Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/LKO8O9RY4QyKrdL-obIxCkEJfp0.roa
File: LKO8O9RY4QyKrdL-obIxCkEJfp0.roa (raw, json)
Hash identifier: RdJZ8LRF76jyQl9/rlB7S0ODwBz3LfQRAQHoFGl74Wg=
Subject key identifier: 2C:A3:BC:3B:D4:58:E1:0C:8A:AD:D2:FE:A1:B2:31:0A:41:09:7E:9D
Certificate issuer: /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial: 44E455
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/LKO8O9RY4QyKrdL-obIxCkEJfp0.roa
Signing time: Sat 01 Jan 2022 03:01:39 +0000
ROA not before: Sat 01 Jan 2022 03:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 212.23.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514901 (0x44e455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Validity
Not Before: Jan 1 03:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca3bc3bd458e10c8aadd2fea1b2310a41097e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:2b:84:db:f6:68:f5:f0:64:45:8b:d7:c3:
4f:79:64:c8:dc:2f:2b:dc:0b:9e:d6:59:d8:18:c8:
4b:22:a6:a6:2b:d6:cc:e9:5d:55:18:d9:6c:7e:58:
34:19:0d:fe:de:73:3e:40:ad:2a:33:3d:e8:3d:e1:
34:5c:f1:29:d6:c7:fc:21:11:1a:70:a4:d3:d0:ae:
03:dc:e7:59:ef:8a:6c:a7:bb:0e:29:b0:a8:e8:b1:
6f:ef:7e:04:e7:7e:18:7e:3b:74:4b:24:b4:1a:bd:
b3:60:ae:f7:df:57:ea:2d:b6:3c:c9:17:23:88:31:
02:eb:61:38:35:a6:8c:20:1d:95:2d:a3:ab:ad:ca:
5e:ed:5c:33:b0:ed:87:ca:b1:a8:5a:cf:7f:8d:81:
93:28:15:23:c8:6c:5f:19:62:e8:56:57:d8:93:0d:
16:a9:dd:90:61:fa:ce:61:94:2e:31:d3:2a:63:3c:
9e:6d:07:8b:ce:37:38:7d:dc:cb:0e:e0:c4:9c:5e:
77:57:f7:04:13:0b:29:a9:12:08:36:aa:e2:67:3b:
f0:3d:e8:46:52:e3:d4:63:5b:57:0e:5b:f1:6a:b9:
13:9d:28:27:69:83:b0:5e:4b:6b:2e:ba:d4:75:6e:
2d:ca:06:0d:41:55:91:57:2f:85:e7:85:b5:34:b5:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A3:BC:3B:D4:58:E1:0C:8A:AD:D2:FE:A1:B2:31:0A:41:09:7E:9D
X509v3 Authority Key Identifier:
keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/LKO8O9RY4QyKrdL-obIxCkEJfp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:cf:df:1c:35:47:f0:e7:3d:49:6e:67:24:d6:f1:82:8e:
04:72:d6:a3:20:7d:5e:47:47:c7:85:dc:6f:c5:e2:28:9d:bb:
41:a0:a0:04:da:a3:cf:a1:cf:18:d9:d7:a4:cd:68:82:ce:7a:
9c:80:9e:01:97:a2:42:b3:1e:d1:f1:8e:38:7b:46:19:d1:a9:
5e:53:af:a4:bf:79:6e:d0:ff:93:9a:46:a2:22:f4:fc:6c:9b:
62:35:f0:60:04:72:bd:f0:0c:cf:04:7f:c1:a1:69:6f:72:d1:
20:e0:c3:e9:97:e6:3a:42:f1:87:12:21:61:4d:ba:34:81:12:
07:96:37:fe:d3:97:d9:f5:87:86:17:de:51:94:f9:ee:cd:73:
a8:9b:8a:47:2e:96:ef:59:2b:d4:75:f9:97:89:82:46:43:b7:
a6:b1:45:97:66:e3:1d:57:cc:64:a6:b2:bd:a1:55:2d:d7:e9:
dd:06:6f:90:ba:30:dd:18:a4:12:4b:1c:3c:6f:8a:59:b8:09:
fd:c1:42:df:bb:31:90:cd:4c:af:8d:3b:97:57:09:82:b0:2a:
00:e7:36:52:54:db:0e:ef:d2:39:12:56:90:26:4c:d2:1f:72:
72:1b:64:b4:c6:f8:fd:22:d4:cc:cb:c3:a0:2a:90:64:42:58:
84:3c:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org