Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Pueq-yhc2mzNCmG7vQqJngKaMfk.roa
File: Pueq-yhc2mzNCmG7vQqJngKaMfk.roa (raw, json)
Hash identifier: hQaaaFmRY7B5EPLtJVm5pEsDzan1EUXKfNiR3Z8H9Vc=
Subject key identifier: 3E:E7:AA:FB:28:5C:DA:6C:CD:0A:61:BB:BD:0A:89:9E:02:9A:31:F9
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: EF1B98
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Pueq-yhc2mzNCmG7vQqJngKaMfk.roa
Signing time: Wed 11 May 2022 22:09:50 +0000
ROA not before: Wed 11 May 2022 22:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 213.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15670168 (0xef1b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: May 11 22:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ee7aafb285cda6ccd0a61bbbd0a899e029a31f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:1e:73:97:b7:67:fe:c8:59:67:52:1f:8f:
52:6f:b1:c0:f6:71:1e:ae:18:ed:16:1e:cf:c3:43:
a3:47:28:be:fe:47:56:4f:59:41:0f:3d:4b:69:4e:
8d:79:bf:ef:a3:01:a5:6b:43:68:4d:4f:0b:14:b3:
e7:e2:cb:0c:97:fd:fe:77:75:49:07:b9:9d:7b:19:
55:d5:d2:87:95:45:10:28:4e:91:9c:27:58:52:01:
c3:e5:c2:01:42:db:90:9b:4f:b2:0f:cd:c5:08:38:
22:79:9e:a8:a7:17:39:ae:ef:06:36:45:6c:4d:76:
76:ea:84:88:03:d8:88:a9:96:86:15:19:a9:5a:d6:
dd:4b:ef:f1:df:8f:28:9e:72:55:e4:aa:03:ca:f4:
e1:9d:5a:94:68:e1:79:ca:5c:dc:4b:8a:38:95:f5:
41:06:7f:4c:3f:27:9d:97:04:8b:24:e6:23:e7:64:
0b:93:1e:75:b3:85:fa:27:de:ce:6f:b2:cc:cc:15:
16:70:b7:87:14:ff:73:14:0f:1a:57:ad:03:70:69:
ac:dc:ae:80:ed:56:f7:62:ac:d1:09:9c:1b:0a:d4:
9f:ff:c7:ba:07:66:83:65:15:0d:6e:30:8d:e8:3c:
fb:cb:7c:12:d2:b8:13:50:ad:29:c5:ff:e0:a1:ab:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:AA:FB:28:5C:DA:6C:CD:0A:61:BB:BD:0A:89:9E:02:9A:31:F9
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Pueq-yhc2mzNCmG7vQqJngKaMfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9d:75:c1:79:15:28:53:13:af:7b:26:fb:91:b5:b5:5f:8e:
7a:1c:84:40:27:e4:61:3a:47:2f:43:6c:9f:6e:57:5c:3b:c8:
07:35:2a:fa:b7:09:4c:c2:71:32:c6:5d:7e:28:bd:98:ce:d6:
be:7f:1d:5c:a7:1f:dd:1b:52:b1:40:4f:06:8f:4f:d7:75:86:
c8:1b:cc:bb:89:b7:ee:8a:3d:18:3a:95:2c:93:58:f4:16:49:
ef:19:2d:5a:d3:38:61:ba:0e:4e:79:fa:dc:0b:0b:e5:97:17:
1f:a1:72:03:6c:70:ca:2d:58:26:1d:64:9f:a8:6b:7d:3e:8f:
19:13:12:06:07:0d:d0:49:ec:29:42:78:2e:db:51:61:f2:31:
4b:68:2c:0d:4b:5b:1e:54:67:17:d1:0d:f4:f7:c0:ba:74:c2:
de:74:a2:72:17:55:59:06:4b:32:37:e7:5c:68:b8:5a:6c:7a:
cc:09:c7:43:85:c3:30:4e:14:94:7b:c6:7a:89:9c:da:54:ea:
e0:c8:14:e5:eb:32:25:f5:5c:5f:e2:73:ce:76:0d:63:27:d2:
d3:e7:41:c0:69:bc:80:fc:72:4e:65:1f:b3:2e:62:56:2c:82:
21:5c:76:87:f1:e1:d2:2f:5d:0b:50:a6:bb:a7:1a:c4:81:16:
e8:d4:17:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAO8bmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTU0NDQ4MWQzYmU3ZmNhNWU4MGE1NjRhZDkzYzFiOGEyZjYzNmY4MB4XDTIyMDUx
MTIyMDk1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2VlN2FhZmIyODVj
ZGE2Y2NkMGE2MWJiYmQwYTg5OWUwMjlhMzFmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLhHnOXt2f+yFlnUh+PUm+xwPZxHq4Y7RYez8NDo0covv5H
Vk9ZQQ89S2lOjXm/76MBpWtDaE1PCxSz5+LLDJf9/nd1SQe5nXsZVdXSh5VFEChO
kZwnWFIBw+XCAULbkJtPsg/NxQg4InmeqKcXOa7vBjZFbE12duqEiAPYiKmWhhUZ
qVrW3Uvv8d+PKJ5yVeSqA8r04Z1alGjhecpc3EuKOJX1QQZ/TD8nnZcEiyTmI+dk
C5MedbOF+ifezm+yzMwVFnC3hxT/cxQPGletA3BprNyugO1W92Ks0QmcGwrUn//H
ugdmg2UVDW4wjeg8+8t8EtK4E1CtKcX/4KGrQsECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ+56r7KFzabM0KYbu9ComeApox+TAfBgNVHSMEGDAWgBRhVESB075/yl6A
pWStk8G4ovY2+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lWUkVnZE8tZjhwZWdLVmtyWlBCdUtMMk52Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvZWNlYzM3LTMwYjgtNGUxOS1iYmIyLWY2N2UxNzVkNGJhNy8x
L1B1ZXEteWhjMm16TkNtRzd2UXFKbmdLYU1may5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
ZWNlYzM3LTMwYjgtNGUxOS1iYmIyLWY2N2UxNzVkNGJhNy8xL1lWUkVnZE8tZjhw
ZWdLVmtyWlBCdUtMMk52Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXZCzANBgkqhkiG9w0BAQsFAAOC
AQEAA511wXkVKFMTr3sm+5G1tV+OehyEQCfkYTpHL0Nsn25XXDvIBzUq+rcJTMJx
MsZdfii9mM7Wvn8dXKcf3RtSsUBPBo9P13WGyBvMu4m37oo9GDqVLJNY9BZJ7xkt
WtM4YboOTnn63AsL5ZcXH6FyA2xwyi1YJh1kn6hrfT6PGRMSBgcN0EnsKUJ4LttR
YfIxS2gsDUtbHlRnF9EN9PfAunTC3nSichdVWQZLMjfnXGi4Wmx6zAnHQ4XDME4U
lHvGeomc2lTq4MgU5esyJfVcX+JzznYNYyfS0+dBwGm8gPxyTmUfsy5iViyCIVx2
h/Hh0i9dC1Cmu6caxIEW6NQXwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org