Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa
File: FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa (raw, json)
Hash identifier: 9UodcU5suxG9bZtnKRTlGiRl84VkZKD1tH2nzCxYpbo=
Subject key identifier: 16:74:BC:88:0D:99:68:33:65:A7:09:10:B0:09:C0:3D:E6:67:F4:78
Certificate issuer: /CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Certificate serial: B691DE
Authority key identifier: E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa
Signing time: Sat 01 Jan 2022 07:02:15 +0000
ROA not before: Sat 01 Jan 2022 07:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11964894 (0xb691de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Validity
Not Before: Jan 1 07:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1674bc880d99683365a70910b009c03de667f478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:da:8e:64:29:44:65:6d:4a:b3:08:16:72:
19:b6:21:24:86:bc:83:1e:92:eb:32:05:18:b2:f6:
51:5f:af:5e:3a:13:32:37:dc:de:b7:a5:b0:33:a7:
6c:0a:e0:b0:1a:6a:48:cd:a9:49:61:41:35:b7:7a:
3c:bb:15:ce:e3:2a:19:30:80:f8:06:25:63:f3:82:
49:10:c2:d4:bb:01:cb:f7:9d:ad:a1:4f:2c:11:1a:
c9:52:75:5a:37:d9:bf:42:10:e4:40:c7:45:0b:7e:
50:2c:00:87:d1:cd:84:6e:ed:d0:14:cf:23:a1:2f:
1d:fd:80:de:1e:49:b1:ad:cc:2b:f7:b5:76:58:68:
17:0f:70:8d:ab:01:e4:00:47:34:03:67:d8:27:37:
6c:ad:e1:52:32:64:e6:58:1b:c5:42:58:ad:c8:17:
e9:3a:c6:0f:4e:b6:b6:07:c0:13:a4:22:d4:02:53:
40:54:d3:1c:7c:34:26:4f:5e:c4:0c:25:58:fc:82:
c1:47:17:38:39:ef:57:b2:31:e8:7b:a1:2e:8e:08:
35:f5:19:5a:02:4d:aa:e7:f3:21:9c:1f:9d:ca:86:
a7:c1:76:66:68:94:03:68:6d:37:1b:67:46:5a:c6:
58:d5:9e:09:40:fe:c8:bd:08:a7:cd:b7:54:18:a5:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:BC:88:0D:99:68:33:65:A7:09:10:B0:09:C0:3D:E6:67:F4:78
X509v3 Authority Key Identifier:
keyid:E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/FnS8iA2ZaDNlpwkQsAnAPeZn9Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.149.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:26:b8:d1:af:8b:d3:28:19:f9:5f:8e:a2:4f:4a:dc:69:
8b:82:90:8f:35:5d:20:e8:21:99:8c:4e:f2:99:38:ff:89:0f:
9f:6f:70:f6:a2:5f:8f:97:2d:b4:e3:06:da:d3:ff:18:46:83:
01:f3:5e:d6:95:4e:2d:1a:96:b3:82:56:99:31:4d:8e:3f:b5:
27:51:b6:97:93:a0:c6:ad:18:00:6f:f9:dd:53:c6:ed:34:84:
b6:67:71:e6:b1:0c:5f:b2:e8:32:02:5b:89:10:3c:36:21:3e:
82:0e:14:e9:8d:e5:1d:72:12:3f:3d:ae:9c:73:e8:e4:76:49:
14:60:74:28:13:a3:e6:30:20:6d:9d:e6:ae:fa:6e:22:40:11:
55:9a:dd:b0:7a:a2:e2:1b:b4:27:99:9a:74:94:bb:66:9e:96:
e6:f1:ff:a7:74:20:d6:87:cc:d4:96:bf:53:67:38:97:ce:1a:
46:2d:24:3f:ec:df:26:ae:8f:85:ac:d2:2e:2e:16:f5:2f:af:
15:5e:7f:99:ad:af:52:4e:f4:bb:c1:f7:24:db:2f:b0:2f:cc:
c1:01:aa:ac:fa:cb:52:be:77:c4:43:50:b5:00:bb:07:93:bf:
72:f9:14:3e:1e:86:0b:9e:87:50:f5:41:35:97:e0:e5:e8:cb:
14:86:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org