Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CTPCu1KW9u8k4jdEJ7Xih4BeO4Y.roa
File: CTPCu1KW9u8k4jdEJ7Xih4BeO4Y.roa (raw, json)
Hash identifier: fR4QT22fI3D1wLvGcD+LuUqgjvZskKGAc4IHr5Pue+8=
Subject key identifier: 09:33:C2:BB:52:96:F6:EF:24:E2:37:44:27:B5:E2:87:80:5E:3B:86
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 01856D1CD06FD8F10ADA770FB64282BEB0A3
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CTPCu1KW9u8k4jdEJ7Xih4BeO4Y.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 213.139.64.0/24 maxlen: 24
213.139.67.0/24 maxlen: 24
213.139.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:d0:6f:d8:f1:0a:da:77:0f:b6:42:82:be:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0933c2bb5296f6ef24e2374427b5e287805e3b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:ed:d3:9e:5b:2e:30:7f:f1:fd:92:1f:4e:
92:43:d3:0b:51:d8:a7:13:9e:44:e8:c8:f5:85:72:
20:1f:ef:29:4c:9c:cd:54:db:0a:a7:ba:63:e3:87:
58:ac:d3:bb:55:1e:0d:68:00:26:6d:d4:e3:a2:f9:
3b:03:c6:f3:0d:e2:70:8c:38:dd:85:2a:62:f2:f6:
ac:58:c7:7c:61:f9:ec:c5:24:e8:a6:19:2f:f0:42:
95:0d:af:ae:bf:b3:0f:f5:9a:36:cb:6f:fa:a3:6b:
fb:4a:50:aa:fa:99:67:9a:53:d1:60:e9:97:df:ac:
39:60:c0:6c:a0:9a:29:cd:22:fc:ff:46:e3:53:f1:
23:c6:37:f5:b7:c4:b6:67:17:25:d2:55:1d:be:81:
81:c0:52:88:cc:04:dd:25:6a:89:a8:c2:9e:d4:67:
a4:1f:9b:5f:78:32:82:b0:6c:64:6c:ca:8c:6b:75:
2c:06:c0:92:4b:d0:da:98:38:83:73:86:5d:bc:fb:
0c:28:00:3c:c9:08:6c:19:73:00:06:53:fd:7e:3d:
0b:8b:62:8e:60:de:d8:98:ca:69:5b:b3:1b:91:b7:
68:b9:9b:80:07:fa:06:9e:ef:f4:36:cd:70:2b:a2:
c3:5f:89:fe:d0:f2:4f:5d:29:a7:77:ac:38:11:11:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:C2:BB:52:96:F6:EF:24:E2:37:44:27:B5:E2:87:80:5E:3B:86
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CTPCu1KW9u8k4jdEJ7Xih4BeO4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/23
213.139.67.0/24
Signature Algorithm: sha256WithRSAEncryption
09:90:3d:ac:bd:8a:64:21:0b:1e:7d:b9:65:15:c8:4a:36:30:
1e:3d:00:e5:26:3b:5d:49:2a:0e:91:14:47:69:f6:67:47:af:
35:32:25:3a:c9:6a:41:5a:cd:c3:5d:a1:60:96:90:87:2f:2d:
84:21:b5:3f:dd:67:d4:2f:9b:b2:29:2e:b9:07:08:96:ae:6d:
90:c1:3d:7e:0a:4c:90:b7:ca:8d:90:fc:8c:85:bd:55:ac:1e:
92:f0:b0:07:ba:82:13:20:fa:8a:7d:a0:c3:1d:fd:26:9e:0c:
2b:aa:5d:1a:5c:25:06:b5:88:73:f3:83:b0:af:c1:fe:ae:27:
f7:6b:71:b2:d2:f1:94:20:25:52:66:1d:b2:19:f7:2c:65:45:
49:16:4c:2d:fa:db:6a:c5:80:43:66:7e:0d:81:10:f8:33:6b:
23:34:66:89:de:4b:cf:c9:df:91:87:5c:16:83:2f:84:47:7e:
60:6a:03:be:de:3e:f8:32:63:56:f2:27:9a:86:a9:da:f6:e9:
a1:e0:1a:af:67:7b:21:82:6f:f7:e7:63:91:99:4a:29:48:bc:
b0:df:03:6b:54:46:b7:64:9f:8b:26:e4:d6:a5:8b:12:ca:fc:
6b:0a:7e:f2:e2:4f:3d:4a:b6:11:ac:db:df:db:7e:61:83:27:
57:c4:10:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtHNBv2PEK2ncPtkKCvrCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFl
NzEyZWUwHhcNMjMwMTAxMTEzNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTMzYzJiYjUyOTZmNmVmMjRlMjM3NDQyN2I1ZTI4NzgwNWUzYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzt055bLjB/8f2SH06SQ9MLUdin
E55E6Mj1hXIgH+8pTJzNVNsKp7pj44dYrNO7VR4NaAAmbdTjovk7A8bzDeJwjDjd
hSpi8vasWMd8YfnsxSTophkv8EKVDa+uv7MP9Zo2y2/6o2v7SlCq+plnmlPRYOmX
36w5YMBsoJopzSL8/0bjU/Ejxjf1t8S2Zxcl0lUdvoGBwFKIzATdJWqJqMKe1Gek
H5tfeDKCsGxkbMqMa3UsBsCSS9DamDiDc4ZdvPsMKAA8yQhsGXMABlP9fj0Li2KO
YN7YmMppW7MbkbdouZuAB/oGnu/0Ns1wK6LDX4n+0PJPXSmnd6w4EREdVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAkzwrtSlvbvJOI3RCe14oeAXjuGMB8GA1UdIwQY
MBaAFAlIdfQGeV20KgF53x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUt
ODY0NTgwZDAyZjgxLzEvQ1RQQ3UxS1c5dThrNGpkRUo3WGloNEJlTzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgx
LzEvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1YtAAwQA
1YtDMA0GCSqGSIb3DQEBCwUAA4IBAQAJkD2svYpkIQsefbllFchKNjAePQDlJjtd
SSoOkRRHafZnR681MiU6yWpBWs3DXaFglpCHLy2EIbU/3WfUL5uyKS65BwiWrm2Q
wT1+CkyQt8qNkPyMhb1VrB6S8LAHuoITIPqKfaDDHf0mngwrql0aXCUGtYhz84Ow
r8H+rif3a3Gy0vGUICVSZh2yGfcsZUVJFkwt+ttqxYBDZn4NgRD4M2sjNGaJ3kvP
yd+Rh1wWgy+ER35gagO+3j74MmNW8ieahqna9umh4BqvZ3shgm/352ORmUopSLyw
3wNrVEa3ZJ+LJuTWpYsSyvxrCn7y4k89SrYRrNvf235hgydXxBCJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org