Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/zYJjad63dqoR_xCVtgB--Cab0Ww.roa
File: zYJjad63dqoR_xCVtgB--Cab0Ww.roa (raw, json)
Hash identifier: 94NiikPwa7csM5Rx9+yLgwFCMHiHy5xH2wq5SFoCr+A=
Subject key identifier: CD:82:63:69:DE:B7:76:AA:11:FF:10:95:B6:00:7E:F8:26:9B:D1:6C
Certificate issuer: /CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Certificate serial: 01856D4174BBE14210FB9AA0ED0C306FD044
Authority key identifier: 69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/zYJjad63dqoR_xCVtgB--Cab0Ww.roa
Signing time: Sun 01 Jan 2023 12:14:44 +0000
ROA not before: Sun 01 Jan 2023 12:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 212.18.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:74:bb:e1:42:10:fb:9a:a0:ed:0c:30:6f:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Validity
Not Before: Jan 1 12:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd826369deb776aa11ff1095b6007ef8269bd16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:79:a8:38:29:23:06:c4:24:4e:81:99:3e:
62:28:1a:2e:a9:38:eb:6c:fa:0e:9e:0d:39:08:98:
af:03:d5:32:c7:e9:20:a1:2c:e4:1b:01:0d:de:3c:
e5:ed:1a:0a:c6:1b:34:57:72:9e:ad:09:27:6c:66:
84:8b:5c:6c:8b:df:65:60:51:e2:03:09:5b:67:f5:
1b:c1:39:3d:87:80:69:91:23:65:06:22:90:69:b2:
cb:ee:85:0f:81:e5:bd:bc:c3:df:64:ff:ba:8f:c8:
c2:64:87:81:2a:ba:db:18:d1:9d:c6:e5:a7:3e:6b:
af:f3:f3:7c:f5:9f:26:71:37:3b:ff:1d:44:50:52:
a1:5a:b7:14:04:db:8c:ff:0b:67:30:a4:66:28:3c:
ab:8c:69:6b:b6:8a:8a:8a:00:c4:83:7a:02:43:e2:
db:7f:48:cc:d9:6c:61:b4:75:7f:7d:af:cb:93:f1:
cb:bb:3a:14:dd:2e:f4:a7:71:3c:e2:3b:11:70:22:
b6:2f:f8:12:4a:58:0e:f0:67:0a:98:ad:ac:64:07:
c5:d0:57:e6:aa:00:dd:0b:ae:d7:b7:b1:04:bb:a8:
d8:50:22:10:a9:12:0e:28:6c:6a:4d:d5:fe:3c:08:
f7:4e:85:22:77:86:8d:73:58:50:8f:e3:c8:d2:12:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:63:69:DE:B7:76:AA:11:FF:10:95:B6:00:7E:F8:26:9B:D1:6C
X509v3 Authority Key Identifier:
keyid:69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/zYJjad63dqoR_xCVtgB--Cab0Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:93:a8:54:04:5d:58:a4:c3:ee:73:58:c6:07:b5:29:eb:22:
ea:32:3d:8b:93:97:90:e1:ed:4a:32:09:fc:5e:c4:13:75:83:
e5:89:91:84:b6:b8:f4:48:8f:0a:9f:92:53:0b:7f:fc:ea:a2:
7a:3f:3a:56:a9:85:a5:8c:2b:ca:89:76:2a:61:05:0c:59:55:
e5:6c:47:3f:2c:95:e5:af:83:1e:96:42:01:65:fa:f8:c4:48:
1b:79:ea:65:98:67:db:4e:8e:ac:21:fe:9c:fa:00:52:4d:a4:
f5:da:7b:e6:56:46:dd:a3:1c:f8:24:34:3e:58:44:b3:6c:46:
56:ac:e7:93:8c:2c:d9:7e:fb:dc:bd:a7:36:d5:7e:dd:5d:d9:
92:57:14:b4:56:77:29:8d:d6:5f:a7:cd:91:73:a2:40:4e:6a:
da:94:d7:af:e3:3f:77:c6:a4:54:86:db:10:3e:15:fb:3b:8d:
8e:43:5c:ee:07:a6:76:c5:ae:ef:b5:86:f3:05:46:bf:17:5a:
db:52:43:43:22:66:f0:60:8e:d2:a4:55:e4:8f:cf:40:25:c0:
95:23:c1:41:02:d7:e3:5c:3e:f0:75:b0:b7:c7:a3:5e:d3:e4:
4b:2e:d2:c1:b9:9d:13:0c:9b:e0:e3:89:09:ce:61:78:c3:1e:
59:75:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org