Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/s894IBvXTLHBhTOJRr3klX5t1AY.roa
File: s894IBvXTLHBhTOJRr3klX5t1AY.roa (raw, json)
Hash identifier: ZgHbxYChYD+NjPZOS8OE1XsvR1HaYc3IpqHh4zvIe7o=
Subject key identifier: B3:CF:78:20:1B:D7:4C:B1:C1:85:33:89:46:BD:E4:95:7E:6D:D4:06
Certificate issuer: /CN=44e29bc671f99dd59bda945577139150631b1d71
Certificate serial: 018570CBE8844A6B64F9A3B262747759CB4F
Authority key identifier: 44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/s894IBvXTLHBhTOJRr3klX5t1AY.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 213.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e8:84:4a:6b:64:f9:a3:b2:62:74:77:59:cb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e29bc671f99dd59bda945577139150631b1d71
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3cf78201bd74cb1c185338946bde4957e6dd406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:61:3a:3d:95:bf:91:a1:c2:1e:1f:7e:3a:
ce:cd:7b:ed:84:dc:39:4b:45:68:3e:fd:b7:25:19:
7b:a8:94:53:5f:1b:48:35:70:c1:42:3a:85:50:4b:
97:55:a1:09:6c:11:52:12:af:5d:b7:ab:d4:12:21:
b5:9b:e5:57:d7:c7:82:3f:67:39:7e:55:d5:4b:77:
dc:2c:4d:20:b4:9c:db:b0:61:5e:d8:a6:bd:1c:f0:
1d:cb:e3:0b:79:2b:bb:c0:1c:20:c2:3b:be:e2:bc:
43:89:dc:04:0e:33:d0:03:72:77:c4:e7:c0:3d:27:
e8:96:e1:b6:f7:6d:fe:5f:4c:42:3c:8d:c8:14:e9:
40:7a:a4:af:05:b0:04:2c:ba:d0:fe:75:74:19:94:
72:4c:8e:6d:08:68:7f:01:ea:fd:6e:8b:21:e8:60:
38:6a:f1:55:80:78:e6:44:46:b2:55:8e:8f:6d:6b:
fe:91:97:2d:5e:8c:af:22:0f:55:ec:e9:e6:09:55:
dd:58:29:09:0f:13:fa:bd:0e:92:d4:9d:e6:17:56:
18:8f:9a:94:d8:7e:e1:73:e9:7e:36:32:a7:9e:64:
e6:d4:b5:c3:06:96:b5:ba:93:84:fc:e8:0f:d0:84:
4e:b1:1c:80:bc:9a:77:02:50:be:fe:e8:e5:37:c8:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:78:20:1B:D7:4C:B1:C1:85:33:89:46:BD:E4:95:7E:6D:D4:06
X509v3 Authority Key Identifier:
keyid:44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/s894IBvXTLHBhTOJRr3klX5t1AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
61:90:1a:6f:dd:59:75:17:4e:24:60:01:15:9d:9b:d5:07:02:
bd:a5:f9:80:2c:24:9d:c4:0b:14:ee:93:38:77:f5:c3:a1:9c:
dc:56:bb:c6:b1:21:36:20:31:67:1d:2e:88:3c:7a:94:9d:a1:
08:42:be:85:2f:8c:9e:87:4b:e3:22:59:43:29:2e:a0:86:4c:
cd:7a:f2:01:d1:f7:a7:03:b3:3a:3a:d4:2f:bb:6b:a1:f1:32:
01:8b:06:ab:4a:3b:69:cc:2c:95:45:0c:c2:20:50:09:6f:ef:
38:8a:de:a1:45:7b:07:8a:e2:4a:8c:70:6c:02:4f:3e:a2:7a:
e5:c8:e8:d5:ac:09:d5:fc:12:db:c3:97:2e:c4:dc:da:a7:e4:
3d:e5:a3:a0:0b:77:ae:cc:10:ec:dd:b5:72:9e:69:c7:d4:b1:
02:80:b9:c7:36:aa:da:d0:d4:d5:07:e2:ab:9e:ef:26:33:94:
1e:1d:80:05:eb:d1:fa:f4:b6:b4:da:70:10:7a:7a:31:0a:f3:
48:1e:ff:e4:2c:e2:db:7e:04:b2:79:98:c1:2f:9f:b0:da:d1:
b2:e1:8a:86:5f:10:2a:93:f2:67:cf:d7:c8:fc:89:d8:01:0f:
9e:b1:13:7f:ef:a3:40:b6:b5:1b:e6:bb:cb:6c:76:97:ef:09:
dd:50:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:49 2024 by rpki-client on console-fra.rpki-client.org