Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/MiwMfF5H--s46NHp1nE20Eq3zQw.roa
File: MiwMfF5H--s46NHp1nE20Eq3zQw.roa (raw, json)
Hash identifier: 86I4YHHfNsfl2eRuL+q6wKMJErHi71g6VlcfEJ1NPYk=
Subject key identifier: 32:2C:0C:7C:5E:47:FB:EB:38:E8:D1:E9:D6:71:36:D0:4A:B7:CD:0C
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1470ADC5
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/MiwMfF5H--s46NHp1nE20Eq3zQw.roa
Signing time: Sat 01 Jan 2022 03:58:59 +0000
ROA not before: Sat 01 Jan 2022 03:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28836
IP address blocks: 213.214.98.0/23 maxlen: 24
213.214.96.0/19 maxlen: 24
213.214.96.0/23 maxlen: 24
213.214.100.0/23 maxlen: 24
213.214.102.0/23 maxlen: 24
213.214.104.0/23 maxlen: 24
213.214.110.0/23 maxlen: 24
213.214.106.0/23 maxlen: 24
213.214.108.0/23 maxlen: 24
213.214.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342928837 (0x1470adc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=322c0c7c5e47fbeb38e8d1e9d67136d04ab7cd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:46:d6:65:97:db:f7:92:6e:ae:4c:8a:1c:
ff:d4:df:eb:81:45:c1:f4:a0:c4:21:ba:d9:18:cc:
96:05:c8:97:8f:c0:6e:7b:de:7d:88:e4:1f:3c:08:
01:4e:ab:2a:0b:a7:53:ed:83:75:f2:1f:98:a3:b8:
85:ba:90:14:4a:fe:ce:68:9c:29:9a:e2:6c:84:6a:
e6:da:e3:17:ee:92:b6:2a:5c:a4:99:b5:b3:86:3f:
a5:0f:9f:49:7b:ba:a0:2e:cf:d5:d0:b5:d6:87:eb:
e4:2c:84:2a:ca:8d:7d:6b:12:b6:cd:5d:0b:7d:21:
49:1b:43:c0:5e:6c:f4:4b:1f:b2:84:4d:de:60:6a:
66:8e:bd:f4:64:4e:ac:6e:c3:2d:f8:56:af:99:61:
72:6a:85:5c:d1:de:ab:ed:f3:20:94:25:70:fa:27:
59:5c:63:f0:8f:6a:cc:d0:1e:72:85:60:4d:71:ca:
65:78:9c:15:4b:96:21:db:bb:6d:ff:1c:e7:1a:4f:
59:e9:1f:1f:4c:33:6e:72:7f:31:d9:cc:5b:70:ce:
db:d1:00:7d:42:73:71:2b:64:bb:da:60:d6:7d:97:
72:b3:e6:5f:3e:57:29:e1:a4:e3:38:cd:79:52:d3:
02:24:fe:0b:82:cb:e4:13:60:04:f2:a8:02:df:92:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:0C:7C:5E:47:FB:EB:38:E8:D1:E9:D6:71:36:D0:4A:B7:CD:0C
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/MiwMfF5H--s46NHp1nE20Eq3zQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.96.0/19
Signature Algorithm: sha256WithRSAEncryption
16:be:24:20:4a:3a:a8:1f:96:e7:a8:17:90:4e:08:f9:2f:ff:
a6:b3:6d:31:6a:79:13:9c:13:e6:27:d7:8d:a5:09:59:7b:22:
0d:e6:e6:b0:ed:29:52:fd:e8:a7:3c:09:d9:c2:1e:fe:b9:4b:
c1:cd:60:8d:56:71:74:ec:3d:dd:89:17:8f:10:b7:72:93:2a:
b2:5a:d9:ed:f1:53:83:fa:ff:73:fc:60:e5:da:fd:39:a3:a1:
59:2c:86:03:93:e7:7a:07:0c:23:64:91:c0:af:a7:36:9b:21:
d7:42:cc:f8:c8:c0:ab:d1:6e:02:b8:a0:25:d4:32:3d:cf:85:
69:d4:fd:f7:cc:33:fd:08:23:42:26:45:6a:9b:07:eb:19:2c:
ce:37:52:6e:16:49:68:17:4d:f3:8a:1e:af:87:4e:60:63:81:
39:6c:c2:97:b4:33:15:7c:0f:02:a9:20:d0:a8:67:53:46:e3:
7a:66:ca:95:f8:24:e3:ae:75:07:1d:9a:95:de:2d:3b:1f:d0:
fe:b9:dd:40:3e:ee:84:27:e9:1b:1a:35:3e:1b:25:ed:55:c5:
95:8b:5e:d8:a1:bc:91:87:92:b1:7a:47:04:a3:62:7a:20:d5:
13:bc:2b:ab:b7:c5:75:9b:f3:f0:44:89:be:cc:19:64:f8:aa:
fe:9e:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org