Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O1TY2PRQgVTWBvgM3yhwZ0RUqDQ.roa
File: O1TY2PRQgVTWBvgM3yhwZ0RUqDQ.roa (raw, json)
Hash identifier: bJcZqnN7o8CeufuyC7KGG1besxJ0IPJ3SdEl3tAAekI=
Subject key identifier: 3B:54:D8:D8:F4:50:81:54:D6:06:F8:0C:DF:28:70:67:44:54:A8:34
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0183385AAD6285949C7199A00618FAB1FAA8
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O1TY2PRQgVTWBvgM3yhwZ0RUqDQ.roa
Signing time: Tue 13 Sep 2022 19:36:50 +0000
ROA not before: Tue 13 Sep 2022 19:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 212.2.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:5a:ad:62:85:94:9c:71:99:a0:06:18:fa:b1:fa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Sep 13 19:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b54d8d8f4508154d606f80cdf2870674454a834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:c4:d1:a1:ad:27:60:f9:7a:f0:88:92:ab:
1f:46:19:4c:18:04:01:cd:7e:07:a6:db:71:92:e1:
e5:56:9e:54:ab:c2:e6:dd:6c:f7:5c:92:f9:b5:00:
80:6d:80:a9:55:55:a8:c4:d1:a6:8d:6a:96:ca:60:
23:6e:83:40:de:78:39:78:12:c1:d5:ba:29:7b:a9:
1c:8a:28:95:d8:ae:d1:2b:d4:21:f5:9f:fe:ad:4c:
56:b1:84:ed:ba:fe:7b:a6:1b:e4:55:89:9a:8b:43:
c6:21:c1:1f:ca:ec:74:dc:12:bb:b3:41:25:b0:59:
a2:1e:26:0c:25:67:11:31:8e:2e:9b:ac:79:55:78:
ea:2d:eb:6c:c3:4b:b7:e7:7d:09:05:ae:a5:4f:ab:
f1:28:a4:aa:c7:47:f7:31:7b:ad:0d:90:44:df:d6:
93:83:ef:ea:8d:40:29:f0:5f:94:4c:ba:7e:59:f3:
aa:49:8d:e8:11:43:63:76:ef:68:5e:c8:82:4d:93:
2a:3f:f7:33:22:4a:23:31:df:77:7c:b8:40:f2:e6:
f7:07:fa:b9:96:c0:32:dc:a2:f5:73:6e:85:81:63:
49:22:38:83:94:fb:f6:62:cd:e4:d2:00:45:38:c6:
e4:3c:4b:d7:b1:d0:ac:6e:c9:3f:9b:9e:69:89:c9:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:54:D8:D8:F4:50:81:54:D6:06:F8:0C:DF:28:70:67:44:54:A8:34
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O1TY2PRQgVTWBvgM3yhwZ0RUqDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8b:52:6e:1f:f5:1a:81:2a:46:3f:a4:e0:9f:16:46:9d:d1:
78:ec:c1:ac:8a:fc:3b:8c:0f:df:c5:ad:6e:39:d9:36:fc:2d:
fb:d5:8c:98:54:88:66:81:69:ce:94:23:01:46:cb:c0:fc:66:
2b:eb:18:de:f2:5d:55:97:ce:0d:bb:0f:ac:0c:da:e0:e8:f8:
25:32:27:86:e5:61:7e:df:1e:46:04:78:ed:a4:0d:8c:62:ee:
ab:79:c2:4b:0d:4d:de:c5:cd:1d:2a:de:92:86:74:e1:33:4f:
91:37:5c:01:2b:b9:03:29:63:c9:85:d0:ef:3d:6f:4b:f9:64:
e0:e3:6e:92:2a:08:57:4d:7c:04:44:b3:ee:97:f7:93:d4:62:
cc:fe:95:40:5b:15:b5:01:b9:86:8f:de:b4:f2:30:8b:b4:9e:
04:fe:af:60:8a:b7:36:38:32:d2:f7:76:1e:bc:2b:18:11:c8:
96:0e:09:5f:f2:cc:c9:71:49:b3:b5:fe:38:46:ed:2c:98:ac:
b4:c6:36:c2:17:e9:bd:3b:4f:23:0c:b0:0d:b3:71:89:05:6c:
b6:80:18:db:03:52:67:69:38:89:fd:cd:76:14:64:01:23:0f:
52:c1:09:b3:9e:29:73:72:af:d7:92:31:b2:0c:c8:1d:cd:53:
28:24:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:01 2025 by rpki-client