Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/mG3g7YZYNBINRjYA7wchMD9f_Sg.roa
File: mG3g7YZYNBINRjYA7wchMD9f_Sg.roa (raw, json)
Hash identifier: itA+xqDj9r1RNg+ADq/lIDfho3+iEKhVGjDUAibBnfQ=
Subject key identifier: 98:6D:E0:ED:86:58:34:12:0D:46:36:00:EF:07:21:30:3F:5F:FD:28
Certificate issuer: /CN=af44e855a654ec155a6868907a6b8fc17416d6a4
Certificate serial: 0BCE68AC
Authority key identifier: AF:44:E8:55:A6:54:EC:15:5A:68:68:90:7A:6B:8F:C1:74:16:D6:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0ToVaZU7BVaaGiQemuPwXQW1qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/mG3g7YZYNBINRjYA7wchMD9f_Sg.roa
Signing time: Sat 01 Jan 2022 01:56:27 +0000
ROA not before: Sat 01 Jan 2022 01:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16073
IP address blocks: 213.162.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198076588 (0xbce68ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af44e855a654ec155a6868907a6b8fc17416d6a4
Validity
Not Before: Jan 1 01:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=986de0ed865834120d463600ef0721303f5ffd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:22:15:f6:34:bb:e8:d1:08:1d:38:0c:a6:
7c:ff:62:69:59:f3:9a:f8:85:d5:1d:fb:60:1d:38:
3d:0d:e5:36:f2:d7:d7:1f:a7:3b:bd:bc:0f:96:4b:
a7:47:f6:81:73:87:56:15:8a:14:fb:37:73:87:81:
25:5d:4c:32:c1:80:ca:1b:4d:93:8f:84:9f:a7:f8:
25:0d:5e:c3:6e:b0:37:0f:b2:a4:2b:69:65:31:55:
69:54:0c:0e:7b:0d:cd:9b:34:4c:f9:21:83:63:dd:
19:84:1c:70:59:5f:c3:91:e3:07:1f:07:9b:8a:6b:
94:cc:76:91:c6:14:63:e1:1a:03:4b:fa:a7:17:6e:
9b:c1:c5:17:10:2a:ef:6a:b1:6f:fd:29:61:cb:36:
5f:26:97:91:f4:70:6d:d6:49:20:5c:16:a0:66:94:
f0:99:18:a7:34:b3:05:67:33:7f:97:75:53:41:3a:
ca:08:16:70:05:da:c6:4f:48:2d:1f:a2:d6:5f:f3:
3f:e5:74:88:b8:e4:35:f2:e1:fc:ee:7f:70:84:61:
b9:0d:b4:3a:74:8a:20:02:da:cc:3b:83:74:b4:7b:
af:2b:88:ce:48:5f:14:25:ac:96:15:2f:95:9b:2a:
c5:e6:4e:10:b0:2e:bc:0c:b4:35:c5:db:9f:7b:fb:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:E0:ED:86:58:34:12:0D:46:36:00:EF:07:21:30:3F:5F:FD:28
X509v3 Authority Key Identifier:
keyid:AF:44:E8:55:A6:54:EC:15:5A:68:68:90:7A:6B:8F:C1:74:16:D6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0ToVaZU7BVaaGiQemuPwXQW1qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/mG3g7YZYNBINRjYA7wchMD9f_Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/r0ToVaZU7BVaaGiQemuPwXQW1qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.48.0/20
Signature Algorithm: sha256WithRSAEncryption
75:36:d1:db:1b:09:d8:ae:22:3a:8c:6d:b3:76:90:a1:f5:c0:
72:04:c2:0b:83:b3:25:66:a7:f6:51:48:bb:08:5f:2d:04:03:
e5:dd:c5:4f:06:71:e4:a2:29:29:69:fb:d1:09:76:cf:bd:b6:
06:ec:f1:54:3c:43:1f:06:d2:2c:35:00:ef:29:f2:28:e2:80:
af:0f:db:e8:1d:63:36:35:b4:b3:0f:f3:33:c0:57:45:98:d3:
13:7f:1d:b0:49:bf:3d:e4:eb:1b:7b:2a:33:0c:28:66:04:ba:
2d:bb:61:c9:37:c8:71:ec:f8:88:22:3a:04:89:82:81:5b:ad:
64:b7:88:9b:88:4b:80:37:98:9b:e1:43:6f:ba:ed:e4:fd:3c:
b9:34:45:20:12:2c:75:2c:3d:62:52:3c:8f:d0:71:0b:e1:a9:
31:04:18:e7:cd:c2:fa:82:c8:a0:28:ab:33:fa:d1:ec:38:70:
2c:68:a0:4e:11:cc:f6:63:fa:ae:ec:43:25:fc:ec:54:5e:c4:
4b:b4:36:06:af:fc:aa:f6:44:fa:03:63:c1:1b:17:b2:8c:ee:
b3:0a:37:c9:b7:cf:af:84:01:2f:a1:49:43:2b:1d:a6:3f:ef:
35:a2:a8:8a:28:2d:d9:4e:98:b0:64:b6:d0:97:90:11:3e:59:
17:d1:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:44 2024 by rpki-client on console-fra.rpki-client.org