Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O7wdbJKXQ75My-C4icdLkFtHJGo.roa
File: O7wdbJKXQ75My-C4icdLkFtHJGo.roa (raw, json)
Hash identifier: bCjq0gJNEBmnNaO5b8QlkJtNwgMLQut0bu2hJjl4bOg=
Subject key identifier: 3B:BC:1D:6C:92:97:43:BE:4C:CB:E0:B8:89:C7:4B:90:5B:47:24:6A
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0181ED5799A21D4DC1D2AC07D51FE680DAE7
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O7wdbJKXQ75My-C4icdLkFtHJGo.roa
Signing time: Mon 11 Jul 2022 12:59:09 +0000
ROA not before: Mon 11 Jul 2022 12:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 212.2.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:57:99:a2:1d:4d:c1:d2:ac:07:d5:1f:e6:80:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 11 12:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bbc1d6c929743be4ccbe0b889c74b905b47246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:dd:62:f3:08:1a:0f:7d:ef:e8:00:61:44:
83:04:ed:5c:ec:ac:ef:aa:af:1a:00:87:9c:5e:42:
63:48:f6:1d:5b:34:00:74:bc:22:ce:e8:8c:99:02:
0b:92:c1:7d:11:ae:d2:4d:73:b9:d4:fd:12:26:34:
4c:38:cb:57:43:5b:58:6d:b8:0b:52:af:8e:43:7f:
4f:76:e5:20:81:67:1e:e7:73:78:85:5a:cb:97:3d:
c7:24:d7:f8:81:50:30:01:08:b4:60:c2:00:c0:0d:
79:4d:94:8a:9d:5d:cf:52:dd:a1:0c:86:e0:ff:bb:
36:0b:eb:c8:ac:0c:5e:f1:e2:f6:9e:50:05:2a:73:
ec:54:e3:e0:18:52:aa:f4:51:e7:c1:87:ad:8f:85:
86:9c:6a:b7:d0:a0:79:9c:b3:6d:4d:1a:28:21:c0:
f4:8c:01:e3:7c:37:4a:e2:d5:0c:64:18:66:02:d4:
78:15:8f:1f:bb:a7:92:17:f1:19:3c:8a:61:4e:80:
1f:2c:66:34:9f:37:96:1c:a4:52:96:3e:e7:91:37:
20:1c:57:49:2d:3c:3b:c4:da:94:4d:b0:3e:d0:2a:
24:2f:b7:63:e0:11:a5:09:6a:f2:d4:78:88:c0:8d:
83:ae:70:d3:d7:8c:1e:b3:73:6e:9c:5b:90:f7:73:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:1D:6C:92:97:43:BE:4C:CB:E0:B8:89:C7:4B:90:5B:47:24:6A
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/O7wdbJKXQ75My-C4icdLkFtHJGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:2a:66:5e:39:b8:ee:8e:e2:b5:df:d3:cf:49:28:e1:0f:c2:
c8:46:61:20:fc:af:0b:a6:5b:0f:0b:78:d2:b4:ea:b1:a9:0f:
76:71:99:5e:4c:59:7a:2a:a9:05:9a:e0:88:32:0c:c0:d9:0a:
93:0c:0a:3a:00:ec:bf:9b:3d:1e:7c:bf:59:d9:87:b2:1e:a6:
9e:5c:ae:f7:fa:e6:de:2b:9a:bc:11:35:47:a1:53:ec:56:26:
29:29:d5:92:e7:4a:46:68:77:df:49:1a:eb:37:90:a0:45:4f:
bb:88:31:39:94:6f:55:29:aa:e7:a7:5d:6b:e5:df:ca:03:7d:
e3:e2:93:db:27:0c:73:4e:a4:df:65:38:01:63:e1:22:16:24:
00:29:d0:e9:20:9d:68:89:ee:af:eb:db:ae:f3:bb:74:59:d2:
05:26:4d:6a:49:62:5c:6b:9b:08:8f:d2:4e:b5:71:d4:fc:aa:
5b:df:d1:72:92:68:36:bb:f3:6a:fa:4c:14:cd:a8:9f:5a:58:
c5:b3:af:b1:c6:10:11:18:da:af:79:f8:4b:8e:c3:b2:f5:f4:
b2:43:80:46:5e:e7:d2:80:3c:ed:75:b1:6c:6b:57:a0:b4:85:
42:3b:4a:65:eb:cd:df:11:c5:ee:4d:46:a4:8d:8c:b3:32:6a:
2f:8b:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org