Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/doEHz1kZCF_pd2u5ynr76_gcHY8.roa
File: doEHz1kZCF_pd2u5ynr76_gcHY8.roa (raw, json)
Hash identifier: h/jJ11RYnhGxtLYWMFBq0HA87Jnenwit2HGzBX24x4M=
Subject key identifier: 76:81:07:CF:59:19:08:5F:E9:77:6B:B9:CA:7A:FB:EB:F8:1C:1D:8F
Certificate issuer: /CN=9155dd5e1a00ff1b0963605c1deef1e38f23319b
Certificate serial: 0185EC12CD9CC84FBA59285C06995A8F0E55
Authority key identifier: 91:55:DD:5E:1A:00:FF:1B:09:63:60:5C:1D:EE:F1:E3:8F:23:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVXdXhoA_xsJY2BcHe7x448jMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/doEHz1kZCF_pd2u5ynr76_gcHY8.roa
Signing time: Thu 26 Jan 2023 03:15:33 +0000
ROA not before: Thu 26 Jan 2023 03:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 213.139.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:12:cd:9c:c8:4f:ba:59:28:5c:06:99:5a:8f:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155dd5e1a00ff1b0963605c1deef1e38f23319b
Validity
Not Before: Jan 26 03:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=768107cf5919085fe9776bb9ca7afbebf81c1d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:1b:94:13:3a:4d:0b:63:0f:0f:8d:3b:2a:
de:96:49:ec:21:b2:fb:0a:23:fc:63:e3:97:8f:0e:
a0:b1:db:be:81:3f:be:53:04:06:68:ee:09:b8:43:
b3:9d:1f:c1:55:b2:9b:bb:55:7c:a6:21:f4:66:36:
37:c3:86:d4:aa:8d:68:96:70:63:a7:e2:01:e6:65:
d4:8c:88:4e:be:2d:1a:d7:38:1f:75:e9:28:bf:64:
33:62:7c:f9:20:84:b4:53:5b:c2:53:37:91:dc:cc:
c2:3c:9a:61:4c:d3:c1:2e:01:b4:e1:29:95:0f:21:
26:16:b9:a5:43:aa:be:0d:f4:59:35:1d:1c:f1:3d:
15:b5:14:f0:57:02:73:5a:4d:0b:da:f0:37:04:39:
cf:96:4a:77:7a:c1:2c:dc:71:a0:21:9b:7f:3d:f8:
0f:e3:66:32:30:62:ff:40:55:4c:68:0d:3e:d0:ce:
02:f4:55:43:96:83:dc:50:06:78:f0:f6:f7:60:d7:
5f:47:87:1d:67:c9:6b:b8:39:2e:5e:d8:0f:10:de:
24:cf:15:b3:c9:06:8b:f6:09:9a:9c:78:8e:da:a1:
1d:57:6e:e4:ef:02:4c:ca:db:d9:f5:2c:bf:42:7b:
04:f9:f7:b4:0c:8e:d6:de:ba:4b:52:60:7e:18:85:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:07:CF:59:19:08:5F:E9:77:6B:B9:CA:7A:FB:EB:F8:1C:1D:8F
X509v3 Authority Key Identifier:
keyid:91:55:DD:5E:1A:00:FF:1B:09:63:60:5C:1D:EE:F1:E3:8F:23:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVXdXhoA_xsJY2BcHe7x448jMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/doEHz1kZCF_pd2u5ynr76_gcHY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/kVXdXhoA_xsJY2BcHe7x448jMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:70:d0:eb:2e:03:ea:b7:7c:88:72:0f:7b:7b:61:de:9e:
b9:e8:23:46:7e:f4:49:e3:27:0e:25:4a:33:6b:64:fb:b9:43:
8c:ca:56:06:ca:a6:52:12:7c:b3:97:07:d8:22:a3:08:ab:10:
9c:e9:40:a9:53:ee:3a:8c:24:ab:38:d5:6b:3b:39:39:e2:65:
88:ce:e1:fb:70:ae:a6:61:fa:e9:63:2f:b8:57:9d:6d:92:ff:
17:38:f2:ad:e4:b5:fe:07:00:2f:36:d3:0e:74:e2:b5:86:89:
26:7d:b5:29:29:5b:d8:8e:a6:cf:5c:0a:60:d6:0d:d1:9d:6a:
41:00:80:f8:f6:4d:4d:54:6f:24:4d:95:b9:e0:db:2a:2e:c6:
db:99:5a:3f:74:ac:4e:55:52:3a:87:d9:d8:36:1e:b9:85:14:
c3:7d:95:fd:d2:1d:d1:f2:d9:f3:96:a2:77:3a:1f:60:5a:f2:
64:e6:a9:5b:ab:49:63:cb:1c:13:c1:e3:b4:b1:b4:d3:f6:a6:
6f:89:c2:d1:cc:02:c5:65:5e:87:3b:dc:d5:a8:db:f4:f7:23:
a6:28:41:5a:66:a9:52:c9:33:97:d5:04:b7:f6:15:b4:1a:b1:
36:73:7b:67:0d:aa:7c:38:8d:b5:ee:85:2e:cf:cd:85:bf:ac:
08:10:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org