Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/qDnoPWfkPH0ZB9FyU2jMEyJolXE.roa
File: qDnoPWfkPH0ZB9FyU2jMEyJolXE.roa (raw, json)
Hash identifier: TOzp7v6jEQy6xEg7Eqg+/y66jDV1+4Tv+LSASo7t7lI=
Subject key identifier: A8:39:E8:3D:67:E4:3C:7D:19:07:D1:72:53:68:CC:13:22:68:95:71
Certificate issuer: /CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Certificate serial: 018D13D7ED070688E32C746ED1CAFE01F4F9
Authority key identifier: 2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/qDnoPWfkPH0ZB9FyU2jMEyJolXE.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 213.109.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ed:07:06:88:e3:2c:74:6e:d1:ca:fe:01:f4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a839e83d67e43c7d1907d1725368cc1322689571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:06:a8:dc:ce:4b:b6:63:02:11:16:2f:9c:
b3:99:96:d8:87:d0:b2:93:1d:7c:5d:40:2b:6e:32:
8f:35:3a:3a:99:73:90:a1:59:fc:ea:92:a1:4d:69:
28:8f:78:4d:5a:a6:bd:71:8a:87:16:86:2d:ad:be:
98:db:2e:2c:fe:ce:dc:fd:e0:18:58:d7:80:da:3d:
d4:3e:da:d5:89:d4:74:3d:f9:ab:ec:24:48:38:f9:
49:ab:a1:1c:b1:fc:25:76:5a:ac:b5:0d:98:a6:d3:
36:71:b4:bf:a2:92:5f:75:b3:4c:f4:34:36:6e:54:
12:01:80:d3:05:45:38:1b:41:62:66:20:81:93:6f:
de:c7:36:04:5a:0e:10:c9:59:f0:11:5d:75:cb:21:
9d:1f:59:2e:a9:97:0d:7c:d2:1a:65:7a:14:df:d0:
5c:95:b7:55:5d:46:1a:f0:21:7a:e9:e2:aa:a2:04:
a5:61:dc:af:08:d3:28:2c:99:12:cc:50:7b:e0:1a:
f1:3d:f6:15:3d:74:84:2f:8e:4f:1b:44:c7:9e:a3:
8a:96:eb:13:2f:92:5b:92:17:c0:94:d1:de:a3:ac:
69:e0:03:19:c2:74:12:09:37:f4:97:c4:ed:f2:d3:
ed:6d:97:91:19:1d:96:18:ea:b1:3f:29:66:00:72:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:E8:3D:67:E4:3C:7D:19:07:D1:72:53:68:CC:13:22:68:95:71
X509v3 Authority Key Identifier:
keyid:2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/qDnoPWfkPH0ZB9FyU2jMEyJolXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d7:87:f6:01:3f:73:22:49:47:07:e5:09:da:29:82:b5:8d:
85:ec:17:e1:c2:ac:3d:bd:c3:ce:e2:b1:45:a2:b8:25:95:60:
90:ae:d6:73:9c:25:43:31:f7:d5:de:71:1b:ea:54:ff:eb:21:
51:c5:6c:57:de:40:6b:6a:c9:84:46:e7:c6:4a:4c:96:34:66:
41:f4:60:8d:68:80:71:3d:55:18:54:a5:ca:7e:4e:3e:5b:c2:
d4:85:1d:53:d7:9b:55:99:1e:d9:f7:29:c5:ec:fe:49:65:2a:
9c:5e:e7:c1:f8:ac:7d:51:fc:71:05:2f:d3:ef:90:21:6c:ac:
2a:f5:a7:4b:59:b0:e4:4a:2e:ed:d5:2b:52:60:c8:7a:62:7f:
1d:5a:73:dc:1a:3f:bb:bf:1d:31:8e:32:7c:73:27:5a:47:16:
78:e7:f6:80:e5:47:92:b1:b1:9f:ed:9b:f2:f6:1b:0c:86:51:
71:53:d2:f6:e8:f5:7b:a6:f0:3d:73:5b:c9:ba:51:b5:96:fc:
6e:da:bd:4d:f7:ae:08:e8:d4:1e:ef:78:ae:00:0e:67:dd:65:
b4:84:54:90:79:65:e5:32:6b:4a:0d:40:a0:ac:df:90:65:47:
fc:14:e2:26:0c:af:2c:14:e9:73:db:82:d2:53:69:94:5f:bb:
dd:d5:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 15:12:37 2024 by rpki-client on console-ams.rpki-client.org