Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/Od-4AIk0xwI0oil_-UwyOqvNIZA.roa
File: Od-4AIk0xwI0oil_-UwyOqvNIZA.roa (raw, json)
Hash identifier: 5ej11Lo8RhTj1d3z6pY26GsrAjWc8mWddQ6RIbVmgg8=
Subject key identifier: 39:DF:B8:00:89:34:C7:02:34:A2:29:7F:F9:4C:32:3A:AB:CD:21:90
Certificate issuer: /CN=de1b9ca1f3f157d7ff537ed34597f7c33707ccb3
Certificate serial: 018820E18068170D95F3A2CCC2C0703FCA8A
Authority key identifier: DE:1B:9C:A1:F3:F1:57:D7:FF:53:7E:D3:45:97:F7:C3:37:07:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hucofPxV9f_U37TRZf3wzcHzLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/Od-4AIk0xwI0oil_-UwyOqvNIZA.roa
Signing time: Mon 15 May 2023 19:27:09 +0000
ROA not before: Mon 15 May 2023 19:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:e1:80:68:17:0d:95:f3:a2:cc:c2:c0:70:3f:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1b9ca1f3f157d7ff537ed34597f7c33707ccb3
Validity
Not Before: May 15 19:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39dfb8008934c70234a2297ff94c323aabcd2190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:df:62:62:52:40:c1:19:a9:c1:74:d9:66:
70:1d:e8:23:b0:f5:d8:4c:c5:7e:20:58:19:47:7a:
d4:d5:f6:38:5a:db:54:e3:2e:5c:d8:93:83:b6:a7:
b0:f8:3c:d4:e4:f6:53:1c:bf:e0:4c:65:26:5b:5b:
2c:5d:26:bf:bc:50:e1:6f:c0:4c:68:a6:7a:5d:be:
dd:33:30:07:0f:c1:42:d7:16:92:fa:b9:14:81:f8:
ea:c6:4a:0e:3e:a2:13:71:0b:83:ec:9d:4d:fa:62:
98:27:ad:48:57:4e:7b:b4:4f:bf:b3:a4:c6:e9:bc:
31:32:12:24:0e:4b:31:28:96:24:0d:2a:46:41:97:
70:fa:1f:2b:91:ae:35:1d:68:d0:a5:19:16:1a:fd:
59:31:72:84:f6:ca:8b:81:39:53:34:b3:14:8b:90:
9c:99:60:dd:4e:81:3b:ec:d2:0a:d1:d5:23:78:8c:
9a:4e:40:82:93:c1:6a:03:e7:f7:01:ee:ae:ad:a0:
64:1c:1a:cd:04:47:65:3a:ad:04:c4:f8:90:0c:80:
28:b0:38:60:c1:05:ef:98:1a:03:36:72:71:fb:af:
e9:ca:f2:0f:a9:77:5d:57:0a:f2:a6:25:4f:75:3b:
2d:e2:32:f3:79:f5:d8:3e:28:2a:b0:56:0a:ab:67:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:B8:00:89:34:C7:02:34:A2:29:7F:F9:4C:32:3A:AB:CD:21:90
X509v3 Authority Key Identifier:
keyid:DE:1B:9C:A1:F3:F1:57:D7:FF:53:7E:D3:45:97:F7:C3:37:07:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hucofPxV9f_U37TRZf3wzcHzLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/Od-4AIk0xwI0oil_-UwyOqvNIZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/3hucofPxV9f_U37TRZf3wzcHzLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7a:9c:2f:1b:22:13:7d:dd:c3:b3:a5:6f:98:86:d8:08:80:
00:da:89:cb:93:85:a8:81:24:21:81:3a:db:72:3e:d6:12:80:
c6:5e:26:59:62:9b:26:0c:9f:3d:a1:90:e7:31:d2:e7:b7:69:
ea:ee:5e:aa:38:ec:f6:44:1a:3f:e8:75:f4:2f:52:62:92:0c:
f5:21:d1:38:5c:25:d4:1f:a5:46:ed:c3:e2:5f:22:be:39:87:
79:70:73:47:a4:24:71:cc:29:31:73:e8:81:51:0a:6c:7c:ff:
b0:47:27:d3:10:b6:e4:95:b4:93:a0:ae:03:2e:7a:1e:f2:f1:
5c:0d:80:1f:5b:c2:f1:87:07:00:28:56:e3:4c:7b:5c:d3:2a:
57:ef:1f:80:e5:20:2e:2e:08:54:64:0a:83:7f:8b:44:c5:67:
62:04:4d:3f:22:14:fc:1a:5e:48:84:b3:16:ee:d6:b2:06:29:
66:a7:1f:7a:3b:9b:96:4a:62:af:e3:76:5e:19:09:e4:94:e6:
3d:bf:cb:c2:90:51:1d:97:6e:3b:11:77:55:cb:3c:74:62:55:
c2:cd:db:92:e4:67:cb:19:41:d6:b0:db:0c:d8:be:5d:a5:ca:
15:44:c4:ef:93:6c:61:df:7e:9d:84:27:07:4d:d5:2f:70:1f:
9d:6b:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 15:35:11 2023 by rpki-client on console-ams.rpki-client.org