Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/smSMj33Czsdvw8_vRZU4Ecqe620.roa
File: smSMj33Czsdvw8_vRZU4Ecqe620.roa (raw, json)
Hash identifier: tYbypVyYvRWHTIr4dYILyOX4oCETwQcIOfXEl26tmtI=
Subject key identifier: B2:64:8C:8F:7D:C2:CE:C7:6F:C3:CF:EF:45:95:38:11:CA:9E:EB:6D
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 018225F92DA142744F638BAC9065A23E1D77
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/smSMj33Czsdvw8_vRZU4Ecqe620.roa
Signing time: Fri 22 Jul 2022 12:54:23 +0000
ROA not before: Fri 22 Jul 2022 12:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204591
IP address blocks: 213.139.69.0/24 maxlen: 24
213.139.74.0/23 maxlen: 23
213.139.73.0/24 maxlen: 24
213.139.80.0/22 maxlen: 24
213.139.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:f9:2d:a1:42:74:4f:63:8b:ac:90:65:a2:3e:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jul 22 12:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2648c8f7dc2cec76fc3cfef45953811ca9eeb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:79:f6:2b:9c:ee:11:77:96:15:fa:4e:0e:
ff:b3:f0:01:30:45:eb:ac:44:8d:70:0b:16:6b:34:
74:86:54:08:18:22:74:d1:05:f1:98:0c:1d:9f:6a:
9b:5a:3f:e8:1b:77:1c:92:85:06:51:a9:cf:d1:02:
a6:66:71:d3:b7:95:56:c0:a0:13:88:68:f1:65:d1:
33:15:6b:14:0e:25:bd:e7:91:40:86:fc:fb:2f:29:
00:ab:1a:aa:53:49:fc:88:a1:fb:cd:23:ba:9d:24:
07:14:5e:d9:dd:a7:1e:8d:5c:ee:6d:a2:96:31:33:
7b:d0:97:fc:80:46:40:d7:af:b9:77:b6:9c:15:65:
52:04:d3:f6:29:21:55:29:14:a8:eb:6c:6a:f5:cb:
50:0f:e6:df:ef:70:19:77:53:94:50:e9:95:18:0f:
ab:0c:e6:cd:23:f1:02:a6:3e:b9:8e:34:dc:77:76:
14:24:b6:23:f6:84:b4:be:1e:35:b0:fd:2b:12:88:
5c:d4:ea:93:08:ac:9f:ef:9c:88:70:0d:99:12:ab:
05:4f:2b:79:00:0d:b9:12:22:8a:35:93:e5:7d:e2:
3a:bc:ff:99:3e:22:4c:13:fd:b4:e6:b2:66:8c:ef:
36:b1:15:2d:dd:7e:10:01:f2:cd:69:a7:00:6a:13:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:8C:8F:7D:C2:CE:C7:6F:C3:CF:EF:45:95:38:11:CA:9E:EB:6D
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/smSMj33Czsdvw8_vRZU4Ecqe620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
213.139.73.0-213.139.75.255
213.139.80.0/22
213.139.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d2:a9:2f:04:d4:e8:91:d0:85:00:05:ff:9e:11:96:8e:df:
dc:49:6e:1d:8b:ba:d8:1f:27:d0:38:2a:6a:25:9f:d0:76:56:
bc:5e:6d:72:9e:b9:27:c9:e3:6a:78:83:b1:9f:3f:99:b5:14:
c8:7f:7b:5f:c3:b5:08:b5:23:db:73:6e:91:fc:d9:bb:d0:91:
55:06:6d:15:2b:f5:fd:8e:30:60:86:77:da:08:f7:0c:7d:7f:
d3:93:1b:dd:c2:20:b5:61:4c:8d:7f:e5:4e:9e:08:b7:ef:8c:
2e:82:56:99:9d:9f:e5:f8:37:26:31:2c:39:9e:03:58:6a:dc:
1a:97:91:09:c4:3e:e7:18:3b:29:f0:9b:8f:31:a5:6c:8b:9e:
8c:48:30:14:e5:7e:9a:35:f9:5d:07:ff:84:4d:88:f1:fb:ab:
57:6a:a6:54:18:fc:61:78:2e:e0:f4:7b:40:16:bf:aa:27:4f:
cc:23:7c:e0:1e:6c:42:5e:8e:6c:01:42:93:99:9d:c8:8e:cb:
d2:42:49:4a:e2:80:6b:ee:b0:3d:97:81:4f:78:fa:e9:83:2f:
54:43:97:51:7b:0e:03:9a:2c:15:e1:81:37:ff:c0:72:b9:df:
bb:b2:6e:18:ea:2c:74:0b:02:16:9a:31:81:ba:7c:24:4f:ae:
3e:4f:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org