Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/_yinw0XBW3KmI_T1E3gI_gjCCGk.roa
File: _yinw0XBW3KmI_T1E3gI_gjCCGk.roa (raw, json)
Hash identifier: Ivw/FE4iE5t3cPoilypkPWPYwjrQuTrOKVn9n0rfC3g=
Subject key identifier: FF:28:A7:C3:45:C1:5B:72:A6:23:F4:F5:13:78:08:FE:08:C2:08:69
Certificate issuer: /CN=aa3a91c36754d7865db93986322f251d141abbee
Certificate serial: 018570C2CEF84D771A9C5920D7051B158A4A
Authority key identifier: AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/_yinw0XBW3KmI_T1E3gI_gjCCGk.roa
Signing time: Mon 02 Jan 2023 04:34:53 +0000
ROA not before: Mon 02 Jan 2023 04:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20693
IP address blocks: 212.111.96.0/20 maxlen: 20
212.111.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:ce:f8:4d:77:1a:9c:59:20:d7:05:1b:15:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3a91c36754d7865db93986322f251d141abbee
Validity
Not Before: Jan 2 04:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff28a7c345c15b72a623f4f5137808fe08c20869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:9d:5b:76:b6:16:47:86:b1:b7:c2:de:a8:
56:c8:3b:d5:91:bd:77:12:90:de:c1:52:28:1f:61:
00:1e:5d:af:a6:8d:c2:b6:8f:8b:24:33:95:ac:ca:
70:25:1f:49:d2:8f:09:89:71:b2:eb:95:ea:ad:02:
48:47:03:fe:e0:db:21:59:e8:1d:ab:b5:80:dd:8a:
9e:45:f6:df:56:95:a1:fc:31:c6:39:70:76:4e:c4:
53:38:9c:07:83:19:4d:1e:1d:fc:a8:b4:90:a4:f8:
1b:ae:6c:d1:51:38:ea:d1:11:cb:a0:12:77:63:1f:
4f:7b:56:d0:4b:2a:d5:4f:37:84:ff:3d:99:d9:c7:
5d:34:d7:0e:49:41:5a:37:49:94:52:c7:d3:eb:ba:
b3:ab:1c:31:16:61:25:38:73:4d:ad:a9:75:87:e0:
2d:6b:bc:b5:e0:c6:e0:43:ea:71:ad:67:b4:a4:a6:
80:6b:d8:cf:e4:8a:4f:93:4c:b0:0b:21:fd:a1:82:
5e:77:07:aa:6a:0b:09:43:b1:da:01:4e:d0:60:c5:
b1:ae:c4:d7:8e:a6:5c:dd:34:70:e8:13:c6:45:a9:
e0:ca:6d:ab:98:c5:a2:ea:c1:dc:b5:24:e6:99:ac:
c7:89:a4:7f:15:77:8a:78:40:63:69:95:b6:cd:19:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:A7:C3:45:C1:5B:72:A6:23:F4:F5:13:78:08:FE:08:C2:08:69
X509v3 Authority Key Identifier:
keyid:AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/_yinw0XBW3KmI_T1E3gI_gjCCGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.96.0/20
Signature Algorithm: sha256WithRSAEncryption
65:1c:1b:36:aa:95:e4:a4:4e:ce:eb:7b:c9:91:2a:0b:c6:85:
0e:b5:d9:8b:5b:19:ea:38:9c:a8:fd:d4:4a:6d:52:69:96:e5:
44:06:b3:88:95:32:7d:e4:ea:36:75:94:fa:35:78:c2:9e:8f:
a5:a8:85:f2:d6:c4:ff:29:41:cd:1a:45:8c:48:d4:99:f5:c5:
af:d0:08:78:30:81:eb:1c:19:09:1f:c5:58:fc:9a:54:75:44:
49:81:ab:7d:9e:c2:ef:ec:f8:1d:e7:e1:08:75:ca:8a:4f:fa:
c6:be:55:2e:19:6b:45:6d:5d:6a:c0:3d:98:d5:6f:f8:38:35:
a0:14:b8:9a:b6:cb:7a:6d:99:43:22:42:9b:50:10:11:9e:f1:
50:3b:1d:a9:78:2f:32:39:3e:3e:93:45:47:99:f9:fe:3d:ed:
da:18:ef:2a:a5:cd:97:86:28:f2:b8:64:36:5e:9f:87:3e:67:
15:8f:70:93:67:6a:22:ae:4c:9a:11:90:da:f7:e8:be:a5:d9:
40:13:76:29:6e:05:1e:ed:aa:ea:88:d8:de:ee:44:bd:95:89:
1d:64:8b:32:a6:68:ba:77:6f:fa:ad:de:82:d7:e5:ce:3e:b2:
d5:a5:ce:8b:df:5c:0e:bb:cf:af:78:f8:7f:6b:a0:96:fa:d0:
b4:74:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org