Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/uMoCOaeYar7vNIPC0_DdmiSSCAI.roa
File: uMoCOaeYar7vNIPC0_DdmiSSCAI.roa (raw, json)
Hash identifier: Zz83T8cldu+ZIdEeafS9lcKO6CoTpmOvYz5emv7hSiI=
Subject key identifier: B8:CA:02:39:A7:98:6A:BE:EF:34:83:C2:D3:F0:DD:9A:24:92:08:02
Certificate issuer: /CN=f091d2d77461d9cbd94aa2112ff120f2aa6b5d74
Certificate serial: 01856BC11E7CCEDF5F26BD8A41FA938B7A76
Authority key identifier: F0:91:D2:D7:74:61:D9:CB:D9:4A:A2:11:2F:F1:20:F2:AA:6B:5D:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/uMoCOaeYar7vNIPC0_DdmiSSCAI.roa
Signing time: Sun 01 Jan 2023 05:14:56 +0000
ROA not before: Sun 01 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 213.232.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1e:7c:ce:df:5f:26:bd:8a:41:fa:93:8b:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f091d2d77461d9cbd94aa2112ff120f2aa6b5d74
Validity
Not Before: Jan 1 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ca0239a7986abeef3483c2d3f0dd9a24920802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:7d:17:3d:58:6f:df:22:33:a9:ba:24:93:
2e:52:cf:94:8b:b6:1d:55:d2:60:fe:73:cc:50:a6:
f2:b5:8a:88:1e:79:c4:b6:4d:ce:1a:25:7a:ae:6b:
27:6a:ce:21:2b:c0:65:93:60:10:7d:0a:52:88:99:
d8:fe:1f:1b:fa:70:fe:01:3e:50:75:c1:d6:b3:bc:
40:f2:96:0c:44:be:cf:f6:99:a4:bb:8d:12:6c:1b:
0c:08:03:26:e1:70:f2:7a:a0:7d:f6:59:3d:79:72:
bd:b5:76:93:a7:1b:32:89:21:c8:79:1c:ab:fc:a5:
ee:ac:65:37:a3:31:90:9d:a4:82:14:6b:f0:e2:f4:
25:d2:6f:27:53:c6:cb:1f:15:61:c8:b8:f3:19:e4:
19:39:d2:b1:83:78:2f:ae:6c:32:3c:aa:cd:d6:f8:
ee:e3:55:ea:15:6f:4e:2d:77:33:24:ee:08:d0:04:
95:35:1f:69:0a:a4:b8:4d:da:28:09:5a:fb:0d:6a:
d6:b9:0d:8b:0a:a1:97:f1:90:c4:2f:da:0e:1e:e7:
2b:04:54:ff:38:a7:c4:b8:76:76:e6:39:7e:49:8b:
98:7f:c1:16:62:91:0b:4c:70:6d:1d:22:24:98:67:
3f:5b:de:a1:96:1a:2c:99:8b:1d:9c:44:c6:17:cc:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:02:39:A7:98:6A:BE:EF:34:83:C2:D3:F0:DD:9A:24:92:08:02
X509v3 Authority Key Identifier:
keyid:F0:91:D2:D7:74:61:D9:CB:D9:4A:A2:11:2F:F1:20:F2:AA:6B:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/uMoCOaeYar7vNIPC0_DdmiSSCAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e6cf13-80b1-4766-9faf-62a2cab82713/1/8JHS13Rh2cvZSqIRL_Eg8qprXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a4:70:a0:dd:61:37:0e:04:a2:87:36:68:57:17:73:a0:57:
21:55:cb:1b:97:03:1c:17:72:5a:c1:a7:f8:64:f1:20:84:1d:
56:5f:a2:4b:79:66:3c:0d:8b:6b:06:c9:4f:07:58:a4:61:09:
a7:05:76:fd:65:1b:26:d7:82:32:e0:52:27:af:1e:2a:88:91:
98:0d:24:e1:53:b0:9e:ce:4b:27:a5:f5:e4:27:55:53:c9:de:
64:91:8d:e7:57:e2:c7:bb:e4:1f:2c:05:c6:28:13:ef:a3:02:
af:87:31:6f:b4:0a:5c:2b:ea:b1:39:c7:61:96:0e:6a:6a:e3:
c1:07:b7:2a:ea:60:92:42:67:6f:2d:eb:72:2d:5f:f0:c2:9c:
19:f9:19:c1:3e:4f:90:dc:9c:6b:b2:c1:af:fd:fe:66:96:d4:
2a:ad:54:cc:11:49:6c:19:af:09:61:75:22:76:4b:e0:02:b5:
4f:28:e1:0c:a3:09:f4:99:85:31:a0:02:bf:db:ff:49:a4:f7:
04:27:95:ae:61:4c:61:f1:8f:9c:6f:42:54:90:a8:5d:b1:75:
de:0f:52:09:64:c3:33:5e:ad:d4:6f:ba:65:c6:7b:ee:b2:9b:
dc:33:c7:d4:67:cb:19:b6:df:a2:7c:7b:75:61:9b:fb:2d:3a:
e8:29:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:04 2024 by rpki-client on console-ams.rpki-client.org