Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/fZjEJIdjT5XlyDE591HIwIz-8GY.roa
File: fZjEJIdjT5XlyDE591HIwIz-8GY.roa (raw, json)
Hash identifier: m/k/3TKowhj52QKXEcZqyIOCSM4RgVdgpVTY+ZI0EZ8=
Subject key identifier: 7D:98:C4:24:87:63:4F:95:E5:C8:31:39:F7:51:C8:C0:8C:FE:F0:66
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 7079E7
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/fZjEJIdjT5XlyDE591HIwIz-8GY.roa
Signing time: Tue 28 Jun 2022 02:23:20 +0000
ROA not before: Tue 28 Jun 2022 02:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 213.139.84.0/22 maxlen: 24
213.139.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7371239 (0x7079e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jun 28 02:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d98c42487634f95e5c83139f751c8c08cfef066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:f9:d3:7d:46:48:a9:46:3c:7a:1c:e6:9c:
5c:c8:3b:f0:df:58:a7:dd:46:49:7c:f8:82:2b:90:
8b:ab:48:bb:72:9e:b7:96:78:02:a6:83:e9:c1:d6:
40:77:53:43:1d:c7:ff:0c:44:b1:f2:1e:37:17:f0:
77:af:bc:6d:fe:97:5e:11:40:7b:67:dd:21:f9:58:
68:42:c6:19:40:d0:24:2d:08:80:4e:f3:a5:b9:89:
4f:fe:f9:fa:de:7e:32:87:da:00:73:e0:a8:2c:84:
f4:2a:f1:43:6b:18:be:ec:70:5d:3f:ff:e0:2d:4c:
95:c7:3f:8e:da:b8:b3:63:42:33:e3:62:61:a4:88:
bf:bd:67:70:e0:0c:b1:b4:c2:fe:5e:de:46:d0:d1:
ff:9d:36:51:1b:75:36:13:33:a3:37:8a:14:9b:b5:
0a:62:fa:20:ff:38:74:9f:4c:21:7a:d0:01:a1:1a:
28:ec:9e:28:3a:52:ab:ae:87:6e:54:27:4c:98:cb:
50:27:0e:8e:06:9f:b9:df:fa:fa:23:29:e8:ef:c6:
6a:eb:78:d7:40:4d:2f:f9:fd:ca:dc:47:1c:ec:fc:
2a:18:e6:29:08:4c:aa:3c:74:7f:f6:da:28:cd:f3:
2d:80:f0:be:aa:06:36:b9:21:56:15:30:3b:c8:c5:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:C4:24:87:63:4F:95:E5:C8:31:39:F7:51:C8:C0:8C:FE:F0:66
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/fZjEJIdjT5XlyDE591HIwIz-8GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.84.0-213.139.91.255
Signature Algorithm: sha256WithRSAEncryption
12:ff:98:2e:f1:aa:57:7a:18:7a:86:ab:c5:7e:06:f9:08:88:
f7:5d:d0:70:69:ea:e0:0b:38:a2:5b:d0:59:47:f0:d0:a0:07:
74:81:bf:5b:4a:97:6f:7f:48:a0:b3:5d:75:ad:90:4b:09:e6:
5f:a8:7d:c5:3f:87:cf:28:ed:4b:cc:c5:e7:66:1b:44:7d:3e:
e5:c8:ce:2f:30:db:24:3b:32:f7:ab:bb:08:3b:6f:47:24:26:
64:94:9a:73:d3:1d:b5:41:a8:72:34:11:1c:54:5e:8a:54:64:
fd:0c:53:97:10:6a:f0:b6:fe:4a:6d:9f:63:43:56:56:dc:71:
46:8f:ae:94:3b:0e:e1:3c:fd:88:b3:95:f2:87:6a:18:b4:76:
64:a2:b4:b3:0b:63:f4:0a:ef:c5:8f:26:f5:de:09:a0:8a:20:
0a:52:f6:a9:e7:e3:ac:0d:24:e1:88:ce:7d:7a:b9:13:32:b0:
cd:91:14:b8:1a:40:6b:7f:0f:b6:1f:5e:e7:8e:aa:08:ad:3c:
53:e8:91:c1:b6:eb:dc:0c:0f:63:82:3c:75:c9:9f:f1:58:30:
d5:59:05:c4:1c:ba:a9:5a:39:16:7a:9b:d6:cf:01:98:7a:fe:
58:f2:42:0e:df:8d:bc:6f:ca:80:f1:98:58:88:ee:75:b4:20:
88:55:b3:7d
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIDcHnnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFlNzEyZWUwHhcNMjIwNjI4
MDIyMzIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZDk4YzQyNDg3NjM0
Zjk1ZTVjODMxMzlmNzUxYzhjMDhjZmVmMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtc75031GSKlGPHoc5pxcyDvw31in3UZJfPiCK5CLq0i7cp63
lngCpoPpwdZAd1NDHcf/DESx8h43F/B3r7xt/pdeEUB7Z90h+VhoQsYZQNAkLQiA
TvOluYlP/vn63n4yh9oAc+CoLIT0KvFDaxi+7HBdP//gLUyVxz+O2rizY0Iz42Jh
pIi/vWdw4AyxtML+Xt5G0NH/nTZRG3U2EzOjN4oUm7UKYvog/zh0n0whetABoRoo
7J4oOlKrroduVCdMmMtQJw6OBp+53/r6Iyno78Zq63jXQE0v+f3K3Ecc7PwqGOYp
CEyqPHR/9toozfMtgPC+qgY2uSFWFTA7yMVPrwIDAQABo4ICETCCAg0wHQYDVR0O
BBYEFH2YxCSHY0+V5cgxOfdRyMCM/vBmMB8GA1UdIwQYMBaAFAlIdfQGeV20KgF5
3x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Q1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgxLzEv
ZlpqRUpJZGpUNVhseURFNTkxSEl3SXotOEdZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8z
MzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgxLzEvQ1VoMTlBWjVYYlFx
QVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcG
CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALVi1QDBALVi1gwDQYJKoZIhvcN
AQELBQADggEBABL/mC7xqld6GHqGq8V+BvkIiPdd0HBp6uALOKJb0FlH8NCgB3SB
v1tKl29/SKCzXXWtkEsJ5l+ofcU/h88o7UvMxedmG0R9PuXIzi8w2yQ7Mveruwg7
b0ckJmSUmnPTHbVBqHI0ERxUXopUZP0MU5cQavC2/kptn2NDVlbccUaPrpQ7DuE8
/YizlfKHahi0dmSitLMLY/QK78WPJvXeCaCKIApS9qnn46wNJOGIzn16uRMysM2R
FLgaQGt/D7YfXueOqgitPFPokcG269wMD2OCPHXJn/FYMNVZBcQcuqlaORZ6m9bP
AZh6/ljyQg7fjbxvyoDxmFiI7nW0IIhVs30=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org