Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/CdLVK4qrZZd9ZacNNas3p0hcNPQ.roa
File: CdLVK4qrZZd9ZacNNas3p0hcNPQ.roa (raw, json)
Hash identifier: 4pymKLngHPJdk6cAxh3GBKvoYHRqFLXpIigPxUWPyv4=
Subject key identifier: 09:D2:D5:2B:8A:AB:65:97:7D:65:A7:0D:35:AB:37:A7:48:5C:34:F4
Certificate issuer: /CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
Certificate serial: 0185724C64FE64E4CAC2E469D0E0897B70A8
Authority key identifier: 49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/CdLVK4qrZZd9ZacNNas3p0hcNPQ.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197696
IP address blocks: 213.232.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:64:fe:64:e4:ca:c2:e4:69:d0:e0:89:7b:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d2d52b8aab65977d65a70d35ab37a7485c34f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:1b:82:5f:79:1d:6c:de:fb:68:75:ae:48:
f7:06:ed:16:ea:65:9d:e9:ae:89:a6:7a:2a:e8:35:
73:d4:66:dd:ca:04:dc:21:fa:54:7a:1f:72:91:9a:
ca:a6:e6:65:4f:32:e3:c7:2b:32:7e:92:0b:82:66:
a1:3b:69:11:28:05:47:c0:21:1c:29:63:66:1c:66:
13:a7:41:7c:1e:0d:b9:98:74:7c:41:f4:90:da:07:
6d:82:7c:52:9b:8c:26:58:94:45:a5:9f:c5:e4:47:
8a:8b:31:52:2a:47:df:5e:cc:f0:26:48:00:af:46:
07:7d:2b:38:92:42:8f:dc:09:03:7f:ed:34:a4:64:
32:b4:23:1c:bd:9b:0d:f0:9c:f6:cc:67:f8:3f:5f:
3d:40:d6:5d:4c:5d:a2:56:f8:07:9a:32:60:32:f9:
d1:27:cb:37:e2:96:f2:72:62:d5:1a:13:bc:7f:ff:
dc:74:3e:bd:5c:79:6e:14:9a:34:9f:f7:bf:7c:91:
91:fc:d1:39:2a:c2:9b:49:48:6a:e2:9b:d8:01:7d:
fb:31:e0:4e:0c:b7:00:36:47:39:85:45:15:b3:51:
5e:cc:d7:99:6a:62:fe:74:6c:ad:82:be:33:33:e3:
06:f1:a3:86:76:fc:9c:6a:0c:6b:b0:c1:95:e1:43:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:D5:2B:8A:AB:65:97:7D:65:A7:0D:35:AB:37:A7:48:5C:34:F4
X509v3 Authority Key Identifier:
keyid:49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/CdLVK4qrZZd9ZacNNas3p0hcNPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6f:af:22:89:f1:d4:76:13:83:46:b7:4b:18:68:11:20:66:
bf:4b:94:f2:fb:e8:25:55:b6:36:58:cd:07:76:fa:60:90:9a:
90:c0:69:fc:b9:09:62:99:94:b4:61:ab:11:e4:fc:49:de:01:
c2:f8:66:18:ef:a2:b0:29:1c:b8:a9:a8:3a:fd:f5:66:f7:d0:
a4:6d:78:23:a7:d5:b6:ce:c5:f2:16:90:38:76:be:83:ce:09:
d2:df:c5:ac:11:fa:63:01:d3:cc:ee:36:3d:4f:31:52:7c:28:
fd:65:46:50:ec:d3:a7:cf:79:d0:26:a7:d3:5f:c3:f8:14:2b:
28:69:cb:e7:c6:9e:33:ea:c8:89:63:a3:57:8f:09:84:06:79:
19:20:6d:61:29:07:01:96:c3:73:5d:b9:3a:5b:79:b5:1d:87:
ea:d7:62:5e:54:62:82:58:71:60:75:a4:9e:18:16:e1:18:37:
69:3f:a4:0b:5c:bf:4c:72:ab:60:27:d9:94:8b:f7:41:4a:d7:
b6:c7:72:be:46:43:b3:e2:0e:a1:ab:55:a6:37:92:00:5d:6a:
ae:28:6c:58:2c:b8:ba:92:34:03:bf:90:25:29:9b:2b:5d:d7:
d7:dd:d1:c2:12:38:0f:76:10:a7:06:37:32:18:ac:02:85:d1:
77:bf:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org