Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/jf5p5j8tiIRe5YQO0nGRDDOowN0.roa
File: jf5p5j8tiIRe5YQO0nGRDDOowN0.roa (raw, json)
Hash identifier: vnfT178qmSSCaggu4+ZvRlmtANrQ1PM+p5Lx9HmwaVo=
Subject key identifier: 8D:FE:69:E6:3F:2D:88:84:5E:E5:84:0E:D2:71:91:0C:33:A8:C0:DD
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 01856D1CCE4C1831E36CD93FCA295BEB9AC5
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/jf5p5j8tiIRe5YQO0nGRDDOowN0.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 213.139.68.0/23 maxlen: 24
213.139.74.0/23 maxlen: 24
213.139.73.0/24 maxlen: 24
213.139.76.0/23 maxlen: 24
213.139.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:ce:4c:18:31:e3:6c:d9:3f:ca:29:5b:eb:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dfe69e63f2d88845ee5840ed271910c33a8c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:b2:79:02:d8:c2:ae:e8:05:09:21:a8:d9:
30:f2:5e:8c:f7:70:a1:0c:b5:f6:00:cb:11:b1:2e:
a4:ca:0a:bf:76:aa:11:81:cb:f4:15:be:07:f7:25:
52:f9:05:44:ce:66:e8:05:8d:ed:dd:59:04:3d:64:
1f:89:98:96:8a:95:f6:73:5e:ad:6a:4f:c1:a7:d5:
40:3d:d0:d3:04:0c:53:f7:29:0b:18:4b:4f:c1:56:
7c:70:79:6a:80:d9:9b:a4:38:1f:d9:d6:2b:30:83:
0f:42:2a:80:25:08:84:8c:5d:f1:5d:b1:9f:1e:23:
a8:a3:75:c2:39:8c:70:4f:e5:ef:5d:7d:22:7c:74:
ec:26:11:20:6e:ef:f7:c9:ef:04:49:ee:15:b2:a7:
c6:99:79:88:ba:8c:21:77:b6:4c:cd:71:78:08:04:
90:a8:e2:d0:22:3a:e2:23:a4:01:b0:c5:15:73:08:
43:4e:a7:7e:3d:40:85:49:16:d6:05:a5:46:7d:a7:
3b:75:41:63:3b:c3:95:04:30:39:8d:c5:14:52:37:
66:bb:7d:f2:69:1e:e8:30:08:f9:76:2a:68:ae:e0:
bc:04:22:da:62:4e:66:4a:81:e7:08:a5:a3:e4:42:
ef:50:62:d9:fc:8a:aa:40:a9:c7:1a:40:35:1c:fc:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:69:E6:3F:2D:88:84:5E:E5:84:0E:D2:71:91:0C:33:A8:C0:DD
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/jf5p5j8tiIRe5YQO0nGRDDOowN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/23
213.139.73.0-213.139.77.255
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:33:3d:5b:e9:e6:93:c2:50:88:ea:11:05:ee:ff:4c:1c:7e:
b1:7b:53:b1:0f:07:cb:ab:fc:f1:63:76:17:f4:ad:34:f9:c5:
28:ed:7c:30:45:fa:63:9a:78:47:e2:11:5c:20:3e:ff:40:fd:
c3:76:da:d3:b1:18:41:46:8b:44:61:86:68:67:52:28:ea:fe:
2d:b0:10:d9:fc:cb:25:15:31:35:1e:a3:f9:5e:4e:26:32:d8:
f9:68:1f:d2:5c:3b:52:5e:ea:3c:fc:8a:66:03:e0:0d:9a:7a:
71:e3:7e:1c:4a:14:35:07:5e:4b:d2:a6:4d:79:3d:61:15:04:
17:75:fa:4c:cc:b8:c3:f5:90:6b:b0:f0:c1:83:6f:46:6b:4e:
a2:4c:ca:d3:5e:51:3a:13:09:0b:77:38:64:63:1b:f5:1d:36:
6c:49:09:84:2b:3f:b2:cd:4d:5d:8c:12:10:da:53:2f:4f:2f:
e2:ea:5e:2b:df:e9:4c:7f:8a:bb:da:5a:a6:d4:fb:05:97:98:
b3:14:41:9d:ca:5d:22:cc:b1:d3:b9:36:22:d5:f2:50:bb:c0:
da:e3:96:02:86:08:68:25:39:9f:76:70:42:99:c5:fc:25:81:
c0:b2:18:b0:58:0d:22:db:b3:a8:87:f2:7f:35:73:1b:25:7b:
a5:79:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org