Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/bNkO2eLLhF8agM4cJCzDGTSQnbo.roa
File: bNkO2eLLhF8agM4cJCzDGTSQnbo.roa (raw, json)
Hash identifier: Z5b7be8OMmbhRfTfXxS6mwg6adBAlT5Ll5Gjg/vbyYQ=
Subject key identifier: 6C:D9:0E:D9:E2:CB:84:5F:1A:80:CE:1C:24:2C:C3:19:34:90:9D:BA
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 0182695263B2167642948340CCEC46B9BBF2
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/bNkO2eLLhF8agM4cJCzDGTSQnbo.roa
Signing time: Thu 04 Aug 2022 14:46:23 +0000
ROA not before: Thu 04 Aug 2022 14:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204591
IP address blocks: 213.139.74.0/23 maxlen: 23
213.139.73.0/24 maxlen: 24
213.139.80.0/22 maxlen: 24
213.139.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:52:63:b2:16:76:42:94:83:40:cc:ec:46:b9:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Aug 4 14:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cd90ed9e2cb845f1a80ce1c242cc31934909dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:60:c7:52:2c:75:b3:aa:19:f3:9e:6c:3f:
e8:4a:d3:96:d3:d9:6a:6e:07:8a:7d:61:a0:d7:b3:
63:10:2a:b2:fc:14:50:80:06:be:44:23:94:a4:6a:
dd:68:54:2d:e1:e3:72:77:8d:7e:67:56:96:83:db:
a4:2e:7e:25:eb:2f:1e:a3:b9:7a:ad:24:60:60:ae:
33:f1:96:45:c8:7a:94:c0:b9:4d:53:a0:c6:39:4f:
ec:01:dc:b3:4e:e3:3b:38:ce:6c:8d:6d:9c:33:95:
13:26:1b:45:34:a5:60:06:1d:b1:cd:d9:32:bb:52:
e6:5e:be:93:c5:0c:73:5f:f7:09:fd:98:df:2e:7a:
ca:4f:d6:52:1d:07:47:4e:89:77:1c:2c:5a:9c:91:
b3:dc:bc:72:42:b8:7d:68:16:70:ff:21:f6:9c:be:
53:4b:f6:c1:16:3e:80:13:16:f7:9c:c9:99:6f:4f:
ab:16:2b:76:4d:52:8d:fb:9c:e2:ee:f1:a5:ac:2c:
f6:e1:fc:a5:3a:c0:79:5d:93:24:9e:21:94:bf:af:
3b:19:c5:d0:e2:f0:19:18:07:75:69:0a:24:33:ef:
cb:cf:9f:3a:16:70:3c:0a:cf:17:70:2f:25:8c:ba:
df:f7:71:ea:8a:ea:c1:f0:1e:64:42:c2:a1:07:a5:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:0E:D9:E2:CB:84:5F:1A:80:CE:1C:24:2C:C3:19:34:90:9D:BA
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/bNkO2eLLhF8agM4cJCzDGTSQnbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.73.0-213.139.75.255
213.139.80.0/22
213.139.92.0/22
Signature Algorithm: sha256WithRSAEncryption
29:5d:0e:54:f3:ef:3a:82:f2:b4:eb:f2:42:0b:63:d0:d0:f1:
5e:ff:ba:f3:a9:57:de:f5:d1:50:e9:73:fb:85:1d:be:f9:28:
b6:20:5f:78:75:59:26:cf:fa:02:7d:53:5c:11:d9:70:eb:30:
4e:93:1e:a3:e8:cc:71:72:b4:73:51:fe:01:32:32:d7:f4:e8:
f8:2d:80:59:b0:b0:7f:e0:0a:61:e9:57:28:c3:f2:82:49:cf:
32:2e:a4:ad:c3:85:00:3e:cf:09:ed:72:a3:21:b0:e4:bf:e5:
aa:16:db:b5:b1:2b:eb:bb:f4:7d:1c:84:21:e6:49:00:e5:f9:
3b:fa:cc:04:93:8c:85:03:a3:52:c5:f1:7d:c1:3d:12:f1:9e:
ff:ba:13:de:76:f6:b4:2d:31:bc:7f:ae:3d:90:f2:07:64:06:
71:ee:aa:b5:e1:33:dd:f9:c2:75:28:85:ed:0f:31:d5:49:b8:
92:3e:ed:b6:6b:af:b2:2a:6c:92:a2:86:1a:45:e9:7f:d1:fb:
41:46:93:60:28:7b:92:c6:68:ef:a6:37:21:db:e9:fd:77:4b:
93:ba:3f:10:c0:42:b4:e5:1c:8f:a4:1d:72:23:39:ee:27:ff:
c9:5a:e8:5c:0d:c1:8f:07:4d:2f:b9:54:01:cc:63:50:13:56:
87:e4:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org