Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IhHK9GmAii_ZHID2yga4XbZjpog.roa
File: IhHK9GmAii_ZHID2yga4XbZjpog.roa (raw, json)
Hash identifier: 6AodPrQEz2c6+rGSUyiPHKtMGLdv1XKJT5u7O0A+EPI=
Subject key identifier: 22:11:CA:F4:69:80:8A:2F:D9:1C:80:F6:CA:06:B8:5D:B6:63:A6:88
Certificate issuer: /CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Certificate serial: 018CC4929ABDB342DA6049899885E12FF3D3
Authority key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IhHK9GmAii_ZHID2yga4XbZjpog.roa
Signing time: Mon 01 Jan 2024 10:29:51 +0000
ROA not before: Mon 01 Jan 2024 10:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 162.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:9a:bd:b3:42:da:60:49:89:98:85:e1:2f:f3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Validity
Not Before: Jan 1 10:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2211caf469808a2fd91c80f6ca06b85db663a688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:97:8f:f5:12:14:73:6a:ec:78:09:a2:d2:
b1:c8:02:76:67:c3:ea:41:63:8d:ce:85:5f:c1:97:
e4:62:f0:99:66:cb:09:e1:1f:24:dc:04:e1:8d:2c:
96:89:17:9c:93:cb:11:69:bd:ec:ad:3d:ad:6e:d9:
5a:42:ab:e8:5c:8b:f8:34:1d:00:3e:51:db:91:28:
15:82:d7:18:f6:04:64:33:6c:61:2e:b6:73:04:09:
60:fc:b8:f1:85:57:7c:a5:e6:6b:9e:26:aa:5e:56:
91:33:06:d8:4f:7e:14:cf:cc:70:64:b5:44:ab:32:
f6:28:ff:b8:57:6b:47:24:3c:22:5a:3a:4d:e4:46:
c1:93:ee:c4:41:b4:73:33:c0:8b:c4:97:ca:56:85:
24:f6:95:15:31:3b:d0:fd:c7:0a:d0:5e:35:1a:6a:
cb:72:55:3c:56:65:4f:29:35:7b:ee:bc:d2:47:63:
92:01:40:54:19:e7:e4:d5:bb:31:9a:2a:35:f2:37:
b8:83:27:99:c3:6c:f1:01:ea:19:20:a1:3c:3c:3c:
80:3e:2f:9a:8b:a4:02:eb:76:02:bd:5e:c8:53:50:
e8:8a:a5:1d:de:e3:08:16:7d:ac:8d:59:5f:5c:9f:
77:15:ae:4a:9a:47:2d:f1:26:c7:bb:8c:2c:b2:73:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:CA:F4:69:80:8A:2F:D9:1C:80:F6:CA:06:B8:5D:B6:63:A6:88
X509v3 Authority Key Identifier:
keyid:21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IhHK9GmAii_ZHID2yga4XbZjpog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:cd:1a:c4:ed:f6:9e:7c:f6:f8:d2:ba:f9:57:e8:88:8d:18:
75:5c:93:db:44:29:46:02:ca:20:a9:19:f7:2e:29:f3:56:35:
f9:87:28:ac:32:fa:78:e3:b6:4b:86:90:ce:be:46:3b:4a:4d:
75:54:a2:c9:44:47:c7:b3:72:42:ad:d2:24:6c:7c:be:80:ea:
b4:4e:df:11:63:90:8b:0f:a4:fb:ed:b1:a5:ee:0d:a6:8a:54:
9d:7c:66:36:03:70:ac:ed:04:fc:c3:15:44:e2:97:b7:b8:fd:
c8:44:a2:e7:f4:3d:c3:cf:e8:52:23:05:82:7a:22:ce:02:f1:
3f:68:dd:85:52:c4:37:d9:0c:8b:e2:bf:f4:ce:89:ca:25:17:
95:e5:12:af:49:74:49:92:08:80:9c:7e:b0:80:aa:b4:04:66:
4d:91:dc:08:61:08:af:60:4f:25:11:08:53:02:80:22:7b:34:
cf:f5:ad:e3:64:2f:db:95:9b:56:b8:f0:81:32:5b:b6:3f:89:
87:ca:d2:d0:cb:17:16:a4:b6:a8:2f:53:12:6f:f9:97:33:d5:
26:23:3b:ac:9f:41:cf:3f:26:20:31:0d:f3:e7:89:0f:2c:73:
9d:af:4d:d8:5e:a9:57:16:41:95:49:b3:1c:7d:f4:3d:15:11:
f3:d6:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 13:56:39 2024 by rpki-client on console-fra.rpki-client.org