Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/0SsId6yZTyhN02W4uQ1-xi7qbUw.roa
File: 0SsId6yZTyhN02W4uQ1-xi7qbUw.roa (raw, json)
Hash identifier: vm/50wWLY379Hf4f4xSfSeKQ34p93B5al1CHWMcBTWo=
Subject key identifier: D1:2B:08:77:AC:99:4F:28:4D:D3:65:B8:B9:0D:7E:C6:2E:EA:6D:4C
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 0185075C1FD3662D7EADFD13E5F4929CF1D6
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/0SsId6yZTyhN02W4uQ1-xi7qbUw.roa
Signing time: Mon 12 Dec 2022 17:22:35 +0000
ROA not before: Mon 12 Dec 2022 17:22:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 213.139.68.0/23 maxlen: 24
213.139.74.0/23 maxlen: 24
213.139.73.0/24 maxlen: 24
213.139.76.0/23 maxlen: 24
213.139.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:5c:1f:d3:66:2d:7e:ad:fd:13:e5:f4:92:9c:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Dec 12 17:22:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d12b0877ac994f284dd365b8b90d7ec62eea6d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:fc:9e:fb:3c:4b:0e:74:df:d0:64:fb:21:
8a:1a:76:49:3c:1e:bc:df:7a:3c:cc:6b:2e:bb:e8:
59:36:b8:c7:02:51:72:5e:37:91:9f:7e:f7:fe:48:
10:61:db:9f:d5:3f:1e:66:79:94:90:f1:50:b8:1d:
92:85:6b:75:64:49:8c:38:ad:68:51:a8:6c:74:72:
30:71:bc:d9:33:25:f3:0a:b8:36:aa:8a:9e:c5:c0:
7b:bf:b7:cb:54:96:25:bd:05:e3:ed:cc:92:04:c1:
ea:92:d0:10:22:9c:a5:a8:5a:2f:fc:53:d1:be:45:
ad:25:c6:5d:e4:65:fe:cb:cc:1a:ed:e9:f8:ec:98:
89:4a:46:3c:12:9c:a4:66:9a:7b:9f:19:40:d3:5a:
33:1f:56:c5:35:32:64:c9:1a:a7:af:92:e0:dd:f6:
cc:ff:f7:b8:73:69:f1:80:16:8c:55:bd:7c:c4:bc:
c4:cc:a2:89:90:7f:1b:80:8b:4a:07:e3:93:3e:c1:
0e:ea:13:10:1e:43:b9:70:49:64:ae:7d:f5:4d:05:
25:71:83:eb:2a:31:42:11:13:bd:f1:df:74:6e:65:
ff:9e:d2:64:8b:41:15:12:23:fc:f0:d7:e7:61:ea:
8b:61:c3:38:61:0a:88:59:69:f2:84:79:81:31:0f:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:08:77:AC:99:4F:28:4D:D3:65:B8:B9:0D:7E:C6:2E:EA:6D:4C
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/0SsId6yZTyhN02W4uQ1-xi7qbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/23
213.139.73.0-213.139.77.255
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:81:73:25:30:ff:b4:10:9e:b4:af:f7:05:0c:88:e3:9e:
49:26:22:fc:5d:98:89:66:b1:7e:00:38:e6:58:dd:da:8e:4e:
33:b0:12:38:26:21:14:b1:24:52:8d:a1:51:8a:36:ab:2b:00:
cb:c7:d5:63:53:f2:38:d9:10:5c:33:0f:39:a1:50:51:9f:b9:
58:d4:98:12:3d:ec:1a:11:dc:0e:4b:21:25:15:75:68:a4:73:
ac:7c:26:76:b5:1e:e3:30:c1:50:3f:dd:8f:f8:24:10:fb:ce:
be:c7:1f:40:7d:e3:44:d1:cf:d3:1b:62:c3:48:d5:ff:1a:5c:
70:ff:53:90:9e:37:6c:88:e0:12:5f:10:5f:6b:7b:b5:d4:73:
1e:3d:40:53:b9:09:f4:b0:e2:11:cf:d2:9f:66:46:3e:e4:c9:
c2:56:89:32:78:23:22:73:b3:a0:8f:0b:3b:12:ca:e6:f2:81:
1a:49:35:c2:f2:b3:68:7d:0d:42:ae:63:8d:95:bc:c8:d6:19:
a5:95:fa:a5:38:49:4f:56:ed:7e:66:52:32:69:2f:09:7e:a5:
6a:7d:ca:cd:d3:7b:be:fa:5c:a3:46:d8:d7:00:30:54:96:5a:
5a:7c:fb:75:24:76:97:75:20:0a:6a:59:50:27:83:2f:b7:79:
f9:38:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org