Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ot8KI2jzkWmHYsD6pi9GnBQbdfA.roa
File: ot8KI2jzkWmHYsD6pi9GnBQbdfA.roa (raw, json)
Hash identifier: WC91zdLUBsg8ME1iKWbM4TgdOmynJL/Yt2il8Kh6GWg=
Subject key identifier: A2:DF:0A:23:68:F3:91:69:87:62:C0:FA:A6:2F:46:9C:14:1B:75:F0
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01821A7B9C649A8BA93EF5FAE355A9219CC3
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ot8KI2jzkWmHYsD6pi9GnBQbdfA.roa
Signing time: Wed 20 Jul 2022 07:21:24 +0000
ROA not before: Wed 20 Jul 2022 07:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.2.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:7b:9c:64:9a:8b:a9:3e:f5:fa:e3:55:a9:21:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 20 07:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2df0a2368f391698762c0faa62f469c141b75f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:12:c0:30:e4:ae:39:28:20:11:2e:d3:70:
fc:20:30:b7:30:ae:56:bd:89:91:d7:0f:04:7b:3c:
ea:fb:d5:3c:df:71:5e:74:e0:02:89:17:a1:27:89:
a1:8e:37:97:cf:30:54:96:65:5e:e0:c7:b7:64:40:
82:d9:f1:fd:5a:b2:10:54:6a:9a:5f:8d:cd:25:8b:
7d:6b:29:28:d1:64:97:36:6b:94:67:e5:2a:f2:db:
8c:44:c8:99:7a:61:43:a2:3e:4b:ac:59:f4:76:58:
00:e1:b1:62:87:e5:bf:76:ba:92:7a:36:ce:42:99:
6d:c8:f4:ac:66:49:ba:5e:55:d2:b8:df:88:dd:2d:
49:07:d5:dc:1f:74:6c:e7:ad:bf:3b:6f:18:5f:cf:
d5:6d:a2:37:3e:44:23:51:58:f9:c3:55:e1:63:65:
34:a0:65:d8:74:26:d5:04:b8:05:c8:bf:bb:84:9f:
c4:d5:39:64:16:7f:e0:89:cc:a0:1b:00:ed:5d:0c:
ef:e2:84:9a:24:07:32:dd:33:02:d7:24:bb:1d:ac:
7b:33:62:53:ed:68:76:da:cb:3f:b9:cc:91:33:76:
35:f0:6e:ce:7a:c0:83:ce:bb:c3:06:ac:96:db:67:
06:98:55:11:a4:c3:6b:f6:69:be:75:20:3a:13:50:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:0A:23:68:F3:91:69:87:62:C0:FA:A6:2F:46:9C:14:1B:75:F0
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ot8KI2jzkWmHYsD6pi9GnBQbdfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:19:75:7a:21:df:9a:37:6b:41:63:fc:f9:f2:1a:e0:e9:e2:
9a:1e:a6:c0:bc:c8:7f:5c:10:c9:dc:4d:90:e6:d0:d1:a1:93:
d5:fc:5d:d7:f1:61:19:d0:24:4e:36:a6:68:71:e3:15:36:bf:
d8:b4:2a:61:ad:21:ed:9e:d1:7d:83:4a:0d:75:65:d6:e5:20:
a1:a7:63:fd:9d:7f:a3:1c:0a:c9:28:3d:64:bc:71:7f:26:8f:
4a:89:88:6f:62:43:5c:65:91:7c:29:7d:22:54:2d:7b:f2:3b:
91:37:91:64:77:22:8f:95:a0:ff:69:c6:84:e5:97:f7:fe:38:
06:af:bf:a2:fc:cd:bb:0a:a4:81:92:3f:9e:da:6b:2a:22:00:
07:d1:8b:81:99:20:8a:e7:20:db:e3:e2:42:3f:76:85:17:40:
68:f1:27:b4:48:13:9c:c7:e2:12:62:b4:7e:36:2a:ad:d1:1b:
e7:96:2b:b7:d8:d3:fc:8b:91:44:f9:34:45:d6:ce:c0:04:2b:
6f:d5:5e:36:76:15:ac:dd:20:8a:d4:33:f8:55:37:7e:41:44:
da:79:be:54:5c:3b:50:4f:bf:dc:06:66:b3:cf:5c:15:e4:26:
cc:2a:c5:88:78:39:96:73:a8:db:95:cd:37:58:6e:a6:2c:1a:
f0:be:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org