Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6d439c-38eb-408e-8e28-dbfa471fd376/1/Om8Mcru9V6DYmvA5a2qxW1ABNEc.roa
File: Om8Mcru9V6DYmvA5a2qxW1ABNEc.roa (raw, json)
Hash identifier: RLCyZ4EHkqCmsTKvPOcgcjjJmvXidVADm9cQuiGkXpY=
Subject key identifier: 3A:6F:0C:72:BB:BD:57:A0:D8:9A:F0:39:6B:6A:B1:5B:50:01:34:47
Certificate issuer: /CN=f1c25192fcdf4dd134dd39d54321ad49362fc290
Certificate serial: 018964C04F1A21865B76DBF54BDFC3D67716
Authority key identifier: F1:C2:51:92:FC:DF:4D:D1:34:DD:39:D5:43:21:AD:49:36:2F:C2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cJRkvzfTdE03TnVQyGtSTYvwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6d439c-38eb-408e-8e28-dbfa471fd376/1/Om8Mcru9V6DYmvA5a2qxW1ABNEc.roa
Signing time: Mon 17 Jul 2023 16:47:51 +0000
ROA not before: Mon 17 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 212.18.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:4f:1a:21:86:5b:76:db:f5:4b:df:c3:d6:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c25192fcdf4dd134dd39d54321ad49362fc290
Validity
Not Before: Jul 17 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a6f0c72bbbd57a0d89af0396b6ab15b50013447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:02:5e:00:12:4c:8f:20:74:ba:c5:af:6a:
2a:20:ae:2e:18:3c:bc:a1:c7:1f:6f:86:85:f0:11:
ce:97:82:82:46:ae:53:4e:7e:02:99:d9:0e:94:2a:
0f:28:df:70:af:cf:59:5c:15:5f:fb:0c:82:e7:cf:
a8:17:e1:22:39:bb:c9:c0:c0:d6:7a:04:99:1f:93:
01:3e:a5:d4:71:a7:8b:04:0e:5f:a2:d3:88:81:9a:
eb:0e:f4:3b:49:d6:99:1d:fd:ea:b3:88:44:d4:7d:
71:39:24:e6:e2:0b:13:a0:aa:63:da:9f:a4:33:71:
d7:03:94:96:cb:36:c9:17:99:c1:91:41:65:2c:5b:
36:2e:64:36:d8:89:38:a1:1e:4e:65:07:c9:30:48:
b6:d9:10:4e:d0:3e:0c:c1:e4:66:1c:f0:5d:45:f0:
03:12:48:82:20:e0:1e:53:59:ea:bd:dc:ea:e3:26:
a9:4d:5a:02:a6:1e:da:fd:9b:11:b8:59:b0:54:38:
af:1f:30:20:8e:bf:3f:4f:d2:ff:65:cd:b3:88:43:
c0:a8:bd:4e:50:a1:b5:a5:5e:87:54:ed:43:62:1e:
a2:6d:65:32:0a:13:5a:10:3b:93:cd:22:10:bc:34:
54:a4:3b:29:40:6e:f6:96:d3:0c:25:76:25:92:68:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:0C:72:BB:BD:57:A0:D8:9A:F0:39:6B:6A:B1:5B:50:01:34:47
X509v3 Authority Key Identifier:
keyid:F1:C2:51:92:FC:DF:4D:D1:34:DD:39:D5:43:21:AD:49:36:2F:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cJRkvzfTdE03TnVQyGtSTYvwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6d439c-38eb-408e-8e28-dbfa471fd376/1/Om8Mcru9V6DYmvA5a2qxW1ABNEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6d439c-38eb-408e-8e28-dbfa471fd376/1/8cJRkvzfTdE03TnVQyGtSTYvwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e1:84:e5:04:1c:e0:31:7f:a6:0a:dd:0d:6b:e5:5b:92:30:
ef:32:4d:dc:6e:16:66:fc:0e:d8:ec:b3:70:5d:fb:ed:95:0e:
09:f1:21:18:12:37:96:d9:90:3c:64:f1:7f:07:1c:50:8b:6f:
03:6a:5a:69:39:e9:03:17:9f:81:4c:30:df:c6:01:0d:9a:cf:
3a:67:bf:91:96:01:58:07:32:e6:0b:bd:44:17:e8:45:39:cf:
92:51:2b:1f:ec:0c:de:54:af:9a:70:eb:b1:9d:2c:57:07:87:
22:cd:b4:8f:50:f6:97:db:f0:c3:ec:45:67:63:4d:15:47:a3:
70:21:66:df:b3:cb:38:bd:d1:1b:3b:6c:a4:62:ed:9b:74:a4:
e6:0d:c0:50:b4:65:ac:d6:b1:5a:e6:87:0c:98:61:42:ba:2f:
cf:43:61:50:51:5b:a4:c5:f1:1d:d0:de:ea:1c:f4:39:da:22:
b7:3a:fb:80:55:45:b0:71:c2:e3:de:56:e2:08:63:49:d9:58:
08:3d:12:d9:28:17:89:f6:e7:af:ea:4c:13:d0:37:71:c0:96:
ca:05:b6:ae:70:80:ec:96:32:ad:bd:f7:0a:84:48:98:c0:84:
4e:f5:15:89:b2:c0:47:41:b8:e9:b5:0f:d2:b6:5a:0b:70:7f:
8b:0a:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 09:45:39 2023 by rpki-client on console-ams.rpki-client.org