Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/1LEoEZwzC9gkDF7385y-IaaVSzQ.roa
File: 1LEoEZwzC9gkDF7385y-IaaVSzQ.roa (raw, json)
Hash identifier: p7QLX0hXEF86ZWv2Ps94VLkAh1jgHj4TfVOyr8PTKdw=
Subject key identifier: D4:B1:28:11:9C:33:0B:D8:24:0C:5E:F7:F3:9C:BE:21:A6:95:4B:34
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018FB3F92C9E5CA252A0E84B04C3711F238C
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/1LEoEZwzC9gkDF7385y-IaaVSzQ.roa
Signing time: Sun 26 May 2024 08:16:42 +0000
ROA not before: Sun 26 May 2024 08:16:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12462
IP address blocks: 212.163.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:f9:2c:9e:5c:a2:52:a0:e8:4b:04:c3:71:1f:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: May 26 08:16:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b128119c330bd8240c5ef7f39cbe21a6954b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:1a:c6:3c:cf:3c:be:67:9f:1f:5c:64:b6:
bf:91:2e:0e:cf:e0:5e:ff:93:d0:5b:91:55:3e:38:
a5:34:d6:33:eb:3c:f6:24:c7:7f:9f:0b:9c:23:51:
51:20:90:09:5f:ff:8f:80:ef:1b:24:73:86:7b:03:
f7:b8:40:62:cf:85:ab:3e:ab:b4:cf:36:74:9c:1a:
0e:99:d5:f7:ff:a1:7f:4d:bd:2b:0e:ed:29:bb:ae:
77:d5:f9:45:7f:10:91:af:f3:cc:81:66:97:3b:f7:
5b:8d:a5:ad:2b:b6:ea:7f:72:99:f7:a0:1d:be:4b:
c2:46:38:bf:c0:23:54:c3:ba:69:85:d8:a7:91:3d:
29:8a:9b:fc:18:2f:58:2b:58:82:88:7c:eb:23:3e:
17:a0:b6:7b:0e:cd:a5:20:a5:f1:7a:11:bd:e9:31:
96:b7:72:74:33:36:ae:0e:70:1b:b9:58:3a:42:45:
32:64:24:55:82:7f:60:41:a9:ca:cf:d1:97:76:d7:
fc:cf:02:1a:7e:4d:98:79:44:71:84:1c:9b:c2:ba:
15:b3:50:54:14:51:18:43:8d:d6:b9:11:9b:2e:3e:
78:bd:10:96:c8:0d:1c:16:fd:0a:6a:e7:c9:bd:9a:
c4:f7:72:27:88:02:38:a1:d8:32:3d:b5:b2:27:d8:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:28:11:9C:33:0B:D8:24:0C:5E:F7:F3:9C:BE:21:A6:95:4B:34
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/1LEoEZwzC9gkDF7385y-IaaVSzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.31.0/24
Signature Algorithm: sha256WithRSAEncryption
22:54:48:d9:a9:f3:9e:93:e8:31:e0:1b:b8:2c:a8:a1:4d:27:
c8:ea:92:be:51:31:fd:d9:58:f9:e7:fb:e3:3e:64:2e:ed:d3:
b6:5e:cf:8e:89:03:39:09:26:9c:74:72:fb:f1:82:9e:39:d0:
01:25:c5:ee:12:c2:3a:d2:96:ae:06:c1:b1:24:f9:8a:7a:79:
ac:1f:c1:cd:64:9a:28:66:1f:22:08:01:d8:bb:06:f8:40:a5:
ae:14:f2:b2:5f:8b:91:13:65:f6:bf:5c:d2:79:fc:c2:05:70:
f4:63:cc:7d:42:ce:ee:c6:61:22:5e:ee:f0:44:c3:67:ba:4e:
01:b7:f2:5c:46:ee:69:85:91:87:88:49:ec:93:85:f1:de:9d:
17:1b:a7:41:53:98:c0:e8:63:42:46:30:62:c6:43:0d:89:02:
6c:c1:b2:7d:e2:0d:f2:29:a1:91:c2:7e:77:81:45:6d:b4:02:
82:ac:b1:44:c4:f1:94:da:4c:96:6e:b1:20:d9:5b:8c:55:e1:
c0:1d:bb:ee:e2:5d:fe:8c:10:a2:65:1b:60:e0:0f:2d:a5:f1:
86:94:55:71:49:b4:e4:7c:12:3f:ca:99:fb:2b:20:85:46:72:
b2:d1:6f:84:54:f6:27:34:f0:c9:3a:a0:28:96:f3:75:39:b3:
da:d0:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:26:13 2024 by rpki-client on console-fra.rpki-client.org