Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/x0DgcLEuGvZJNUk3xlcQnXLf0wk.roa
File: x0DgcLEuGvZJNUk3xlcQnXLf0wk.roa (raw, json)
Hash identifier: QKW+jO6iuuPeKkU4/Ena/2BCzkq6yPvsmUidBoym0+Q=
Subject key identifier: C7:40:E0:70:B1:2E:1A:F6:49:35:49:37:C6:57:10:9D:72:DF:D3:09
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018668FB2F7A17869100CD73045FF48E0000
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/x0DgcLEuGvZJNUk3xlcQnXLf0wk.roa
Signing time: Sun 19 Feb 2023 09:22:17 +0000
ROA not before: Sun 19 Feb 2023 09:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 213.225.236.0/24 maxlen: 24
141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:fb:2f:7a:17:86:91:00:cd:73:04:5f:f4:8e:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Feb 19 09:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c740e070b12e1af649354937c657109d72dfd309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:c7:ec:2e:32:26:99:12:41:8e:81:4c:5f:
56:b7:36:1d:b8:39:64:ad:a5:ed:2b:0c:5f:ff:8d:
42:fd:aa:9a:0d:8f:f7:e3:f2:95:1a:7a:20:b3:65:
33:21:d7:e9:c8:1d:dc:9f:93:6f:82:81:4e:7f:de:
1b:67:1c:78:ed:e8:a4:72:37:51:02:4c:36:24:ac:
48:c6:13:42:07:2b:40:27:40:e5:81:84:7f:7a:34:
ee:e5:a2:14:a7:ad:f2:1c:b7:b4:d6:b4:be:d1:24:
e0:18:80:cd:d7:be:3b:93:9d:ac:f0:c9:17:95:fd:
99:bd:71:3c:7c:5b:07:0c:3c:bd:68:2d:b4:d9:3e:
7a:3f:62:d4:d8:26:37:11:4f:ef:80:f8:db:c3:fb:
23:d2:3d:f8:5a:69:90:f2:ca:38:ff:e7:f0:37:39:
0a:ec:3f:77:10:14:09:e6:17:62:a4:f8:fe:c5:d1:
86:99:11:42:88:44:0f:7a:b4:ba:5c:9d:1a:4c:c3:
ee:84:25:f1:40:0d:23:26:d4:41:c3:74:23:ef:54:
a5:80:96:e3:84:71:b5:33:80:95:f5:2f:3e:c8:02:
a7:c8:8b:46:81:cb:c6:bb:07:92:a5:c4:5d:a5:36:
71:a1:98:41:ec:0f:50:89:b4:35:6b:7d:72:31:39:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:E0:70:B1:2E:1A:F6:49:35:49:37:C6:57:10:9D:72:DF:D3:09
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/x0DgcLEuGvZJNUk3xlcQnXLf0wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c2:f5:aa:e9:11:b8:f9:17:d4:1b:84:94:18:e0:07:2e:7b:
1b:dc:f7:f2:52:24:4a:d6:55:00:e2:f0:92:10:4b:ee:67:d3:
5d:87:2d:48:c3:5d:d4:39:7a:f8:f1:72:f2:5d:fe:08:a4:96:
f4:8e:a3:be:bb:55:8f:66:d9:7e:a8:cd:b3:17:8b:76:a8:09:
e5:b8:ae:15:30:23:59:d6:b5:2d:15:09:ea:cf:64:2b:b0:a9:
44:c1:49:e7:2d:ca:45:0a:ca:7e:01:8d:5d:93:15:19:1b:8b:
81:1b:bd:b1:5f:e2:b8:23:18:19:e4:6b:97:d2:82:35:17:71:
7e:62:fd:a4:40:3e:e9:9a:be:2e:8a:24:d2:4f:e2:64:f8:2d:
60:3e:00:31:52:35:b9:4a:e4:50:41:fe:09:24:fc:fa:48:0a:
22:56:90:a1:55:89:27:7b:d4:77:4b:2c:6a:1a:be:0f:5b:37:
5d:b0:ad:44:0b:bf:4a:5b:1c:9f:81:38:21:26:6a:a8:17:b3:
0d:e8:0a:73:9c:2d:41:8d:de:fe:17:35:97:fe:31:ce:19:27:
e2:98:38:b6:1e:dc:c2:21:0f:91:31:c9:55:77:69:0b:67:23:
4e:32:68:4e:35:82:cf:2f:75:81:f5:8d:3f:d3:a6:cd:1c:e6:
aa:ab:f8:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZo+y96F4aRAM1zBF/0jgAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMjE5MDkyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzQwZTA3MGIxMmUxYWY2NDkzNTQ5MzdjNjU3MTA5ZDcyZGZkMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRLH7C4yJpkSQY6BTF9WtzYduDlk
raXtKwxf/41C/aqaDY/34/KVGnogs2UzIdfpyB3cn5NvgoFOf94bZxx47eikcjdR
Akw2JKxIxhNCBytAJ0DlgYR/ejTu5aIUp63yHLe01rS+0STgGIDN1747k52s8MkX
lf2ZvXE8fFsHDDy9aC202T56P2LU2CY3EU/vgPjbw/sj0j34WmmQ8so4/+fwNzkK
7D93EBQJ5hdipPj+xdGGmRFCiEQPerS6XJ0aTMPuhCXxQA0jJtRBw3Qj71SlgJbj
hHG1M4CV9S8+yAKnyItGgcvGuweSpcRdpTZxoZhB7A9QibQ1a31yMTnYmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdA4HCxLhr2STVJN8ZXEJ1y39MJMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEveDBEZ2NMRXVHdlpKTlVrM3hsY1FuWExmMHdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjWJIAwQA
1eHsMA0GCSqGSIb3DQEBCwUAA4IBAQDCwvWq6RG4+RfUG4SUGOAHLnsb3PfyUiRK
1lUA4vCSEEvuZ9Ndhy1Iw13UOXr48XLyXf4IpJb0jqO+u1WPZtl+qM2zF4t2qAnl
uK4VMCNZ1rUtFQnqz2QrsKlEwUnnLcpFCsp+AY1dkxUZG4uBG72xX+K4IxgZ5GuX
0oI1F3F+Yv2kQD7pmr4uiiTST+Jk+C1gPgAxUjW5SuRQQf4JJPz6SAoiVpChVYkn
e9R3SyxqGr4PWzddsK1EC79KWxyfgTghJmqoF7MN6ApznC1Bjd7+FzWX/jHOGSfi
mDi2HtzCIQ+RMclVd2kLZyNOMmhONYLPL3WB9Y0/06bNHOaqq/i3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org