Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/11vdXJTQiTg80X-OW7rbwQa1oiQ.roa
File: 11vdXJTQiTg80X-OW7rbwQa1oiQ.roa (raw, json)
Hash identifier: 2YXK3500S5HDtwQNc9WQkbH5PNihOIES1H5RzgL92fc=
Subject key identifier: D7:5B:DD:5C:94:D0:89:38:3C:D1:7F:8E:5B:BA:DB:C1:06:B5:A2:24
Certificate issuer: /CN=246377647a72b535d3c3f0860d4eef7b6f9a3efe
Certificate serial: 0182D455E8AE61939B4161760717740E4CA9
Authority key identifier: 24:63:77:64:7A:72:B5:35:D3:C3:F0:86:0D:4E:EF:7B:6F:9A:3E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGN3ZHpytTXTw_CGDU7ve2-aPv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/11vdXJTQiTg80X-OW7rbwQa1oiQ.roa
Signing time: Thu 25 Aug 2022 09:29:36 +0000
ROA not before: Thu 25 Aug 2022 09:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209326
IP address blocks: 213.109.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:55:e8:ae:61:93:9b:41:61:76:07:17:74:0e:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246377647a72b535d3c3f0860d4eef7b6f9a3efe
Validity
Not Before: Aug 25 09:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d75bdd5c94d089383cd17f8e5bbadbc106b5a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:e3:1d:45:1e:ec:4d:9d:e4:d4:bf:34:d6:
cc:42:0b:4c:87:e2:07:e1:64:14:7a:95:06:e8:b9:
a9:34:cd:60:31:c8:8f:e3:0d:8a:6e:d1:d0:8d:f5:
16:54:72:b2:6e:52:6e:98:fb:a3:d6:f6:1d:cd:62:
86:33:01:88:4f:81:34:fc:8d:4b:69:16:b1:55:31:
e6:99:e2:25:9a:c2:8b:72:c8:7b:89:ef:5e:3c:5a:
a7:6d:4e:d2:87:71:86:86:d1:06:ab:b2:29:6d:2e:
9d:e1:1a:b3:50:03:71:7a:d6:bc:a8:c9:6a:7a:ee:
fa:1d:c5:3c:f8:51:df:8b:a1:9a:1a:e2:b4:5f:88:
21:e3:16:07:27:d4:3f:d8:28:8b:22:1e:3e:1a:5c:
da:b4:92:3c:20:5e:9b:04:ef:36:5a:d8:d8:bc:06:
5b:72:25:73:8d:bc:81:48:85:83:9a:be:63:53:0b:
c9:95:d7:11:dd:f0:3d:e9:24:78:68:44:01:6c:4c:
4d:94:74:70:50:3d:34:62:2b:35:cd:8b:cc:7a:d3:
79:f6:a8:dc:aa:0e:ff:c7:de:c3:4c:d9:04:d9:d3:
62:5f:8d:1d:f9:19:e0:34:5a:35:ff:0c:2e:2b:53:
e2:0e:00:8e:fc:13:d3:55:d7:10:1a:6f:cc:47:fa:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:DD:5C:94:D0:89:38:3C:D1:7F:8E:5B:BA:DB:C1:06:B5:A2:24
X509v3 Authority Key Identifier:
keyid:24:63:77:64:7A:72:B5:35:D3:C3:F0:86:0D:4E:EF:7B:6F:9A:3E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGN3ZHpytTXTw_CGDU7ve2-aPv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/11vdXJTQiTg80X-OW7rbwQa1oiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/JGN3ZHpytTXTw_CGDU7ve2-aPv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5f:02:52:c1:e5:90:e3:f4:69:fe:f2:21:b7:ec:44:1d:9d:
56:e1:a6:27:6e:22:9d:46:86:f3:8d:9b:64:fa:ea:7a:8b:e0:
64:d4:17:61:3c:7b:2f:14:50:b2:b6:b3:7b:b9:df:4b:59:bf:
72:d6:03:70:fe:bf:a4:a7:ea:13:75:03:50:4e:6a:30:e6:0f:
45:cb:c8:77:de:aa:66:f0:32:23:69:59:0e:e1:74:29:01:c6:
9d:39:f2:97:fe:8f:b8:91:18:9d:53:7a:3a:34:24:ff:a0:3f:
a3:be:9c:57:95:1a:32:a6:d9:b2:a2:53:b1:c8:cc:68:16:3f:
a3:a5:c4:55:5c:1b:ac:6e:75:0b:78:ea:86:2b:8c:c6:40:e9:
d1:d0:96:a8:30:f8:5f:29:59:c7:53:f9:aa:fe:4a:2f:7e:7e:
c4:f1:8f:86:ff:38:f4:62:47:ad:98:8f:4e:80:15:c0:43:9e:
6c:bf:4b:50:ef:fa:5f:ad:7a:2f:dd:8f:ac:93:35:ed:72:13:
b8:0e:20:14:62:c9:03:a4:15:69:aa:fc:7b:a2:58:8c:fd:82:
66:d0:cc:c6:de:3d:6d:1a:50:96:db:6a:d9:d1:9b:36:17:13:
c8:7a:16:7c:f0:ae:e9:7d:38:e1:87:1d:f4:33:40:b8:07:18:
3a:4f:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:07 2025 by rpki-client