Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/ui6IT5W9ur2WVXOKk7DuVgJdR-E.roa
File: ui6IT5W9ur2WVXOKk7DuVgJdR-E.roa (raw, json)
Hash identifier: ZGSKq4amU5dJxHe/xa8NY/WwcrF4243af770/E4PKuE=
Subject key identifier: BA:2E:88:4F:95:BD:BA:BD:96:55:73:8A:93:B0:EE:56:02:5D:47:E1
Certificate issuer: /CN=36b82c61dc621a682e940d189488f0d36f3e0f53
Certificate serial: 0183CD4A84521C10F3233468DBC871550A3B
Authority key identifier: 36:B8:2C:61:DC:62:1A:68:2E:94:0D:18:94:88:F0:D3:6F:3E:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrgsYdxiGmgulA0YlIjw028-D1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/ui6IT5W9ur2WVXOKk7DuVgJdR-E.roa
Signing time: Wed 12 Oct 2022 17:42:36 +0000
ROA not before: Wed 12 Oct 2022 17:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 213.139.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:4a:84:52:1c:10:f3:23:34:68:db:c8:71:55:0a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b82c61dc621a682e940d189488f0d36f3e0f53
Validity
Not Before: Oct 12 17:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba2e884f95bdbabd9655738a93b0ee56025d47e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:6f:50:5c:dc:61:c8:e3:a7:22:8f:47:52:
d4:df:f8:7b:63:a7:41:b9:37:b9:98:0b:82:c5:f3:
e8:4c:8c:d9:a0:d1:1c:c8:ae:3c:7c:82:0f:c6:bf:
ed:1a:9c:c0:2b:ea:94:c7:df:3e:bb:d1:82:75:75:
e9:01:db:25:bf:f0:1e:de:54:6a:35:d0:c7:54:cf:
49:84:6a:c5:f6:a9:6e:6a:72:49:d7:8b:2f:19:28:
08:00:75:24:67:af:dc:cd:9f:5f:4e:3b:86:f4:17:
e4:28:0f:42:04:05:58:45:da:c6:8f:b2:40:7d:31:
43:1d:70:8e:ef:86:8a:06:9e:c6:45:b4:82:80:91:
4b:e4:21:82:e3:7e:0f:47:33:1d:6e:05:34:99:b7:
cd:6e:ba:b8:19:e3:56:fa:fc:c7:7a:b6:02:4c:84:
67:bc:ed:0e:e1:9a:5f:2e:ff:43:ec:e7:84:6d:82:
e4:14:56:d3:28:8e:bd:cb:fe:21:2a:02:7b:5d:23:
1e:c0:8d:ca:9d:c3:ba:13:b1:22:ad:f7:57:83:bb:
ba:bf:c8:e7:9d:6d:0d:28:5d:e2:5e:67:f9:da:39:
3c:38:e6:3e:5c:70:9b:f9:eb:dc:0d:e1:7b:ce:03:
e6:d4:21:15:bf:94:48:93:0d:89:32:9a:4c:1f:7f:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:88:4F:95:BD:BA:BD:96:55:73:8A:93:B0:EE:56:02:5D:47:E1
X509v3 Authority Key Identifier:
keyid:36:B8:2C:61:DC:62:1A:68:2E:94:0D:18:94:88:F0:D3:6F:3E:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrgsYdxiGmgulA0YlIjw028-D1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/ui6IT5W9ur2WVXOKk7DuVgJdR-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/NrgsYdxiGmgulA0YlIjw028-D1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:62:e9:c6:09:84:26:48:c8:f2:b4:fd:c0:ee:74:3f:75:39:
e4:68:54:04:40:79:a7:04:ec:f1:99:94:37:9a:fd:b4:6c:04:
c3:93:8f:45:f9:4c:5b:12:f9:df:f5:1b:a8:36:e4:7a:9f:64:
a0:44:84:fa:87:84:90:ad:f5:e0:8b:57:12:5a:98:37:c7:56:
b4:cd:f9:34:42:a1:5a:f4:ad:f1:5d:c3:f8:06:e0:90:dc:4f:
58:e3:ef:71:9a:e8:9c:da:e8:6f:f7:e2:15:39:da:42:47:16:
88:a1:7f:52:e2:00:e6:57:56:95:e3:4a:5b:d6:3d:e3:f2:59:
8e:d4:11:4f:22:7f:1f:80:2a:91:b7:5f:d1:ca:6d:14:12:f4:
fd:fd:31:3a:cb:a2:74:a9:2e:25:6b:9d:36:df:45:eb:c1:cf:
e9:a6:4e:56:38:c5:05:30:e8:65:23:75:aa:f3:c3:01:6a:bd:
b1:68:18:59:08:bf:76:6b:08:2e:df:76:78:a5:ba:e5:04:7d:
56:b0:a2:0f:88:a9:f9:a5:cb:f4:72:78:94:38:17:ca:8b:6d:
b1:e9:f1:8e:3a:f7:eb:d6:38:45:12:59:9d:93:83:00:01:d4:
3f:6e:f2:c6:bf:1b:15:bd:7b:43:2b:e1:9e:90:82:6a:6a:92:
07:16:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org