Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/14c2fd-0306-4814-96c2-c62e172c109d/1/YvpPg2BYa-Yrp_PkoPls5QyxCQM.roa
File: YvpPg2BYa-Yrp_PkoPls5QyxCQM.roa (raw, json)
Hash identifier: Pdlwttzp1TkQumvG9Qztvr5aFjntkHugF935flb4rr8=
Subject key identifier: 62:FA:4F:83:60:58:6B:E6:2B:A7:F3:E4:A0:F9:6C:E5:0C:B1:09:03
Certificate issuer: /CN=06998430947b2d102bbc59fe723b2aabde683f42
Certificate serial: 0183F6354E07F1016BA192FBE18B8E9F3ED8
Authority key identifier: 06:99:84:30:94:7B:2D:10:2B:BC:59:FE:72:3B:2A:AB:DE:68:3F:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpmEMJR7LRArvFn-cjsqq95oP0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/14c2fd-0306-4814-96c2-c62e172c109d/1/YvpPg2BYa-Yrp_PkoPls5QyxCQM.roa
Signing time: Thu 20 Oct 2022 16:23:51 +0000
ROA not before: Thu 20 Oct 2022 16:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 212.107.4.0/23 maxlen: 23
212.107.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:35:4e:07:f1:01:6b:a1:92:fb:e1:8b:8e:9f:3e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06998430947b2d102bbc59fe723b2aabde683f42
Validity
Not Before: Oct 20 16:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fa4f8360586be62ba7f3e4a0f96ce50cb10903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:b0:09:c8:0e:f1:68:84:69:15:81:15:6c:
b9:80:cb:c8:09:10:f9:dc:97:cf:28:b8:8c:87:6e:
83:6c:e2:63:de:4e:fb:1e:6f:fa:5f:f5:30:99:f1:
a6:7a:d1:7d:3c:d5:11:49:79:64:12:0b:85:b1:03:
6f:62:78:fc:41:d9:8c:d0:17:c9:4e:9e:91:9a:1f:
96:7d:96:8e:0d:54:f8:d7:12:44:6f:d8:73:52:98:
2e:24:97:2f:f9:df:32:f1:f8:bf:7c:ed:57:a2:55:
94:41:25:84:fc:7c:05:23:1e:d3:06:76:5f:ec:00:
07:aa:08:7d:72:20:46:35:84:ba:84:c6:5d:4b:85:
a5:94:66:47:f1:e8:9e:04:34:7a:74:11:38:79:58:
e2:e4:0d:57:16:26:88:b1:57:b6:55:56:40:fb:16:
67:63:e3:bf:52:68:f2:a4:29:be:0d:b8:24:82:80:
38:86:8b:27:44:5f:77:d3:10:2a:2e:7c:37:70:db:
6e:f6:81:c1:60:ee:94:7f:33:31:a1:3c:27:9e:29:
85:43:9b:5f:23:1b:27:70:8f:28:b3:ac:b5:23:d5:
9d:d7:5e:de:aa:50:db:bf:d2:15:44:8b:ab:f8:a1:
0d:5d:6e:1b:57:e4:8b:37:86:5c:74:22:10:58:6e:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:4F:83:60:58:6B:E6:2B:A7:F3:E4:A0:F9:6C:E5:0C:B1:09:03
X509v3 Authority Key Identifier:
keyid:06:99:84:30:94:7B:2D:10:2B:BC:59:FE:72:3B:2A:AB:DE:68:3F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpmEMJR7LRArvFn-cjsqq95oP0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/14c2fd-0306-4814-96c2-c62e172c109d/1/YvpPg2BYa-Yrp_PkoPls5QyxCQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/14c2fd-0306-4814-96c2-c62e172c109d/1/BpmEMJR7LRArvFn-cjsqq95oP0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:a9:74:8c:1e:5e:88:15:70:1e:31:49:19:cb:29:c8:16:94:
81:a6:c6:cb:7d:4c:fb:e3:8b:3f:ed:12:21:12:aa:4c:42:d4:
f5:49:88:ae:ff:b8:5b:90:ac:3f:0f:9e:78:b6:c4:a9:39:c3:
b6:a9:3f:cf:f8:3a:aa:01:49:66:16:44:83:58:76:54:37:be:
09:00:07:a4:15:8d:ab:d1:67:d2:39:86:94:a4:0d:f2:b3:4d:
3c:53:4c:74:ff:3c:8c:a3:1f:90:ff:be:f1:27:97:39:21:69:
ea:76:21:3b:0c:bb:18:5b:6b:d0:43:9e:3e:17:84:06:41:f5:
6d:4f:f7:89:dd:a3:9d:2b:cb:92:91:ef:80:4c:a4:83:49:43:
23:ec:ae:c2:c6:20:8d:16:0f:b7:6c:69:f9:b7:a6:2f:0f:0e:
d1:bd:dd:c3:87:32:af:48:11:71:b6:ef:79:a3:dd:3a:27:45:
c6:58:67:ed:c0:6c:a2:9d:05:97:09:85:ae:1b:80:a6:1c:0d:
19:97:65:c1:ab:df:82:58:38:5f:e5:d9:56:bd:26:09:46:d4:
97:79:d6:f7:b8:9b:c1:fc:24:ec:89:68:16:fb:0f:df:ae:0b:
9a:eb:a3:e2:cc:dd:05:29:b1:08:87:13:cc:f0:de:5f:7e:a0:
90:6f:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:57 2024 by rpki-client on console-fra.rpki-client.org