Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/SZbW2erWm--j69-psg-V46ypjRo.roa
File: SZbW2erWm--j69-psg-V46ypjRo.roa (raw, json)
Hash identifier: EZ8DCWMIDVGiE0UmLFqTzhWGK9t4CB3uaHkF5rT7SgQ=
Subject key identifier: 49:96:D6:D9:EA:D6:9B:EF:A3:EB:DF:A9:B2:0F:95:E3:AC:A9:8D:1A
Certificate issuer: /CN=fe218a871296c25a77d7e0a6d3d48c43c6aa95a1
Certificate serial: 041C1BAF
Authority key identifier: FE:21:8A:87:12:96:C2:5A:77:D7:E0:A6:D3:D4:8C:43:C6:AA:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iGKhxKWwlp31-Cm09SMQ8aqlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/SZbW2erWm--j69-psg-V46ypjRo.roa
Signing time: Wed 08 Jun 2022 06:14:02 +0000
ROA not before: Wed 08 Jun 2022 06:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25091
IP address blocks: 212.102.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68950959 (0x41c1baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe218a871296c25a77d7e0a6d3d48c43c6aa95a1
Validity
Not Before: Jun 8 06:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4996d6d9ead69befa3ebdfa9b20f95e3aca98d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:f6:33:a8:60:e2:fd:6c:c3:85:2a:fc:c2:
59:32:5c:af:37:62:8f:2f:4d:cb:f6:6d:77:f9:ff:
b9:65:62:ca:3c:d1:6d:46:5c:de:ce:bf:80:df:6f:
52:10:69:76:6a:a8:4a:91:49:f9:6d:28:e5:b4:2e:
cd:80:3d:e3:f0:3d:08:b1:57:86:dd:2f:81:8e:32:
20:d1:0f:5e:6c:4b:72:ef:6e:97:fd:18:54:70:bb:
51:4d:9f:de:e6:57:0a:aa:02:60:47:30:82:49:47:
3f:fd:31:3d:3e:31:7f:15:13:c8:08:7d:35:fe:20:
b2:6b:a5:61:a9:41:55:ab:02:3c:30:bd:b9:f1:13:
1a:ac:91:b9:f7:b8:df:18:f4:b0:a5:ee:a0:d9:f6:
71:6a:07:8b:12:96:c0:64:ce:94:6b:1d:7f:03:a3:
d0:c6:12:b5:fc:02:7b:eb:b7:55:d1:53:34:02:08:
de:b3:a8:b4:f9:0d:07:13:9e:07:de:08:a8:fb:72:
c7:4c:d1:56:86:e4:39:5e:45:a9:e3:ff:5f:af:19:
63:bd:e9:7c:15:00:f1:d4:bd:a0:78:a0:58:05:3d:
2e:19:4e:95:6e:e6:1e:ae:be:eb:fa:fc:6f:10:b5:
fb:f4:62:8b:c9:49:42:1c:3c:36:ea:79:c2:76:c7:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:D6:D9:EA:D6:9B:EF:A3:EB:DF:A9:B2:0F:95:E3:AC:A9:8D:1A
X509v3 Authority Key Identifier:
keyid:FE:21:8A:87:12:96:C2:5A:77:D7:E0:A6:D3:D4:8C:43:C6:AA:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iGKhxKWwlp31-Cm09SMQ8aqlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/SZbW2erWm--j69-psg-V46ypjRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5d9ed0-a204-4550-99fd-8f4edd6cb4d0/1/_iGKhxKWwlp31-Cm09SMQ8aqlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ca:16:86:91:f5:87:1b:a1:96:79:90:3d:5f:77:9f:e0:d5:
11:23:f7:c2:77:d2:b0:3d:fc:0e:c4:70:bc:07:c3:68:8f:b8:
ec:4e:80:57:e3:34:a2:2e:95:38:48:6e:0e:a6:d8:02:af:94:
3b:ca:7f:88:94:c4:81:16:85:1a:b5:16:e4:b9:b3:09:0a:43:
51:83:72:3f:36:03:74:c6:aa:c4:45:2f:19:9c:14:35:fd:7a:
2b:7d:b0:1a:45:7a:29:90:54:d8:c3:9e:67:f1:61:d1:8c:95:
87:69:d7:5e:0c:94:ec:6f:08:4c:f2:5b:70:94:c1:e0:de:ed:
69:72:f7:42:be:92:68:78:03:df:d5:49:46:22:2a:f4:50:e7:
27:19:34:93:2a:96:a9:19:56:a7:1d:14:de:bf:74:5c:5d:b4:
62:fb:91:89:91:a7:f1:ba:e5:c3:0b:6b:e5:f7:b7:1b:5a:9b:
48:91:38:b1:79:7a:1a:0d:e0:72:1b:45:35:07:d0:a9:2f:de:
99:ca:7a:67:ae:a1:7f:b4:cc:ef:bf:5d:0d:ba:3b:eb:0e:57:
c6:e7:3e:c1:0e:2b:fe:23:18:2f:55:c1:89:42:55:04:89:df:
bd:80:39:e2:d4:17:32:0f:64:17:40:ed:c8:f5:39:13:7a:35:
21:c4:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:13 2024 by rpki-client on console-ams.rpki-client.org