Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kJogQKLPH8qYGhcz0Wu-FxNNl8c.roa
File: kJogQKLPH8qYGhcz0Wu-FxNNl8c.roa (raw, json)
Hash identifier: LsHVoPH6AK2DRcjcecFY6WE/OvVvUjAjIqTX90SuZFQ=
Subject key identifier: 90:9A:20:40:A2:CF:1F:CA:98:1A:17:33:D1:6B:BE:17:13:4D:97:C7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01821A7B9D08D4C102AAA2AF530C92FB5957
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kJogQKLPH8qYGhcz0Wu-FxNNl8c.roa
Signing time: Wed 20 Jul 2022 07:21:24 +0000
ROA not before: Wed 20 Jul 2022 07:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 213.225.239.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:7b:9d:08:d4:c1:02:aa:a2:af:53:0c:92:fb:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 20 07:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=909a2040a2cf1fca981a1733d16bbe17134d97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:4c:d7:75:1b:b0:4f:f2:76:ce:54:92:e5:
bc:62:ae:48:e0:97:40:c2:a9:b9:b5:c4:ee:52:57:
1f:9c:8d:21:da:f9:b2:90:34:91:b0:6e:c6:3d:0d:
32:6d:f0:98:ac:62:c4:83:d7:20:95:30:5e:83:ae:
87:56:9d:e8:6b:4e:a4:dd:04:35:6e:3d:9e:8c:44:
1a:26:e0:3f:e6:43:79:97:74:a3:14:f0:55:82:dc:
35:a6:06:96:55:f4:ad:5d:62:15:78:84:63:91:83:
84:58:e8:96:04:d2:56:a4:21:b3:a6:1e:42:9e:a3:
28:61:2b:43:8a:67:2e:f2:b9:72:60:ab:5d:ff:6b:
41:74:4c:e3:27:b9:0d:b9:72:e1:1e:6c:7e:bf:e7:
a5:72:c2:22:a1:85:3d:f6:f3:6c:31:4e:42:f6:cc:
13:7a:23:37:a6:67:a6:71:66:1e:4c:db:8c:49:ea:
1e:58:4e:59:81:ed:76:e6:2b:e3:e0:cf:4e:60:38:
4f:f3:90:40:ca:73:db:f5:d7:eb:e9:a0:86:a4:cc:
35:96:de:e6:42:da:97:e1:d6:a3:9f:76:1e:14:25:
2a:b6:f3:14:55:3f:ff:4a:63:ed:44:58:4a:2e:00:
f3:3b:89:2c:c2:14:93:7a:d3:a4:98:3c:46:e5:2e:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9A:20:40:A2:CF:1F:CA:98:1A:17:33:D1:6B:BE:17:13:4D:97:C7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/kJogQKLPH8qYGhcz0Wu-FxNNl8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/23
213.225.237.0/24
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:07:4b:8b:b0:b5:5e:71:9d:81:8c:8b:7e:46:e1:18:28:c7:
43:9c:76:a8:4e:41:04:ec:bf:c0:73:30:3d:f7:0a:b2:04:36:
7a:3c:e1:7f:4f:24:07:00:52:1f:17:3f:a5:6d:2e:80:46:c0:
44:6a:de:02:fc:f1:e7:13:bb:aa:d3:fc:f4:c1:73:06:1f:c4:
95:9a:c9:1b:c6:d6:1c:48:3f:47:19:32:9d:fa:73:66:94:c4:
d6:a0:90:9a:89:3f:12:d8:9d:8c:f9:62:11:1a:fc:e9:80:eb:
ae:a3:b0:f2:ac:53:76:a8:59:3b:20:e6:27:59:d0:82:ee:74:
78:2c:7a:79:1e:71:02:bb:76:48:9e:0a:a4:85:ed:d6:9a:ad:
11:64:24:ac:a7:17:a7:34:fb:52:95:d9:7b:dd:d2:12:27:57:
38:e2:26:ea:4a:e8:76:aa:04:35:5e:6d:88:ba:af:e6:6a:0c:
06:b0:0b:92:8c:c5:fc:c2:16:9f:f8:c9:a5:aa:44:af:31:c5:
34:2e:05:13:9f:77:1c:b8:64:86:2e:31:28:8b:42:3f:b7:ff:
76:f1:31:d7:42:c3:ef:0a:ba:79:a3:34:9c:7b:33:cc:78:ca:
37:81:8c:c8:65:2a:e1:b3:f2:6a:cc:af:f6:81:9d:7b:2f:15:
6b:f1:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:05 2025 by rpki-client