Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/GObgJY6fRfXf7RumeDDv3_WB_y0.roa
File: GObgJY6fRfXf7RumeDDv3_WB_y0.roa (raw, json)
Hash identifier: xP/KbtiRqG5gQtVhyJIqWMh7OdjJ+LZtMSiDYMrr/V0=
Subject key identifier: 18:E6:E0:25:8E:9F:45:F5:DF:ED:1B:A6:78:30:EF:DF:F5:81:FF:2D
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08DE7DB0
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/GObgJY6fRfXf7RumeDDv3_WB_y0.roa
Signing time: Wed 16 Mar 2022 22:56:53 +0000
ROA not before: Wed 16 Mar 2022 22:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148798896 (0x8de7db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 16 22:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18e6e0258e9f45f5dfed1ba67830efdff581ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:69:b5:3e:3e:63:28:d2:4f:d0:74:c5:9f:
72:ab:1f:44:00:93:69:91:02:8f:dd:76:d1:43:51:
5f:46:f8:f8:a8:f7:b6:73:1f:84:a8:06:f4:58:1f:
a2:43:70:72:20:d8:5f:2a:d9:37:86:1e:83:c0:f1:
94:17:9a:7e:92:d3:e8:bc:92:e1:cc:de:94:46:4d:
2f:c2:06:7e:ae:f5:e6:29:37:e9:93:4c:8c:be:80:
a3:c2:65:30:41:10:b7:f8:0c:e5:05:48:67:59:7e:
76:7b:fa:04:b4:4c:b1:d0:df:cc:55:0c:d8:ed:3a:
81:84:48:1d:58:17:60:f7:cc:24:cd:39:88:4d:c2:
83:b4:e5:75:ae:94:70:74:47:3b:4a:91:69:2f:96:
e0:2f:9b:95:16:91:09:21:24:fe:c2:59:ff:aa:2f:
c8:2a:5f:37:49:ce:bb:0e:fd:e0:ff:d4:a4:0e:22:
eb:73:60:bd:78:e6:89:7a:16:24:51:42:c4:e5:af:
8f:06:89:4b:09:2f:75:49:7b:c5:1e:0f:66:e2:4e:
f5:53:0d:ad:f5:19:8e:b0:d9:e6:42:fb:e3:e8:fa:
82:1d:7a:25:c1:5c:6c:13:f9:c7:ff:4d:f6:be:63:
5e:97:b9:c1:26:e3:84:62:29:7c:9d:10:b0:2a:ae:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:E0:25:8E:9F:45:F5:DF:ED:1B:A6:78:30:EF:DF:F5:81:FF:2D
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/GObgJY6fRfXf7RumeDDv3_WB_y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.132.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f6:b1:af:73:25:68:f7:a6:0f:cc:97:16:d5:dc:52:cd:8a:
34:16:41:d1:fd:c1:23:c2:30:43:81:b1:dd:a4:39:72:a9:cb:
64:74:44:dc:29:0d:87:49:0b:f1:81:ad:a0:43:42:cb:b5:11:
00:50:6b:97:00:90:ea:24:13:ba:53:a0:48:8f:b2:0d:82:9c:
25:96:04:c3:76:d1:d3:27:f0:14:a2:f9:c5:82:79:15:92:cf:
4d:14:59:2a:ce:a5:7b:ef:3b:6b:bb:a1:a0:bd:23:40:68:7b:
b0:8a:eb:0d:2d:7c:4f:32:7c:c6:8f:1f:2b:fc:8c:68:65:2e:
c1:81:04:98:67:aa:5e:95:01:16:41:00:8a:fa:53:4d:f3:57:
dd:2f:77:65:fc:aa:f9:2b:4e:dc:31:e3:90:b7:73:19:c6:fc:
1b:9f:d2:75:21:99:6f:c5:df:b5:87:02:a4:fe:65:f8:e9:f5:
80:4e:4a:ff:b6:9f:a9:af:cd:fb:65:1a:ad:76:e0:16:a9:70:
e7:4c:03:cd:86:f7:2c:fe:cb:8f:84:48:a3:c8:cb:b5:8f:98:
e8:c6:d6:cc:f4:53:e5:2f:2c:68:93:24:de:3b:7a:be:75:28:
de:fd:29:a4:d2:d0:bc:00:65:11:b8:d1:69:46:af:a9:20:35:
bf:a6:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org