Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/uf0rMnv5xBSwQbBxGDdJqnYlFCE.roa
File: uf0rMnv5xBSwQbBxGDdJqnYlFCE.roa (raw, json)
Hash identifier: Jvb5hzLxG1oro/ENU9/bIop9lLznTa/4Em+dL4Ycx4w=
Subject key identifier: B9:FD:2B:32:7B:F9:C4:14:B0:41:B0:71:18:37:49:AA:76:25:14:21
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 19D26A
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/uf0rMnv5xBSwQbBxGDdJqnYlFCE.roa
Signing time: Fri 20 May 2022 13:42:29 +0000
ROA not before: Fri 20 May 2022 13:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 213.139.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692266 (0x19d26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: May 20 13:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9fd2b327bf9c414b041b071183749aa76251421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:63:73:68:2f:11:27:38:74:fc:2c:73:25:
4e:f2:8b:0b:a3:7a:eb:65:ec:88:29:15:4d:1c:b8:
0f:c4:1b:5b:20:1a:2d:ce:01:78:3e:f2:d8:96:9b:
dd:e5:63:92:aa:4e:8a:a9:5d:32:47:a2:46:d4:a7:
ea:c1:1d:97:55:33:10:f9:85:1e:58:27:ff:d4:1a:
50:a8:05:0f:b7:b5:70:2e:b7:15:ee:cc:4f:7a:67:
e9:65:fd:dd:f2:30:d3:50:59:dc:09:cb:58:04:51:
83:5d:2c:43:ff:16:85:41:b1:3b:dc:a4:d1:8f:ca:
ba:30:df:54:d6:09:be:e6:de:28:21:cc:7f:a5:8e:
09:e5:d4:99:fe:7e:d6:e7:ed:35:81:c4:f9:43:08:
f0:91:ef:c7:90:93:a3:33:44:6e:e1:9f:2f:18:08:
26:40:9b:c2:a7:5e:15:8d:d9:bd:8d:a3:c6:b5:56:
10:0f:4f:66:9d:bd:7f:e4:24:fc:eb:5d:cd:fe:3b:
57:0e:21:89:cc:05:e6:d8:65:4a:82:7c:dd:79:03:
d2:fc:43:45:55:05:3a:f3:f8:71:ea:04:57:a3:b1:
99:6d:10:c8:ef:db:5b:07:01:c6:b6:8c:18:18:dc:
e5:90:d5:a1:bf:2f:85:a9:8a:6d:f1:2d:44:ea:20:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:2B:32:7B:F9:C4:14:B0:41:B0:71:18:37:49:AA:76:25:14:21
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/uf0rMnv5xBSwQbBxGDdJqnYlFCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.68.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1b:05:8d:e9:de:14:90:43:5c:87:9a:5c:a4:49:f6:bd:48:
a3:61:42:ee:7f:54:09:87:1f:b5:54:79:75:2b:94:2c:e0:03:
6b:fa:e8:3f:9f:ac:f8:43:b1:d2:e9:b8:c1:c9:8d:cf:e7:3c:
a1:00:d6:9d:71:74:ce:0f:fd:ac:da:7b:72:5b:c0:d1:9a:fa:
7c:d0:40:77:9c:2b:4b:96:2b:e5:1b:e6:e2:06:9f:25:8b:f1:
c5:f0:b8:59:08:f9:d8:41:28:1e:d5:ae:c5:53:86:66:72:dc:
0b:32:23:a1:c7:b8:57:71:ee:00:83:e3:b3:71:23:57:75:46:
0e:46:6a:e4:08:73:b0:af:0d:79:2f:48:c8:41:50:8d:d1:66:
14:2d:10:fa:89:1a:31:ce:f3:16:1f:fb:62:86:0a:6f:36:16:
32:8c:83:fc:ec:f4:b8:f5:8a:4d:6a:f8:56:a7:f6:2d:04:54:
37:10:00:d4:5d:0d:3b:9f:ac:4b:0d:24:5a:ef:d8:86:9a:1b:
68:7b:43:6a:6c:e9:b6:e6:75:c8:10:67:b6:45:74:f4:a9:dd:
02:47:ee:c4:99:fa:b9:92:23:4c:51:c3:d1:d5:e6:a2:b9:40:
64:5a:a4:c3:5f:41:0a:f5:eb:65:a5:1b:3b:fa:83:39:a9:ae:
55:86:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org