Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/_vNEQvxbCyZfNAP2nDdAvEZ-GxM.roa
File: _vNEQvxbCyZfNAP2nDdAvEZ-GxM.roa (raw, json)
Hash identifier: ub8mg/C6fXnuA0nkK8DdW+qjKObyXKDdGZ8TU3Vv5i0=
Subject key identifier: FE:F3:44:42:FC:5B:0B:26:5F:34:03:F6:9C:37:40:BC:46:7E:1B:13
Certificate issuer: /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial: 0138FA6A
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/_vNEQvxbCyZfNAP2nDdAvEZ-GxM.roa
Signing time: Wed 20 Apr 2022 11:27:04 +0000
ROA not before: Wed 20 Apr 2022 11:27:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211552
IP address blocks: 74.220.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20511338 (0x138fa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Validity
Not Before: Apr 20 11:27:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef34442fc5b0b265f3403f69c3740bc467e1b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:83:1c:64:1f:5f:c0:72:9f:7c:ac:31:58:
af:93:c4:04:07:03:b8:f3:94:c5:78:34:0e:dc:bf:
46:07:e2:f4:b3:88:40:11:7b:de:63:ec:60:4d:fa:
1e:12:de:b3:5e:54:37:61:fb:05:22:f7:f5:b8:ec:
05:6c:8e:db:9c:39:bc:a0:1f:0e:b2:b2:04:3c:25:
e3:b0:92:25:ad:94:17:31:19:0c:f5:d2:f3:97:81:
0c:48:2a:d7:ac:9a:14:da:cc:c1:07:30:ce:30:91:
33:d2:07:93:3e:5b:27:fc:30:85:b5:2b:63:0b:28:
48:26:d2:48:1c:20:0c:3e:dc:9d:f0:35:8b:0d:b8:
cc:c2:94:ce:f0:28:2b:90:19:ac:02:c7:b8:bd:43:
37:e0:3b:6b:76:b6:ea:30:0e:b8:ee:40:33:3a:16:
44:ea:a8:f1:f7:15:6e:62:b6:fb:90:25:f6:8f:c0:
68:b9:a0:c2:c9:9a:2d:9a:0b:04:a0:df:de:90:bd:
97:c8:65:f0:d3:41:76:76:c0:4c:b0:74:c2:ab:4b:
c4:d1:ec:53:33:f3:6c:7e:de:f4:29:12:7b:8a:61:
2b:43:97:2d:b8:7c:29:15:61:62:9c:b8:4e:58:5c:
7f:04:98:c7:89:f9:1a:f2:96:30:b3:e9:54:57:91:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:44:42:FC:5B:0B:26:5F:34:03:F6:9C:37:40:BC:46:7E:1B:13
X509v3 Authority Key Identifier:
keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/_vNEQvxbCyZfNAP2nDdAvEZ-GxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.220.16.0/21
Signature Algorithm: sha256WithRSAEncryption
85:85:e0:72:38:30:9b:ee:1d:44:9c:77:79:92:d6:60:0b:cd:
16:63:e5:cd:cf:f4:c3:9e:a9:18:59:e1:d3:35:d5:fe:e5:71:
36:90:9e:c2:9f:08:39:bb:ac:26:74:5e:f7:fa:78:6c:20:fc:
4f:77:4e:09:40:b2:ba:d7:94:56:a9:e7:dd:b6:4f:fa:a0:23:
2f:95:b5:d9:13:40:ff:b9:9f:f4:e4:49:4c:e6:3c:d4:f8:94:
f9:d4:be:ff:f3:62:86:b0:bf:c1:92:ec:0d:3c:6c:11:bf:a5:
ac:ec:a2:78:07:e3:24:c7:c2:ba:22:25:ab:02:52:82:90:2b:
0f:8b:29:52:22:1b:de:0f:bc:d3:2c:f9:4c:59:ff:4c:d0:47:
f7:83:d2:7a:a2:e7:e3:25:17:0c:78:a5:73:94:62:ed:40:64:
ce:b8:ef:01:4b:15:19:75:a2:a2:ff:bd:c4:2d:a6:0c:51:70:
a6:cf:98:ee:c1:35:ed:ce:b0:4a:f8:ab:ab:e7:e9:a9:18:c6:
b7:fc:33:a1:ed:53:c9:1d:d8:26:56:ab:d5:09:0d:ae:a0:5f:
96:96:12:c8:d2:d9:2f:fa:21:9e:e9:f6:6b:49:46:3c:f7:c4:
0c:f9:4d:79:96:30:3c:90:72:bf:d3:a5:30:be:c9:b1:df:a5:
23:16:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org