Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rWZFfqj4ElFiEkwag71tYo2gErs.roa
File: rWZFfqj4ElFiEkwag71tYo2gErs.roa (raw, json)
Hash identifier: rtVNThRPoyb8IaSkaw/ZDJc3DCq0RJNrAOj/NQ19n3g=
Subject key identifier: AD:66:45:7E:A8:F8:12:51:62:12:4C:1A:83:BD:6D:62:8D:A0:12:BB
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0181ED55FB9BF1FE7102DFD5CCB6FF49D98F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rWZFfqj4ElFiEkwag71tYo2gErs.roa
Signing time: Mon 11 Jul 2022 12:57:23 +0000
ROA not before: Mon 11 Jul 2022 12:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 212.2.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:55:fb:9b:f1:fe:71:02:df:d5:cc:b6:ff:49:d9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 11 12:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad66457ea8f8125162124c1a83bd6d628da012bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:b0:4e:40:13:e4:a6:81:b6:91:4c:9c:a3:
26:53:7b:0e:5c:ec:14:71:a9:bd:50:21:a6:6f:e7:
70:4f:b8:5a:7a:c6:8b:ab:c8:ca:4d:0f:2c:ca:ee:
bb:13:b7:d5:3f:ee:70:f5:36:5d:2a:a8:0b:c7:3b:
e0:74:81:3d:fd:33:9d:1b:f8:48:15:50:0d:c7:8f:
24:5e:fb:d6:68:8f:5d:4b:60:5a:fe:59:84:d0:9e:
2a:b1:09:06:b5:ee:90:07:f4:d8:21:45:d7:2c:6f:
71:b7:03:d4:36:65:be:59:de:9a:45:24:44:7b:4b:
71:d8:87:a4:37:d8:13:a5:48:cb:1b:c1:08:4f:27:
44:ed:84:9a:07:04:95:34:9a:81:07:ad:12:9d:09:
e8:81:91:55:a6:2a:cb:84:e1:76:ce:ce:7d:ae:f3:
24:0d:cb:9d:3a:e5:f6:d0:89:38:21:4d:2d:36:0f:
f7:4f:fc:d2:0d:04:74:10:7f:ed:93:1b:00:34:1d:
0a:03:1f:ba:13:28:41:58:d3:dc:38:bb:a7:36:12:
15:4a:c9:4c:ff:fb:83:8a:56:44:be:b1:d8:54:b5:
ae:72:28:2a:48:84:4b:a6:71:83:a4:b9:94:80:f0:
be:52:90:8c:40:12:5a:ac:36:88:10:55:e4:68:71:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:45:7E:A8:F8:12:51:62:12:4C:1A:83:BD:6D:62:8D:A0:12:BB
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rWZFfqj4ElFiEkwag71tYo2gErs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.236.0/24
Signature Algorithm: sha256WithRSAEncryption
76:45:06:c8:e5:eb:81:7c:44:36:50:fb:73:01:b0:0e:d1:f4:
b0:60:16:39:6d:7e:2b:e6:90:e5:6d:5f:e3:5f:8c:16:1c:8e:
78:a8:70:c0:8a:78:64:c0:d2:1b:00:c4:f6:3b:b7:14:ef:9d:
c6:9e:1a:ce:3b:5c:f7:5b:95:36:84:70:93:dc:6c:25:5d:22:
fb:77:22:9d:d4:2e:89:38:9b:76:1f:6d:e3:36:27:61:75:05:
e8:5d:d2:18:c4:d4:10:32:91:a0:f9:43:19:ed:39:79:a1:ec:
db:15:b0:f6:9b:40:43:f9:10:4b:a7:8c:69:a8:7a:2a:69:51:
76:bf:24:6e:a4:f3:fc:14:9e:12:8c:16:63:93:26:10:e5:01:
af:20:57:25:96:33:71:0a:7b:2a:4d:01:c8:9c:91:19:ce:49:
f0:ae:bb:ba:c0:53:b0:9c:33:01:85:7c:b0:f1:69:fb:9a:80:
1c:f7:af:23:ba:4e:40:3f:a0:21:5d:8e:bc:b1:7a:9b:21:70:
2d:b7:ca:b6:3f:28:f6:a4:3a:c8:92:a7:62:50:8e:d4:54:d3:
66:5b:d9:19:4f:57:4f:aa:15:85:a5:89:c9:15:e6:e0:73:9c:
17:3c:13:d5:d8:ed:6e:6f:5a:45:ce:03:4e:67:bd:e9:fc:3c:
9f:dd:c3:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHtVfub8f5xAt/VzLb/SdmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwNzExMTI1NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDY2NDU3ZWE4ZjgxMjUxNjIxMjRjMWE4M2JkNmQ2MjhkYTAxMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc+wTkAT5KaBtpFMnKMmU3sOXOwU
cam9UCGmb+dwT7haesaLq8jKTQ8syu67E7fVP+5w9TZdKqgLxzvgdIE9/TOdG/hI
FVANx48kXvvWaI9dS2Ba/lmE0J4qsQkGte6QB/TYIUXXLG9xtwPUNmW+Wd6aRSRE
e0tx2IekN9gTpUjLG8EITydE7YSaBwSVNJqBB60SnQnogZFVpirLhOF2zs59rvMk
DcudOuX20Ik4IU0tNg/3T/zSDQR0EH/tkxsANB0KAx+6EyhBWNPcOLunNhIVSslM
//uDilZEvrHYVLWucigqSIRLpnGDpLmUgPC+UpCMQBJarDaIEFXkaHHA7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1mRX6o+BJRYhJMGoO9bWKNoBK7MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvcldaRmZxajRFbEZpRWt3YWc3MXRZbzJnRXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ALsMA0G
CSqGSIb3DQEBCwUAA4IBAQB2RQbI5euBfEQ2UPtzAbAO0fSwYBY5bX4r5pDlbV/j
X4wWHI54qHDAinhkwNIbAMT2O7cU753GnhrOO1z3W5U2hHCT3GwlXSL7dyKd1C6J
OJt2H23jNidhdQXoXdIYxNQQMpGg+UMZ7Tl5oezbFbD2m0BD+RBLp4xpqHoqaVF2
vyRupPP8FJ4SjBZjkyYQ5QGvIFclljNxCnsqTQHInJEZzknwrru6wFOwnDMBhXyw
8Wn7moAc968juk5AP6AhXY68sXqbIXAtt8q2Pyj2pDrIkqdiUI7UVNNmW9kZT1dP
qhWFpYnJFebgc5wXPBPV2O1ub1pFzgNOZ73p/Dyf3cOv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org