Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Rizbf6ahxCPA0qsc8RGsylJUt2A.roa
File: Rizbf6ahxCPA0qsc8RGsylJUt2A.roa (raw, json)
Hash identifier: Ry2jwIM8EXSlPLNUBy3RrfTVRmXLlFUP1QJgnpnd1ss=
Subject key identifier: 46:2C:DB:7F:A6:A1:C4:23:C0:D2:AB:1C:F1:11:AC:CA:52:54:B7:60
Certificate issuer: /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial: 018C15C7C0593C664D2CEA6D26C78F742C5F
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Rizbf6ahxCPA0qsc8RGsylJUt2A.roa
Signing time: Tue 28 Nov 2023 11:54:21 +0000
ROA not before: Tue 28 Nov 2023 11:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 213.178.141.0/24 maxlen: 24
213.178.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:c7:c0:59:3c:66:4d:2c:ea:6d:26:c7:8f:74:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Validity
Not Before: Nov 28 11:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=462cdb7fa6a1c423c0d2ab1cf111acca5254b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:d9:f6:9c:e8:67:01:69:c2:c9:12:22:3c:
38:31:b9:a4:f3:0e:31:2f:33:bc:21:e6:72:d8:e4:
59:4b:b2:ae:be:e4:b5:31:73:03:90:33:29:48:7c:
42:f7:6d:5d:3b:e5:25:1d:03:19:17:13:2f:64:a8:
d1:eb:4c:a9:56:d1:af:df:ef:e2:13:65:f8:f5:c1:
e7:9e:f1:24:33:1d:0f:f9:15:54:3e:56:b1:db:e1:
73:c1:52:9b:f2:4e:fc:11:dc:3b:e9:ec:ce:67:25:
e4:19:d5:91:cf:41:14:10:44:3a:4b:10:d3:43:66:
0a:44:1a:4c:ee:08:40:c2:b6:a5:21:76:1d:82:f5:
a4:32:f4:a4:c1:60:f3:3b:c9:7b:9d:90:70:f7:a6:
cd:e4:b8:ca:63:64:6e:0d:1e:3a:f3:22:f9:a6:c8:
fd:6a:d9:f4:df:b0:0b:04:55:29:c9:2b:ce:7a:e0:
b3:6f:1f:d9:ef:93:eb:4c:a9:57:8a:5e:e3:86:59:
eb:70:0e:aa:51:9f:7c:95:95:a6:0c:11:59:ad:36:
9d:53:fa:55:0c:5f:1f:b8:e3:1c:d1:b9:a0:99:89:
5b:36:33:77:be:e3:ab:17:31:a5:33:75:f4:66:d8:
22:bb:ce:90:e7:70:e0:6a:d9:bd:a8:a1:9a:87:cc:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:DB:7F:A6:A1:C4:23:C0:D2:AB:1C:F1:11:AC:CA:52:54:B7:60
X509v3 Authority Key Identifier:
keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Rizbf6ahxCPA0qsc8RGsylJUt2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:ac:b8:51:cc:90:85:29:c3:d1:3e:88:57:79:2c:45:ed:0f:
70:e5:64:cc:a9:be:98:85:01:5d:98:dd:47:e3:cb:3f:7c:36:
c2:e6:94:3a:e8:a0:71:e4:18:7a:6d:7c:03:31:09:45:49:83:
03:12:66:5a:71:7c:1c:94:7b:95:93:d0:20:7b:60:7a:d7:e5:
a2:fa:8a:cf:fa:ae:25:1f:e2:24:18:78:73:88:08:0b:fb:c8:
2d:11:fa:fd:e1:3c:f1:2a:32:42:46:34:3d:ef:2d:47:21:a0:
21:57:a4:3b:d9:a9:f9:07:38:1b:35:e0:5c:2a:65:6c:30:6d:
ff:d6:87:19:5e:98:6d:3a:2a:61:31:07:78:70:50:9d:93:d6:
aa:42:00:9e:23:4e:a2:d9:5a:2b:9a:1b:6c:70:c7:e0:3c:4e:
2b:cf:39:ce:17:73:30:fc:1a:37:85:58:f1:78:8d:8a:c6:2c:
dc:12:64:22:4d:c6:aa:c5:24:38:43:ed:63:59:ae:70:49:a3:
1b:ee:83:2b:4f:d2:06:fd:23:0f:d1:cd:df:da:08:05:3b:f4:
77:e6:e4:b6:34:06:2f:cf:1c:f5:d8:37:c9:01:2d:c9:24:38:
5b:09:2c:a1:c7:63:44:23:78:5d:51:b7:4f:20:a7:2e:8f:09:
5e:9c:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org