Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/fTwOnSM8ZgKyR3inEnCNX8Jqp60.roa
File: fTwOnSM8ZgKyR3inEnCNX8Jqp60.roa (raw, json)
Hash identifier: 9ePCj4l6mGYHSoj19OBFJedsEh+2qKZ3CSeZ0SqNT4s=
Subject key identifier: 7D:3C:0E:9D:23:3C:66:02:B2:47:78:A7:12:70:8D:5F:C2:6A:A7:AD
Certificate issuer: /CN=e4749c3367ba6e7e9f77354a55d388379135df0e
Certificate serial: 018D8DFC8E887CEA373CC6D7BC5AA2B09094
Authority key identifier: E4:74:9C:33:67:BA:6E:7E:9F:77:35:4A:55:D3:88:37:91:35:DF:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HScM2e6bn6fdzVKVdOIN5E13w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/fTwOnSM8ZgKyR3inEnCNX8Jqp60.roa
Signing time: Fri 09 Feb 2024 13:09:15 +0000
ROA not before: Fri 09 Feb 2024 13:09:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212328
IP address blocks: 82.102.9.0/24 maxlen: 24
82.102.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:fc:8e:88:7c:ea:37:3c:c6:d7:bc:5a:a2:b0:90:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4749c3367ba6e7e9f77354a55d388379135df0e
Validity
Not Before: Feb 9 13:09:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d3c0e9d233c6602b24778a712708d5fc26aa7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:2d:5d:c6:b6:29:df:b4:59:3f:6b:3d:28:
15:06:f1:b0:d0:aa:77:b2:a0:44:77:dd:f8:63:28:
fb:12:9d:10:e1:97:97:9d:2d:18:07:c9:fc:f1:ed:
6c:88:78:00:06:a2:81:c5:03:2f:47:78:fc:18:a0:
f1:cc:f4:b4:48:b7:d7:da:1b:f3:99:6e:9e:df:b8:
98:2f:47:22:22:b5:92:b6:3b:00:24:f7:b1:b6:a8:
f8:6d:51:4c:b1:3d:c5:d3:c7:5f:6d:00:45:86:c9:
65:04:46:59:46:9e:e6:62:c2:02:82:17:82:1d:85:
c1:4d:a9:0b:1e:0e:d6:68:4b:e7:43:49:4c:48:14:
ce:38:04:7b:b1:29:ff:b7:a7:01:de:c6:ee:6a:43:
6a:2b:ed:f6:0f:60:30:2b:3b:f8:6a:cf:6b:bf:3c:
a6:b5:80:05:ba:8a:3f:ab:8f:bf:c5:c8:0e:1a:46:
ce:59:1c:e0:23:11:0f:c8:11:b3:83:5c:27:88:39:
5b:38:46:fe:cf:07:09:f6:f8:09:91:3f:62:e9:03:
7b:28:fb:63:b1:1e:d2:21:25:12:59:e3:08:59:f0:
e5:ab:73:eb:cf:a7:fa:b3:60:ce:38:1e:aa:f9:cc:
99:7f:7d:4b:32:20:42:b0:8b:a5:55:2f:a5:8a:12:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:0E:9D:23:3C:66:02:B2:47:78:A7:12:70:8D:5F:C2:6A:A7:AD
X509v3 Authority Key Identifier:
keyid:E4:74:9C:33:67:BA:6E:7E:9F:77:35:4A:55:D3:88:37:91:35:DF:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HScM2e6bn6fdzVKVdOIN5E13w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/fTwOnSM8ZgKyR3inEnCNX8Jqp60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7df4a-77a9-43d8-bfd7-a853144879f3/1/5HScM2e6bn6fdzVKVdOIN5E13w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.9.0/24
82.102.14.0/23
Signature Algorithm: sha256WithRSAEncryption
e0:fe:63:a2:14:fe:cb:60:d1:4d:31:1a:7b:e7:8f:3a:99:68:
f4:50:e1:bb:82:8a:ad:e1:d3:c8:97:e6:85:f1:40:7e:29:ac:
ff:a3:6e:3f:f3:b8:65:ad:bd:8d:05:2e:5f:d0:15:c8:cf:45:
59:05:00:83:8e:0d:12:69:14:7e:e4:16:55:90:a1:97:14:70:
1d:37:9c:50:53:68:21:d4:a7:61:c5:ef:e9:fa:b9:3a:12:ee:
cb:94:53:24:59:cb:ce:2d:ee:4f:ba:31:28:87:45:07:35:ca:
be:28:fd:bf:ba:09:d2:07:b0:0f:59:f1:f7:f5:fc:7a:29:0f:
e6:1e:fd:7b:13:2e:aa:07:c6:9e:1d:14:1c:f4:4e:8f:26:4f:
45:7f:33:74:29:53:13:40:b4:c0:7e:de:4c:97:c0:f4:7e:39:
7e:27:99:31:e8:27:01:78:9d:bf:97:30:74:d7:d1:28:f8:f5:
a7:a1:f2:32:28:ab:69:38:5f:eb:8a:17:e6:06:29:71:32:95:
b1:18:3a:c9:a5:d5:3b:95:61:98:fd:b3:13:fc:25:b7:b7:ea:
85:46:ab:9b:85:80:5b:14:84:01:b4:ed:74:56:97:47:9f:91:
f1:6c:06:24:11:8f:03:80:e5:1a:61:a5:65:8b:6c:4b:8c:c7:
6a:39:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:25 2024 by rpki-client on console-fra.rpki-client.org