Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/YFL4p-D3lpuZsId4HUOKmPJkgDQ.roa
File: YFL4p-D3lpuZsId4HUOKmPJkgDQ.roa (raw, json)
Hash identifier: FfGFNpNFaW8OF2YP5tdMbLR6yco/gM3JjlvaNCJiHlI=
Subject key identifier: 60:52:F8:A7:E0:F7:96:9B:99:B0:87:78:1D:43:8A:98:F2:64:80:34
Certificate issuer: /CN=9d91a969ab9b9ee2d6a5c64e8b29f4ae3bb2ea91
Certificate serial: 032721D1
Authority key identifier: 9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZGpaaubnuLWpcZOiyn0rjuy6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/YFL4p-D3lpuZsId4HUOKmPJkgDQ.roa
Signing time: Tue 26 Apr 2022 08:52:17 +0000
ROA not before: Tue 26 Apr 2022 08:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47952
IP address blocks: 212.103.38.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52896209 (0x32721d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d91a969ab9b9ee2d6a5c64e8b29f4ae3bb2ea91
Validity
Not Before: Apr 26 08:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6052f8a7e0f7969b99b087781d438a98f2648034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:cc:78:4f:e1:c5:21:40:f2:9f:d5:0e:99:
d8:02:ed:ef:48:a0:9b:26:e0:62:bd:5b:d9:9e:05:
d3:1b:32:68:ce:b6:bc:3e:6e:d3:aa:4c:71:67:40:
e9:b3:5a:da:c0:b7:60:75:a0:8b:7b:ba:58:2f:19:
37:75:4f:17:8c:9c:9d:c8:80:2f:07:d1:19:82:2c:
c2:27:1b:9d:ed:04:b2:9d:4f:a2:71:4c:2d:65:73:
3e:6a:28:df:e5:f3:f7:9e:3b:39:88:a6:09:05:dc:
b5:1a:c4:40:3c:b4:0b:47:34:40:dd:29:0d:38:75:
96:2b:16:4e:57:ad:ad:75:51:62:fc:0d:bd:68:5d:
24:56:0c:25:aa:be:c7:8d:19:27:3c:d1:dc:52:2f:
01:65:dc:0c:e6:cd:24:66:e6:60:c9:01:93:5f:5d:
f3:2a:9f:6e:c1:3a:1e:82:df:43:36:1a:4b:cb:ba:
2f:d5:11:b9:77:ff:f4:89:b0:46:ae:b2:d6:ce:cf:
df:db:ca:c3:f5:d8:58:73:6f:3a:18:02:51:cd:15:
11:62:d9:e4:49:e2:49:00:05:93:19:e9:ca:47:36:
d5:22:65:f7:d8:1a:71:36:a3:af:0b:4f:33:19:b5:
aa:38:99:eb:44:5d:74:ec:aa:cf:30:de:57:6a:fc:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:F8:A7:E0:F7:96:9B:99:B0:87:78:1D:43:8A:98:F2:64:80:34
X509v3 Authority Key Identifier:
keyid:9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZGpaaubnuLWpcZOiyn0rjuy6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/YFL4p-D3lpuZsId4HUOKmPJkgDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
58:75:e8:99:8f:ba:0f:e0:81:86:3e:87:95:81:14:88:9c:25:
73:79:44:f0:e7:a2:c9:2c:1a:62:a2:a5:65:a1:36:ca:7a:e3:
cc:a9:b1:c7:2a:e8:d8:2a:5e:b8:92:19:73:6c:e5:2d:85:73:
69:56:4a:29:a4:a5:95:83:1c:23:90:ea:20:ff:c9:4f:63:4e:
aa:ba:4f:f0:07:d5:4e:4f:74:11:66:1d:67:d7:4a:dd:7c:fb:
f0:12:c1:0d:9a:c7:91:a2:8a:42:32:48:73:82:69:5f:20:4d:
df:53:52:c0:a1:d7:70:9d:ec:6d:7e:fe:9a:c7:a3:48:9e:81:
9f:f6:62:d0:da:d9:ce:a8:98:c8:ab:15:59:27:1e:0b:f3:be:
70:c1:15:0a:a2:b7:5e:4d:1f:b3:7a:88:97:a1:36:dd:e6:a3:
31:a3:87:bb:d7:3d:05:70:6b:a5:21:c3:c7:a5:62:f3:b9:c2:
8b:94:0e:f0:0a:2d:8a:28:fb:45:eb:5b:ae:77:4a:68:7e:1c:
e5:12:69:8e:8f:93:f3:4e:a2:c3:9a:af:d4:66:73:60:a7:7e:
36:e8:5d:24:e2:5e:42:1e:c0:5d:97:f6:59:a8:7e:24:99:0c:
ff:45:b7:61:69:19:59:2a:4c:27:07:d1:b6:de:55:8f:25:bc:
da:05:7a:7d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAych0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDkxYTk2OWFiOWI5ZWUyZDZhNWM2NGU4YjI5ZjRhZTNiYjJlYTkxMB4XDTIyMDQy
NjA4NTIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA1MmY4YTdlMGY3
OTY5Yjk5YjA4Nzc4MWQ0MzhhOThmMjY0ODAzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNJzHhP4cUhQPKf1Q6Z2ALt70igmybgYr1b2Z4F0xsyaM62
vD5u06pMcWdA6bNa2sC3YHWgi3u6WC8ZN3VPF4ycnciALwfRGYIswicbne0Esp1P
onFMLWVzPmoo3+Xz9547OYimCQXctRrEQDy0C0c0QN0pDTh1lisWTletrXVRYvwN
vWhdJFYMJaq+x40ZJzzR3FIvAWXcDObNJGbmYMkBk19d8yqfbsE6HoLfQzYaS8u6
L9URuXf/9ImwRq6y1s7P39vKw/XYWHNvOhgCUc0VEWLZ5EniSQAFkxnpykc21SJl
99gacTajrwtPMxm1qjiZ60RddOyqzzDeV2r80N0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgUvin4PeWm5mwh3gdQ4qY8mSANDAfBgNVHSMEGDAWgBSdkalpq5ue4tal
xk6LKfSuO7LqkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25aR3BhYXVibnVMV3BjWk9peW4wcmp1eTZwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvMmFjZjY3LTBlYzAtNDhkMi1iYWQ3LTc3ZDVjYTUxYWFmMi8x
L1lGTDRwLUQzbHB1WnNJZDRIVU9LbVBKa2dEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
MmFjZjY3LTBlYzAtNDhkMi1iYWQ3LTc3ZDVjYTUxYWFmMi8xL25aR3BhYXVibnVM
V3BjWk9peW4wcmp1eTZwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtRnJDANBgkqhkiG9w0BAQsFAAOC
AQEAWHXomY+6D+CBhj6HlYEUiJwlc3lE8OeiySwaYqKlZaE2ynrjzKmxxyro2Cpe
uJIZc2zlLYVzaVZKKaSllYMcI5DqIP/JT2NOqrpP8AfVTk90EWYdZ9dK3Xz78BLB
DZrHkaKKQjJIc4JpXyBN31NSwKHXcJ3sbX7+msejSJ6Bn/Zi0NrZzqiYyKsVWSce
C/O+cMEVCqK3Xk0fs3qIl6E23eajMaOHu9c9BXBrpSHDx6Vi87nCi5QO8Aotiij7
RetbrndKaH4c5RJpjo+T806iw5qv1GZzYKd+NuhdJOJeQh7AXZf2Wah+JJkM/0W3
YWkZWSpMJwfRtt5VjyW82gV6fQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:47 2024 by rpki-client on console-fra.rpki-client.org