Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/CL-OPDcBwaII1HZpfNscvtY8On0.roa
File: CL-OPDcBwaII1HZpfNscvtY8On0.roa (raw, json)
Hash identifier: iIaFILPDZAWJxbC91G6DukakKZERUI3v93qzrYKt7U0=
Subject key identifier: 08:BF:8E:3C:37:01:C1:A2:08:D4:76:69:7C:DB:1C:BE:D6:3C:3A:7D
Certificate issuer: /CN=2c8ae6ecedc54ef6f3c67be6063df33e539fa897
Certificate serial: F4F9D6
Authority key identifier: 2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/CL-OPDcBwaII1HZpfNscvtY8On0.roa
Signing time: Tue 11 Jan 2022 18:24:33 +0000
ROA not before: Tue 11 Jan 2022 18:24:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16054742 (0xf4f9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ae6ecedc54ef6f3c67be6063df33e539fa897
Validity
Not Before: Jan 11 18:24:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08bf8e3c3701c1a208d476697cdb1cbed63c3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:f0:61:a3:81:c5:25:3a:94:7e:12:34:af:
78:f5:bf:5e:97:49:56:86:7f:ba:b2:c7:ce:13:09:
16:54:9b:eb:f7:b8:18:8a:a6:93:b5:16:15:cf:71:
53:08:b2:3e:b7:71:c4:53:73:5f:30:37:ce:f6:46:
e9:3f:ad:9c:e6:7e:f8:2b:dc:54:52:38:f7:4e:be:
80:3b:4a:8c:01:f8:64:c2:0a:88:dc:f4:fc:6d:a2:
ee:af:a8:4a:09:d8:d5:b6:e9:d1:75:fb:17:35:c1:
91:d7:f4:55:5f:4b:0d:b9:80:20:1b:a1:ef:b9:24:
ac:ef:27:3f:d6:6d:c6:9d:4c:e4:35:de:25:4d:69:
0d:1c:e2:e7:80:b6:b9:0b:86:ff:05:62:ae:1d:45:
12:69:0f:0b:da:56:41:87:e9:5d:7d:87:e5:5e:75:
88:26:c4:3d:4d:71:43:20:98:1c:84:9a:96:7d:f1:
07:6a:b8:e9:d6:b1:7a:81:16:03:f6:cd:05:e2:a3:
8c:a8:93:3a:b2:33:10:5d:39:4e:45:3c:8e:d3:41:
69:f0:6f:ca:84:fd:f4:da:ce:7e:73:24:9a:3d:33:
93:c3:08:8a:2b:6a:97:f8:ac:62:05:6c:0c:0b:fe:
a8:47:d6:52:7b:48:9d:b1:9e:ba:8a:3e:45:21:84:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:8E:3C:37:01:C1:A2:08:D4:76:69:7C:DB:1C:BE:D6:3C:3A:7D
X509v3 Authority Key Identifier:
keyid:2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/CL-OPDcBwaII1HZpfNscvtY8On0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/LIrm7O3FTvbzxnvmBj3zPlOfqJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:98:ba:d5:a0:4c:68:81:b9:02:78:37:ab:24:75:44:d8:e1:
98:c4:e5:5d:dc:65:6e:25:89:1d:45:7f:11:20:3d:73:4d:b6:
f2:05:f2:87:60:bf:f7:0d:69:c6:ce:bc:05:c8:4f:61:12:be:
f2:c1:56:54:ac:e8:ad:bd:30:a8:e4:93:c0:36:86:e0:27:66:
82:52:6b:70:bd:33:fc:d3:5d:3b:34:5e:08:6a:29:e9:25:14:
03:57:5e:9c:c9:cc:d3:d1:18:56:f3:c5:bc:21:69:23:e4:f2:
4e:91:aa:1e:c2:1f:b8:11:bc:fe:b9:84:33:79:95:7d:ab:91:
ee:87:e6:b7:a8:b7:f3:03:7a:54:8d:bf:2c:03:b6:5c:cb:77:
b6:ad:14:42:95:91:bc:87:38:cb:38:d4:50:47:f6:79:a6:c4:
3a:8e:83:95:4d:a3:22:94:fc:a0:66:ff:83:56:65:25:48:ba:
a3:60:0b:9d:32:26:e2:7b:5d:7a:65:79:e1:29:2a:26:6f:98:
06:84:ac:37:5f:9e:4b:68:f0:3c:32:b1:38:39:5e:2e:06:c7:
70:2d:88:ee:09:6a:ac:91:76:62:a0:97:c1:0d:6f:9c:24:7a:
ad:0f:54:ae:af:88:5a:27:a9:b3:be:99:6c:35:97:19:9c:0b:
e0:c0:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:48 2024 by rpki-client on console-ams.rpki-client.org