Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/vEy8dC6L7wMUwOp9uunL8k68lGM.roa
File: vEy8dC6L7wMUwOp9uunL8k68lGM.roa (raw, json)
Hash identifier: r5bQcOSIDaiOLCGKbk1EqbvzXRQyug4DMd8xXfZZE0w=
Subject key identifier: BC:4C:BC:74:2E:8B:EF:03:14:C0:EA:7D:BA:E9:CB:F2:4E:BC:94:63
Certificate issuer: /CN=dd9261fe07545d893fadb09996691f3cb0757d51
Certificate serial: 01870E1AB96E0A8238E6EDBD0EA97AC4AA78
Authority key identifier: DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/vEy8dC6L7wMUwOp9uunL8k68lGM.roa
Signing time: Thu 23 Mar 2023 10:54:05 +0000
ROA not before: Thu 23 Mar 2023 10:54:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 212.52.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:1a:b9:6e:0a:82:38:e6:ed:bd:0e:a9:7a:c4:aa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9261fe07545d893fadb09996691f3cb0757d51
Validity
Not Before: Mar 23 10:54:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4cbc742e8bef0314c0ea7dbae9cbf24ebc9463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:d0:6b:fa:71:db:8b:4e:b5:27:84:31:f2:
c4:e1:27:a3:5d:d1:bc:ed:93:ab:2c:7d:27:b4:64:
a6:b9:b2:78:48:f8:62:0c:c7:93:e3:52:a4:18:67:
34:85:2e:f4:86:3e:b7:1b:97:13:9e:66:ea:fa:5c:
12:6b:2b:23:99:bb:81:bb:5f:1f:38:f9:13:e2:30:
af:0f:c3:b9:36:ad:f2:0d:7a:71:c8:0a:f2:37:55:
53:56:30:8c:61:51:a6:d8:cd:3d:bb:9a:2b:35:4c:
3c:0f:93:35:23:5a:8d:2c:ee:c1:e6:38:eb:27:b6:
d0:6a:3d:f7:1d:b2:db:05:22:c3:8b:59:d9:51:74:
f3:47:27:7a:96:6d:fb:eb:29:a6:be:d6:27:dd:62:
3c:56:0c:16:28:44:aa:f4:13:b7:32:13:f7:43:06:
15:ec:02:be:a3:01:85:d3:cc:ee:a2:14:75:bc:65:
ff:1b:ee:7b:92:fa:d1:50:e2:84:bf:63:19:97:e0:
ae:44:83:b2:42:26:7b:6b:d8:ed:9e:f1:69:ba:58:
5d:92:4f:ae:ed:9b:f2:77:0e:b5:f3:2c:27:2a:c6:
66:89:3d:69:05:e1:b2:dc:ee:97:6f:15:19:1c:6c:
b8:e7:f9:ec:2e:b9:1d:4c:3a:8f:a9:40:d2:85:d9:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4C:BC:74:2E:8B:EF:03:14:C0:EA:7D:BA:E9:CB:F2:4E:BC:94:63
X509v3 Authority Key Identifier:
keyid:DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/vEy8dC6L7wMUwOp9uunL8k68lGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.1.0/24
Signature Algorithm: sha256WithRSAEncryption
56:41:68:dc:c5:85:76:04:a3:5f:11:1a:e2:7e:07:60:eb:70:
cb:2c:4c:cb:52:c6:b9:60:1b:40:1b:3b:33:08:97:58:d0:e9:
9c:71:c4:0b:09:d5:b9:fa:89:cd:cd:6c:e9:da:0c:3a:e4:05:
36:72:ab:7e:21:72:c7:26:c5:44:d4:8e:24:e0:be:96:6d:17:
75:bc:ed:4c:f1:91:ac:4e:36:fd:9d:17:80:bd:cd:ec:78:f9:
99:ef:39:9f:3c:c4:2a:c0:e4:6c:38:53:64:09:f2:19:b2:ad:
ff:89:7f:d1:62:60:7e:ef:84:56:92:dd:5c:f5:25:b1:84:9c:
09:6f:96:f3:78:de:65:c9:1e:7c:76:1f:31:1c:f3:da:d3:93:
54:89:e2:9b:15:7f:53:47:c2:50:e9:54:48:63:44:95:26:c3:
52:0a:e4:24:c8:5c:9c:44:ae:db:d8:5c:86:bd:8c:16:76:94:
83:16:ab:e4:62:48:01:97:7a:1a:95:6b:be:89:52:21:2a:a2:
bd:36:b6:9b:41:01:00:30:5b:8b:13:20:66:3a:3d:8a:b1:43:
f5:30:fb:d4:5b:7f:e3:d4:6d:a7:fe:41:72:a0:94:ce:2e:75:
05:86:81:cb:f2:ed:67:9f:b7:be:4e:96:df:38:fe:73:fd:bd:
c9:b2:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:54 2024 by rpki-client on console-ams.rpki-client.org