Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/d0PCg_79_YwriKy6KOKNznSzdTg.roa
File: d0PCg_79_YwriKy6KOKNznSzdTg.roa (raw, json)
Hash identifier: Kz2m1cA19ooBo/RovS+KZH8r0XYUs2HoFjhaunO55KM=
Subject key identifier: 77:43:C2:83:FE:FD:FD:8C:2B:88:AC:BA:28:E2:8D:CE:74:B3:75:38
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 018497CEB90A59727666CCC29E2C7EC97EC9
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/d0PCg_79_YwriKy6KOKNznSzdTg.roa
Signing time: Mon 21 Nov 2022 01:30:18 +0000
ROA not before: Mon 21 Nov 2022 01:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 213.139.64.0/24 maxlen: 24
213.139.67.0/24 maxlen: 24
213.139.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:97:ce:b9:0a:59:72:76:66:cc:c2:9e:2c:7e:c9:7e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Nov 21 01:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7743c283fefdfd8c2b88acba28e28dce74b37538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:0f:76:b9:d1:f6:c8:8b:3e:71:a1:4b:68:
0a:bd:7d:b5:fa:b5:f1:01:eb:63:ac:07:93:59:b0:
4a:b1:c7:30:f1:79:52:ca:59:fa:10:d2:91:b9:47:
22:23:08:0c:fc:59:c0:37:70:b7:f1:dd:70:42:5a:
f8:3a:22:14:1f:df:47:f5:96:28:57:02:e1:95:24:
59:31:fe:43:ff:55:e3:6e:d0:6e:3c:c9:b2:de:15:
00:1c:06:36:88:3b:45:17:11:23:ae:94:ce:32:82:
0a:3a:42:82:ae:fe:25:83:d8:b6:26:5d:f5:e4:62:
66:9f:41:93:18:d1:91:3a:a9:e7:e0:e0:2e:20:40:
85:5e:1c:0d:d7:3b:96:0a:98:99:9b:99:bd:74:c4:
80:3e:5c:2e:d4:8c:51:51:17:d9:c4:8a:7b:19:38:
0c:37:e5:68:a8:5d:44:81:dc:af:7d:c0:08:99:f3:
9c:30:a7:87:5b:bb:67:e8:53:c0:44:71:26:fc:2a:
1a:fd:23:d7:a8:d4:cc:ba:fa:84:ed:6e:96:a4:e6:
3d:15:6e:de:ae:4b:54:2b:e1:df:7d:7e:25:ba:1b:
0a:e7:54:9a:88:d3:56:fa:db:0f:7e:04:07:e3:2d:
86:db:57:75:14:0f:37:3c:d0:58:55:1a:43:86:c9:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:C2:83:FE:FD:FD:8C:2B:88:AC:BA:28:E2:8D:CE:74:B3:75:38
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/d0PCg_79_YwriKy6KOKNznSzdTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/23
213.139.67.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7f:a9:4b:b2:1d:b0:a5:90:17:ed:85:31:8f:fa:0d:11:09:
96:a1:b4:a7:8c:f9:90:d9:f5:6c:f2:10:54:65:8e:e2:60:46:
18:8e:b3:70:e0:37:de:0b:90:02:ab:02:23:d5:8c:95:eb:7f:
4e:96:2f:00:61:ca:18:1c:31:cf:50:77:4c:f0:f3:34:8a:0a:
25:b9:92:90:e3:ac:fa:5b:c6:8f:3b:11:bc:30:b5:90:e4:ef:
21:a5:ba:8e:65:8a:ed:0d:cf:6e:d2:bf:55:4a:0f:10:fe:1a:
dd:90:35:a8:e4:e6:77:32:71:a4:c7:7c:90:39:12:8e:3d:a9:
c3:17:a7:04:93:ae:34:33:c7:9b:70:30:f9:1b:12:08:b7:6f:
89:80:b3:e0:7c:28:02:af:06:fb:d1:a7:fc:8b:62:67:1d:0c:
12:62:eb:2a:35:2a:9c:17:d3:ab:0f:35:1f:49:57:07:6e:1d:
b2:9e:92:bf:38:48:5d:40:b2:6d:4f:9d:50:c2:60:0d:42:1b:
af:81:b8:c9:db:3a:09:fe:c5:cd:4b:9a:09:52:95:30:4f:df:
0b:af:ee:7f:de:0e:b8:71:6f:db:84:cb:a7:5c:cd:65:f2:20:
e4:cc:50:21:84:ed:21:e5:29:7e:0b:46:62:ce:06:2b:8a:9e:
3f:95:41:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org