Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/SvzFfi81sF7knDcW8-CT9FhI1Ms.roa
File: SvzFfi81sF7knDcW8-CT9FhI1Ms.roa (raw, json)
Hash identifier: 3sGJ74p+gQ5/fD3i0rY6YhYQn2R5ywDNpTwaHaKO+uQ=
Subject key identifier: 4A:FC:C5:7E:2F:35:B0:5E:E4:9C:37:16:F3:E0:93:F4:58:48:D4:CB
Certificate issuer: /CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Certificate serial: 018570152B540F1912EB49C0D26E5695136F
Authority key identifier: 0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/SvzFfi81sF7knDcW8-CT9FhI1Ms.roa
Signing time: Mon 02 Jan 2023 01:25:13 +0000
ROA not before: Mon 02 Jan 2023 01:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.232.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2b:54:0f:19:12:eb:49:c0:d2:6e:56:95:13:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Validity
Not Before: Jan 2 01:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afcc57e2f35b05ee49c3716f3e093f45848d4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:bc:6c:86:b1:7b:ff:c3:fe:31:f6:ca:5c:
18:12:8e:e4:ae:e9:8f:a8:89:13:cd:2e:7f:8f:2a:
5d:8d:5f:09:97:ec:c4:a3:34:17:c4:68:bd:e1:3a:
b8:07:a6:bb:dd:d7:3f:12:ec:32:c8:39:cf:c0:e7:
a5:53:d9:e1:5c:f9:a9:aa:70:a1:7b:87:c1:32:d7:
d9:87:20:40:8d:a3:79:21:21:c5:5c:a7:f1:9c:96:
80:6d:dc:af:12:85:a5:ba:30:6b:d3:67:d4:8a:a2:
d4:73:5e:82:ae:79:99:b5:af:41:6b:28:3b:63:75:
23:ab:1f:a9:20:56:f0:c9:eb:ea:ee:c1:ca:ce:4c:
e4:a4:5c:9f:9c:8d:f9:34:32:5e:7d:9b:08:7d:74:
6f:ad:c1:63:88:10:bf:02:d4:ed:de:65:c5:0b:83:
2c:2f:5a:6a:89:f6:8b:6d:99:db:da:32:f9:81:ed:
2a:18:60:5e:9e:db:fa:a5:3c:d1:5b:5b:23:21:0d:
f4:f1:a1:9c:b9:e7:63:ff:e7:09:75:58:c1:23:91:
6f:ab:be:98:7a:b1:fc:ec:32:a2:a8:3a:f4:df:e2:
77:a0:d2:65:fb:25:01:d4:d6:c7:7e:38:d3:3e:7a:
8b:a0:57:ab:30:e5:ed:09:b4:5c:94:0d:1a:87:eb:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:C5:7E:2F:35:B0:5E:E4:9C:37:16:F3:E0:93:F4:58:48:D4:CB
X509v3 Authority Key Identifier:
keyid:0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/SvzFfi81sF7knDcW8-CT9FhI1Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:91:fa:a2:f5:fb:73:f3:d0:a0:f0:89:fc:60:67:4b:14:ff:
7f:82:87:ff:69:bf:1b:59:25:94:c4:aa:41:c3:5d:9d:64:8e:
86:e9:a7:61:e0:90:cd:49:cf:c1:43:ed:76:22:98:a3:ac:f1:
a5:0f:86:9d:6d:c9:d9:86:9c:4a:25:81:38:a0:61:04:a7:12:
b1:23:35:0c:fd:9e:3c:95:e5:90:30:01:b1:79:8b:97:67:65:
e8:8d:79:dd:23:70:44:dd:a2:f3:77:6b:68:20:35:9b:95:8e:
29:ae:88:11:fb:69:3a:06:17:50:82:df:41:3c:7a:7c:c3:83:
86:23:06:a4:78:c1:98:3b:8a:a2:e7:0b:98:b9:47:c7:2f:26:
3c:89:a6:b7:08:4f:7e:29:0a:af:48:92:4f:92:78:65:64:18:
7d:53:76:21:c1:dd:f3:0c:3d:5c:e7:74:9e:8c:6d:24:bc:d1:
37:fe:52:ec:b6:fe:5c:4a:a4:91:9f:47:6e:26:c5:0d:5b:0f:
36:2c:21:28:a8:78:82:37:fb:79:49:99:c8:03:7f:03:8d:18:
a2:20:e7:1b:b9:d0:5c:52:f5:0f:f9:34:ff:fa:47:d6:7e:f9:
50:a0:63:7d:49:b2:78:b1:44:13:74:f9:ca:41:29:74:14:ab:
30:cd:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 11:27:22 2023 by rpki-client on console-ams.rpki-client.org