Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/5O4McuCZ_AJ1vsHDP6oYy9CrMQ0.roa
File: 5O4McuCZ_AJ1vsHDP6oYy9CrMQ0.roa (raw, json)
Hash identifier: /NmbNVHlwCq/XajOy22ooCW0p9L+tUQwncBhKMkyIkA=
Subject key identifier: E4:EE:0C:72:E0:99:FC:02:75:BE:C1:C3:3F:AA:18:CB:D0:AB:31:0D
Certificate issuer: /CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Certificate serial: 01857371898F13BFD3077AAF99222CFD1A64
Authority key identifier: 6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/5O4McuCZ_AJ1vsHDP6oYy9CrMQ0.roa
Signing time: Mon 02 Jan 2023 17:04:58 +0000
ROA not before: Mon 02 Jan 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:89:8f:13:bf:d3:07:7a:af:99:22:2c:fd:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6deedc2210677512b9d728a891c1f2451d3d46aa
Validity
Not Before: Jan 2 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ee0c72e099fc0275bec1c33faa18cbd0ab310d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:c6:70:e2:0f:d0:89:3d:db:3d:80:3a:eb:
f4:d5:50:b0:d4:21:ed:ee:0e:cc:17:ce:0e:29:1e:
4d:ac:8a:4d:43:1f:14:e4:7d:42:3b:e5:71:ca:3b:
b4:4e:39:3e:cc:bd:a4:98:47:c0:61:38:63:e4:5f:
0f:96:79:d2:a8:f6:3d:56:06:77:00:c9:6a:51:a9:
d1:a8:1f:67:64:20:b9:44:f0:eb:47:2b:52:62:7d:
06:1f:4a:9d:58:c3:0a:25:73:dd:ae:a1:f6:67:b0:
90:6b:2a:8e:f4:26:1c:bc:f5:b9:3a:db:ff:da:c6:
5f:cd:62:15:f9:91:04:a3:dc:94:1a:40:56:84:7c:
5e:0f:9d:d2:32:65:bb:0d:e8:76:1e:a8:2f:43:b2:
39:66:e5:12:09:40:b9:86:7c:7f:6f:bd:78:eb:46:
24:2e:d7:5c:6d:a9:86:b4:3b:f6:e4:e8:ad:63:18:
8f:b7:aa:3b:07:29:3e:cd:66:cc:7a:f9:f6:22:88:
73:b8:a4:20:82:c5:44:bc:64:05:72:05:aa:c9:6c:
96:d6:58:9b:49:7e:c6:0b:82:c1:0e:c2:06:96:b5:
82:bc:df:eb:98:a6:66:18:fd:5c:23:36:04:05:77:
39:23:89:a0:45:6b:21:d6:48:4f:a0:c8:78:c8:4b:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:0C:72:E0:99:FC:02:75:BE:C1:C3:3F:AA:18:CB:D0:AB:31:0D
X509v3 Authority Key Identifier:
keyid:6D:EE:DC:22:10:67:75:12:B9:D7:28:A8:91:C1:F2:45:1D:3D:46:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7cIhBndRK51yiokcHyRR09Rqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/5O4McuCZ_AJ1vsHDP6oYy9CrMQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/70f985-ce2a-481a-bc5d-83dcba2503d0/1/be7cIhBndRK51yiokcHyRR09Rqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f4:76:c5:36:bc:31:a9:d7:a4:dc:34:af:1e:54:37:9c:08:
05:24:d0:3e:f8:67:3c:c1:e8:2b:52:3a:9a:32:45:60:01:23:
74:21:7e:43:a2:f9:02:16:02:95:35:29:c2:bc:37:9f:c3:f9:
6b:7f:9b:03:e3:f2:fa:c8:c9:21:16:30:4c:21:9c:60:66:b0:
c2:6b:a3:27:4f:c3:49:bf:42:93:27:f3:31:8a:38:9f:fb:c2:
21:6e:ca:31:64:df:79:2f:76:9f:b5:22:fc:eb:84:00:db:05:
16:6e:83:f0:65:83:07:cd:fb:e3:d2:06:32:ea:59:bd:02:ff:
6a:6f:7c:50:10:b1:04:ee:67:dc:f7:ad:1f:c7:ba:c4:dd:58:
03:5d:c1:95:a7:82:e9:4e:7f:33:14:68:12:de:90:b5:68:c3:
e0:cc:0d:63:e1:df:d5:c9:3b:80:47:f9:7e:39:c4:c7:29:33:
bf:96:b5:5f:63:fa:4e:cd:99:4e:96:7f:7d:96:7c:5e:c6:ab:
fd:34:ab:7c:54:7d:64:bc:f3:9c:7a:3e:26:02:d5:af:75:4e:
67:d3:6c:ef:ae:f3:de:f3:5a:66:7a:71:ad:85:bc:28:e7:8c:
0f:23:eb:f9:c8:0d:84:a4:39:5d:e0:16:40:d3:d8:64:4c:55:
45:73:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org