Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/dIjO_cSVX_V3AJq4QAYqVmMeTek.roa
File: dIjO_cSVX_V3AJq4QAYqVmMeTek.roa (raw, json)
Hash identifier: cXHzApQsgs0usKinRD68MkGfBuWWObVRV2oSgPquN7A=
Subject key identifier: 74:88:CE:FD:C4:95:5F:F5:77:00:9A:B8:40:06:2A:56:63:1E:4D:E9
Certificate issuer: /CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Certificate serial: CF92AF
Authority key identifier: 37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/dIjO_cSVX_V3AJq4QAYqVmMeTek.roa
Signing time: Sat 01 Jan 2022 05:58:13 +0000
ROA not before: Sat 01 Jan 2022 05:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 213.109.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13603503 (0xcf92af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Validity
Not Before: Jan 1 05:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7488cefdc4955ff577009ab840062a56631e4de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:34:b0:43:c5:04:39:a9:5e:7b:f5:47:14:
53:2a:d2:90:75:b6:0f:df:f7:ab:f6:6d:b4:ad:a7:
f7:5b:05:38:7c:cf:8e:99:70:4b:58:f8:72:44:c9:
8f:21:05:55:f0:a2:94:ab:25:22:de:c9:23:3a:65:
26:4e:ad:8e:62:21:63:71:4a:f9:e7:b9:2b:78:4a:
07:96:d1:01:5d:41:05:eb:66:f8:59:1b:da:bf:20:
f7:06:a7:ab:b1:eb:f5:fb:c4:17:a1:5f:82:b2:b6:
f5:d5:44:34:0a:f7:85:0a:5b:eb:dc:e6:ae:8f:13:
8b:72:0e:1e:93:82:c6:36:a8:21:41:1b:d4:be:d5:
00:34:19:7a:25:57:37:94:ba:f0:93:d2:07:98:cc:
e9:1d:ac:b3:7a:1c:03:34:c4:6c:49:c7:26:5c:ca:
77:ab:f3:bf:c7:5e:70:7b:c5:0c:7d:2c:38:8f:d0:
a7:34:85:bd:4d:98:0a:c4:53:65:d3:25:71:e9:b4:
ad:c0:52:4e:2e:0d:d3:30:7f:0e:d0:7b:9f:e7:b5:
7c:38:9b:91:cc:b7:6c:77:da:31:a9:27:3e:15:82:
22:54:62:f6:ee:73:4d:9e:2c:ce:2b:96:f9:a2:6a:
fa:23:5b:e5:fc:4f:21:74:42:98:b5:b8:00:dd:9a:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:CE:FD:C4:95:5F:F5:77:00:9A:B8:40:06:2A:56:63:1E:4D:E9
X509v3 Authority Key Identifier:
keyid:37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/dIjO_cSVX_V3AJq4QAYqVmMeTek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.155.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ce:09:ab:49:61:03:55:f5:80:b5:50:34:10:98:19:9b:af:
af:0b:36:72:89:6b:d0:d9:a1:8e:61:77:ac:af:13:2a:52:63:
e9:9a:d9:46:86:ba:ee:68:b6:09:3f:92:88:89:a5:dc:96:49:
b4:af:ad:84:56:5f:4f:21:6d:5f:ac:e8:cd:a5:48:e8:c1:36:
bd:38:7f:63:bf:81:5f:ca:ce:cd:d7:ca:59:9e:d0:f4:ce:72:
fd:b0:74:e0:88:27:37:68:a4:36:48:4a:ab:c0:33:57:b0:df:
bf:fe:b4:80:53:21:19:f2:b6:4b:b2:20:d9:37:71:c3:96:f0:
52:4a:64:b3:1e:30:af:62:7e:4f:4f:3d:a0:bc:01:69:00:af:
a3:55:13:24:3d:ba:04:66:5f:44:76:bf:2f:f3:cd:6c:e2:7f:
de:22:55:f7:d5:bc:e1:ef:98:44:cf:04:ab:61:99:91:92:00:
74:fa:16:c4:78:95:95:0a:ba:92:08:03:d6:6c:cb:b6:52:9e:
7d:ed:38:5f:fb:35:b3:43:5c:34:2b:6e:cd:6d:a7:83:ef:88:
ff:3f:25:10:6c:54:34:e0:3b:7e:b4:6b:5d:f9:c2:98:81:95:
5e:63:13:8c:e5:62:f5:bc:2b:ee:e4:a4:47:26:8e:6c:34:43:
e6:34:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org