Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa
File: CcqL3JbmY5UiwnYsByO4EvNWcs4.roa (raw, json)
Hash identifier: dnYyH3lDGKBCCmInlna4oR3x17Wzy5RAdjhXSv7KPpY=
Subject key identifier: 09:CA:8B:DC:96:E6:63:95:22:C2:76:2C:07:23:B8:12:F3:56:72:CE
Certificate issuer: /CN=dd9261fe07545d893fadb09996691f3cb0757d51
Certificate serial: 01870E1AB9088E92BC46AE2EE4C3EC020641
Authority key identifier: DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa
Signing time: Thu 23 Mar 2023 10:54:05 +0000
ROA not before: Thu 23 Mar 2023 10:54:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 212.52.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:1a:b9:08:8e:92:bc:46:ae:2e:e4:c3:ec:02:06:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9261fe07545d893fadb09996691f3cb0757d51
Validity
Not Before: Mar 23 10:54:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ca8bdc96e6639522c2762c0723b812f35672ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:78:b5:38:6b:64:04:3a:b3:0d:7a:c6:06:
12:76:80:81:dd:48:3b:33:33:26:63:a9:99:4a:9f:
a2:c2:af:3f:57:aa:a4:67:69:85:73:bf:2e:bf:64:
59:50:bb:ad:d8:d0:94:0f:1e:d2:8a:bd:61:06:6a:
84:76:1a:a5:68:f8:f1:ae:97:40:79:a8:6a:51:4e:
8f:f0:02:e5:d4:0a:58:55:3a:c1:73:48:e4:01:95:
3b:e7:3c:c3:7a:bb:db:01:c7:d6:25:31:05:c3:28:
f3:44:47:41:d3:5f:b4:15:1a:ba:1c:56:a5:ee:82:
a2:f2:6d:75:cf:b9:55:af:30:1e:1a:f8:99:9e:0b:
c9:b6:f1:c5:70:63:89:a6:01:e6:f4:2f:03:8f:22:
49:58:2b:20:3b:e7:49:af:77:bd:82:c2:12:39:e4:
37:de:5b:b4:fc:07:83:04:e8:20:93:10:5b:1f:7a:
f5:56:3e:1d:4d:f1:25:60:82:08:0c:89:d2:d4:08:
91:8d:e9:e3:b8:2e:42:b5:d8:bc:f1:2a:a8:7d:f2:
94:4b:83:0a:e9:e2:5c:c6:4a:91:d4:a0:64:5d:d1:
a9:e6:0f:8b:00:8e:b8:a4:5d:ab:44:6c:66:e4:0e:
0a:ba:a7:46:7f:f1:54:a9:c7:7a:eb:b2:ce:fb:84:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CA:8B:DC:96:E6:63:95:22:C2:76:2C:07:23:B8:12:F3:56:72:CE
X509v3 Authority Key Identifier:
keyid:DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c8:6d:e5:e9:36:fb:91:da:64:ed:89:9b:88:16:54:4f:25:
2c:e3:6f:59:e4:d8:de:ce:a1:31:e0:ee:70:0f:c8:8a:11:f7:
ab:76:a1:ab:62:fe:70:2d:80:82:72:8d:32:66:65:35:cb:78:
06:3c:35:cd:bc:b4:0e:a4:8a:27:58:e3:7f:e5:90:7c:58:1b:
32:ec:c3:be:3a:f6:71:63:9c:40:9c:09:75:17:87:fd:6e:e4:
aa:77:f4:a7:c4:56:6f:07:5c:00:b9:36:82:51:f0:db:b6:45:
42:d4:2e:a2:34:b8:56:1f:b3:69:75:25:ab:b8:ed:7b:30:8b:
b0:a1:0f:fc:37:bc:7c:54:d3:60:f5:d3:1c:c8:3b:7c:fa:64:
44:e0:aa:b2:c2:32:5f:b5:23:54:b3:a3:5e:66:e9:84:05:50:
b7:44:e2:9d:43:df:4c:4a:12:6e:0b:e6:24:37:26:0d:c6:26:
8a:ff:a7:38:da:61:99:7d:a9:76:9c:79:a5:0e:2a:82:8e:4b:
92:82:80:1b:82:b0:08:22:db:d1:7d:1f:dc:44:2d:e8:57:98:
15:27:72:c0:5e:a8:1e:28:50:26:84:fb:18:ff:44:cc:e0:7c:
10:e0:20:94:b8:1d:d8:61:bc:e0:2d:a3:7e:51:a9:0d:30:da:
a7:b5:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:54 2024 by rpki-client on console-ams.rpki-client.org