Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/SotV16cVEkkJw5MuM2TuAtF5Ln8.roa
File: SotV16cVEkkJw5MuM2TuAtF5Ln8.roa (raw, json)
Hash identifier: Q2wuGl5rDsMAgjPPFor44Gf71PYJeGrMRaDVrPPVApk=
Subject key identifier: 4A:8B:55:D7:A7:15:12:49:09:C3:93:2E:33:64:EE:02:D1:79:2E:7F
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01856DCAF7FA31904E033B8EF2A945CA4078
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/SotV16cVEkkJw5MuM2TuAtF5Ln8.roa
Signing time: Sun 01 Jan 2023 14:44:56 +0000
ROA not before: Sun 01 Jan 2023 14:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 213.226.125.0/24 maxlen: 24
213.226.124.0/24 maxlen: 24
213.226.126.0/24 maxlen: 24
213.226.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f7:fa:31:90:4e:03:3b:8e:f2:a9:45:ca:40:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jan 1 14:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a8b55d7a715124909c3932e3364ee02d1792e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:83:50:f3:21:a1:75:6b:87:1e:c1:2e:4a:
fe:5d:8b:28:7b:a5:4a:fd:ca:af:4f:b6:f8:22:92:
44:44:f8:34:d0:d5:7a:df:5f:dd:26:3b:21:b8:27:
21:5b:cd:62:0f:ec:57:9a:ed:ba:24:bf:bb:10:a8:
ea:58:e9:cf:30:f1:cc:73:a4:b8:ed:6f:38:f5:be:
8f:7a:b1:79:a0:b1:04:a8:5f:76:3b:4f:a1:29:e6:
7a:c5:ad:c9:90:19:53:02:45:a2:b2:e8:e6:f7:a4:
1a:cf:81:40:ae:c5:d9:93:e9:ec:e0:37:a5:e9:c9:
d8:55:66:2b:75:dc:5a:7c:d6:1d:4a:37:9f:93:2e:
a0:81:88:38:ac:eb:b5:41:0f:ff:05:18:c0:fa:2d:
94:61:85:55:ba:47:3c:38:7e:24:63:3c:d8:fa:17:
79:89:1f:6d:48:c5:0b:72:ed:79:39:fc:27:31:ad:
92:ca:d2:5c:88:0a:89:11:70:60:a2:99:16:68:8a:
e0:36:0c:e3:89:5d:47:ae:2c:bf:ac:01:20:16:e8:
9b:f4:ca:26:1f:cd:7b:e3:e5:17:64:f2:2b:7c:02:
b7:05:02:a1:24:16:a2:4b:b9:48:7b:c0:36:34:b7:
21:dc:8c:bc:9d:08:cd:cd:e6:cd:db:b1:b3:df:52:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:55:D7:A7:15:12:49:09:C3:93:2E:33:64:EE:02:D1:79:2E:7F
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/SotV16cVEkkJw5MuM2TuAtF5Ln8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:62:df:7b:2f:f5:9d:d0:58:ac:c4:5e:6c:ca:04:50:58:5f:
f3:14:be:2a:e2:a3:3d:b1:1e:80:cf:f9:21:a5:1e:a6:3c:f3:
b9:55:41:e4:86:30:41:95:2e:1d:0f:a4:52:b4:67:23:9c:50:
b6:45:cc:0a:e0:66:19:94:44:24:cf:5a:30:37:13:81:88:60:
14:1c:1c:38:4f:e0:58:a8:9d:73:38:04:bf:39:21:1c:28:e8:
86:16:14:a2:ed:b1:fa:3a:08:f1:76:cd:41:d6:2b:5c:b2:bf:
ad:08:bd:e8:1c:be:d0:4f:2e:d4:47:62:02:3b:b0:7d:a8:34:
db:d7:20:76:c5:e1:34:cc:5b:42:c2:f3:25:d5:11:89:84:d4:
ac:8b:ed:f9:f3:ba:35:f7:48:0b:44:30:2d:d4:ae:b3:df:6d:
87:a8:7e:28:05:3d:bb:a3:fa:62:6a:42:ea:9b:18:7e:8a:38:
67:5d:96:5b:08:2e:fa:71:f7:11:c1:2a:50:27:7c:eb:6c:12:
9c:9d:75:38:f3:b9:5b:74:d8:ef:5a:0b:b7:fc:b3:86:01:8c:
52:0e:98:d1:dd:19:d1:68:0d:f1:34:94:4a:b8:77:93:1f:1c:
11:8a:08:a0:d8:80:69:41:db:47:45:fb:9c:f9:eb:11:5b:2e:
bb:45:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org