:
16:96:ec:b7:7d:c4:46:26:da:c9:88:d6:0c:8e:b6:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:7E:8B:38:24:4B:17:08:30:16:50:BD:27:0C:B9:E2:11:20:CB
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZqF-izgkSxcIMBZQvScMueIRIMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/23
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b1:6f:c7:b6:c2:5b:e6:58:63:0a:08:f3:2f:ac:89:36:19:
d8:2a:6d:21:aa:4a:e1:7b:f7:5b:c3:d7:76:5e:2f:2a:a1:85:
20:15:12:bc:e9:73:ca:5b:49:31:49:a8:da:45:80:79:5f:05:
ee:9c:4a:fd:e3:81:4f:21:e7:27:6e:54:69:b5:23:c7:c7:6b:
be:79:51:46:57:a2:fe:4f:83:22:d3:86:9b:a3:a8:b5:e4:24:
3d:fa:29:6c:43:21:bb:e5:e9:d1:da:6d:f4:70:b0:40:71:5c:
9c:49:5f:66:36:54:83:b8:2f:ef:b6:f2:30:11:31:46:2d:c1:
92:f8:43:c6:ab:08:f7:c9:cd:d5:3b:33:35:ff:71:54:32:cc:
63:01:75:82:cd:5b:af:2b:32:02:dc:da:14:bd:56:62:52:fb:
7d:23:e4:91:be:ba:10:f4:17:97:8d:a3:4c:69:5c:77:b0:21:
42:89:46:8a:a1:e5:4b:9e:ee:43:f4:25:ad:30:c7:0b:54:67:
78:96:09:4f:3a:aa:83:5a:29:26:d4:77:06:9e:a3:89:de:24:
dd:66:b1:f4:01:ad:d4:a9:c0:8e:cf:b8:69:71:1f:9d:ea:9b:
9e:c4:b0:eb:7b:20:0f:6e:fd:f5:80:fb:c7:b6:72:02:c7:6e:
23:38:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org