Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/TpmlsY1QtuogCYOai_9Nyvf7PEo.roa
File: TpmlsY1QtuogCYOai_9Nyvf7PEo.roa (raw, json)
Hash identifier: 4CsKvbM+VqzB9FUouQFmWdbAzOm5cNfJNZno4yXjh/k=
Subject key identifier: 4E:99:A5:B1:8D:50:B6:EA:20:09:83:9A:8B:FF:4D:CA:F7:FB:3C:4A
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08DCC751
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/TpmlsY1QtuogCYOai_9Nyvf7PEo.roa
Signing time: Wed 16 Mar 2022 22:56:17 +0000
ROA not before: Wed 16 Mar 2022 22:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148686673 (0x8dcc751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 16 22:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e99a5b18d50b6ea2009839a8bff4dcaf7fb3c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:65:04:03:f0:ac:0c:9e:10:fa:3e:d3:cb:
80:e3:1a:e4:c1:a4:6a:a4:d9:b2:9c:66:80:d6:ab:
89:39:1b:eb:1b:0a:79:e2:e6:1d:8d:e9:9d:19:3e:
91:40:47:08:59:0c:06:33:b7:a6:ca:69:69:47:dd:
1f:c3:0a:4e:2b:aa:8e:ef:e0:3b:b2:69:eb:88:34:
e5:e7:cf:af:20:bc:7c:eb:aa:4c:c9:4d:08:e9:26:
7d:cb:b5:6c:9f:86:9e:d0:c6:66:ec:8a:7a:db:85:
3a:ed:75:70:c3:9d:5d:55:77:7d:a6:1b:78:3d:46:
ec:34:be:2b:4e:95:07:b4:74:9a:49:d4:46:07:a2:
7c:94:b5:93:f0:08:67:f2:8a:4e:1e:95:92:4b:fe:
0a:a6:d2:ca:ad:ec:4f:9f:f4:82:05:de:1a:f1:20:
2e:e3:1b:eb:95:c2:59:1d:c4:ec:cc:ec:6f:d9:05:
4e:a8:af:d9:ca:9a:f4:5d:15:1c:3b:8e:3c:e8:79:
4c:f5:16:d5:29:53:13:50:dd:21:41:2d:07:dc:dc:
d3:7d:a0:0f:87:46:27:b1:c6:f7:70:e5:4c:6b:1c:
80:09:28:b6:b7:22:5d:2a:0a:57:39:87:3f:10:67:
f5:24:e8:67:7b:a9:22:4e:90:11:06:a6:91:46:a3:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:A5:B1:8D:50:B6:EA:20:09:83:9A:8B:FF:4D:CA:F7:FB:3C:4A
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/TpmlsY1QtuogCYOai_9Nyvf7PEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:55:46:a8:09:06:8f:0c:b1:53:90:ca:9b:a6:9a:ba:e4:98:
dc:70:68:2d:2c:ca:75:9b:75:84:83:cc:5b:de:00:ad:5e:21:
3c:53:d8:58:78:2e:b7:06:ce:f1:b9:74:f1:59:5a:1a:66:68:
f3:1a:0e:5e:39:6d:8d:72:88:3a:94:5b:39:37:d6:cf:bf:09:
8b:97:d4:2f:6a:18:9d:37:3e:80:51:cd:2d:47:00:64:c4:63:
ad:45:a6:68:6f:a0:c4:1e:ec:d2:ae:ba:01:2b:f9:4c:4a:78:
c0:eb:2a:05:1c:07:68:b5:6e:63:c1:9a:ed:b1:82:ec:c3:71:
e8:02:19:18:1b:1f:b7:82:22:c5:e2:4d:2d:97:aa:3d:1f:5f:
05:38:4b:e7:b3:6f:b7:b9:21:0b:98:0b:31:cc:4d:b4:1f:e0:
b6:87:06:b3:5a:51:d6:95:9d:c3:71:9d:ba:f3:d6:e3:f0:4e:
df:08:f8:39:1c:65:48:f9:96:66:f4:e4:fe:3c:24:06:90:6a:
8f:dd:28:7d:50:13:2f:11:f4:c5:26:4c:0f:aa:e4:ef:1d:a9:
08:1b:ba:bb:43:63:6e:68:bc:00:d7:8a:f9:6d:c1:06:21:58:
3a:4a:fc:af:ff:74:f0:22:c3:12:b8:6c:75:a7:bb:08:97:43:
91:20:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org