Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/oDHFiNbbSKo36awhVUGthQw_heU.roa
File: oDHFiNbbSKo36awhVUGthQw_heU.roa (raw, json)
Hash identifier: rzxiPokIEM5BLXJlbuH3onXG75I5IRPb0eX+cDEVdoE=
Subject key identifier: A0:31:C5:88:D6:DB:48:AA:37:E9:AC:21:55:41:AD:85:0C:3F:85:E5
Certificate issuer: /CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
Certificate serial: 018572D5A97BE0B8FCF5B1B9A8816287EB8E
Authority key identifier: FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/oDHFiNbbSKo36awhVUGthQw_heU.roa
Signing time: Mon 02 Jan 2023 14:14:43 +0000
ROA not before: Mon 02 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.52.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:a9:7b:e0:b8:fc:f5:b1:b9:a8:81:62:87:eb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
Validity
Not Before: Jan 2 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a031c588d6db48aa37e9ac215541ad850c3f85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e6:47:5d:6b:4a:7a:44:77:c3:07:04:93:80:
f7:fa:80:1d:03:c2:4e:15:75:e6:13:e1:f9:aa:b0:
35:25:4e:ce:0a:fd:a3:16:82:1c:8e:ec:90:d4:e0:
a5:bd:e4:be:af:88:88:c4:c9:60:dc:2f:c5:eb:64:
05:87:f8:8a:69:4a:42:50:b1:b1:f2:c4:14:70:28:
b9:b1:b7:3e:73:08:41:62:81:cf:f3:69:0b:ec:3a:
6c:4e:ac:3a:24:ab:e4:a1:76:ee:a2:60:2b:75:08:
a9:4a:41:cb:98:23:93:1c:5c:23:cb:0f:c2:3a:15:
d7:2f:5e:bb:2d:05:84:18:4b:cd:64:bc:36:0a:76:
75:9d:13:b4:62:7b:3a:9f:b2:bd:bc:41:7e:e7:ba:
41:c3:07:d6:9e:23:2e:27:73:52:4d:b1:d9:ab:af:
e6:10:d7:e0:04:71:ec:45:3f:72:8e:37:4e:ce:2d:
bc:55:2a:75:7e:a7:fe:e3:80:81:4c:a0:df:81:67:
13:d4:25:97:35:c1:b3:02:f4:af:e0:43:c7:04:75:
1f:21:8e:5b:5b:e4:e2:93:56:53:a6:c1:3d:ad:0f:
6b:24:15:1c:ca:c3:aa:0f:d8:ba:a0:71:fd:5c:ba:
0e:91:5b:6f:fe:25:fb:aa:96:ac:22:eb:8a:4f:63:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:C5:88:D6:DB:48:AA:37:E9:AC:21:55:41:AD:85:0C:3F:85:E5
X509v3 Authority Key Identifier:
keyid:FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/oDHFiNbbSKo36awhVUGthQw_heU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.30.0/24
Signature Algorithm: sha256WithRSAEncryption
25:aa:45:0a:ec:1f:63:be:6c:03:99:2c:95:1b:16:21:96:d0:
c4:c6:e8:02:34:4e:6b:88:56:97:ce:83:49:61:4a:2f:e7:f9:
b7:f4:1c:fe:76:3f:17:28:0f:31:57:53:81:63:4b:15:76:0c:
c9:73:6d:8e:11:1b:a9:30:4b:d7:e4:64:df:dd:b6:00:3f:b5:
6f:06:12:56:cd:56:3b:59:7f:96:b7:93:c3:e2:2f:50:4a:71:
55:88:55:8f:87:6e:1c:52:a7:71:9b:c3:02:17:58:b6:51:50:
c5:97:55:66:74:06:94:41:09:4c:25:a8:9d:22:b0:77:66:fa:
e6:3e:94:75:07:e3:74:cb:33:83:64:42:ae:d2:53:fd:2e:6e:
8b:7d:0e:d3:90:c1:16:8e:f2:a9:b5:02:f2:18:b1:b1:4f:ff:
db:93:93:cb:4c:ec:13:07:93:8a:a8:11:20:c6:4d:3b:36:5d:
13:fd:61:51:94:1e:16:24:7c:be:cf:c1:82:95:b9:8f:61:ea:
b2:7d:c6:f9:97:f2:f4:fc:a2:31:fa:86:14:f4:7d:98:93:b2:
8f:f1:f6:e6:7e:a0:2d:e2:3c:c9:cb:a9:cf:7d:73:41:55:23:
0b:e4:f4:01:2a:f1:05:0a:18:c1:68:2f:e2:6d:d7:40:c6:0a:
4c:87:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:27 2025 by rpki-client