Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/j5nLOE8KyUujUsIkU1jo1-fekFg.roa
File: j5nLOE8KyUujUsIkU1jo1-fekFg.roa (raw, json)
Hash identifier: 4GpHRzg33ns9EB9uawXmKj1NWsSk1F2vn7VnZwRK1Sk=
Subject key identifier: 8F:99:CB:38:4F:0A:C9:4B:A3:52:C2:24:53:58:E8:D7:E7:DE:90:58
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018CC86F85CF42FD04051FD4A331B5DDBC43
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/j5nLOE8KyUujUsIkU1jo1-fekFg.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31262
IP address blocks: 212.49.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:85:cf:42:fd:04:05:1f:d4:a3:31:b5:dd:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f99cb384f0ac94ba352c2245358e8d7e7de9058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:2a:17:6b:c9:68:87:aa:cb:0d:c5:6c:1e:
09:8b:b1:a3:b4:25:37:95:1b:1f:5a:df:58:bd:71:
07:7f:f9:65:a2:02:ae:65:0e:37:25:90:7d:88:ae:
29:86:da:d1:39:01:2f:6b:64:51:0d:8e:e6:da:e7:
d3:8d:37:eb:c2:0c:5b:0f:37:ee:1e:16:7b:6f:05:
50:28:33:f7:bb:f7:c9:86:44:af:3b:03:06:43:67:
b0:1b:ae:4b:f9:dd:f3:84:0a:9c:1c:f5:39:df:8d:
45:10:bc:7f:30:23:f5:65:3a:77:cd:b4:92:82:ac:
7d:d3:65:30:a9:90:c1:8d:db:1f:f5:d9:32:9b:9b:
ee:9a:40:96:04:b4:07:ec:a5:95:ea:52:66:b7:81:
b1:c9:fb:2a:02:d7:5a:ae:00:d3:14:9e:1e:c4:ac:
f7:c2:b3:e8:ed:fe:cc:8f:1d:81:90:bb:10:1c:b7:
a6:a2:e8:e2:80:3f:d4:2d:8c:4f:f3:c4:7d:18:cd:
8d:b2:bf:c2:ab:c1:41:84:eb:30:9b:d2:1f:c3:76:
75:5a:55:75:d1:c9:79:c4:51:f7:21:ad:4c:5e:45:
06:53:60:0f:47:9a:7e:a7:8f:bb:38:b2:41:61:dd:
5b:e2:a1:a6:e8:20:fe:71:bc:46:1d:c2:3e:85:15:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:CB:38:4F:0A:C9:4B:A3:52:C2:24:53:58:E8:D7:E7:DE:90:58
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/j5nLOE8KyUujUsIkU1jo1-fekFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f1:13:9c:38:eb:35:5c:b9:d6:46:e6:21:0a:ad:7f:93:39:
da:e9:d1:e9:f3:51:93:21:72:89:65:0f:aa:9a:0a:1c:9a:7e:
cd:86:ec:f8:c4:08:5d:84:f0:48:2c:18:15:f9:d9:41:88:6f:
0b:9c:50:1e:9a:bd:88:3e:92:e3:c2:5f:2a:ea:a8:a7:dd:b4:
db:cc:3f:25:31:83:02:a3:ac:00:1a:5f:dc:1f:8d:8e:85:08:
52:f1:da:02:39:85:51:ff:3c:c7:ec:7c:b8:55:9b:cf:ff:85:
b1:db:89:ac:ff:be:8d:da:9f:dc:df:47:12:a6:ad:b7:20:fc:
34:d9:89:88:da:f9:c2:55:02:1e:89:19:30:67:4d:d1:61:6a:
8e:32:30:2d:83:3a:77:0f:de:5c:50:52:93:16:31:d4:d4:ca:
2a:f1:a0:ea:59:2e:a8:13:6e:7f:e0:14:5d:28:8b:8d:ca:50:
6a:e7:88:d0:24:3c:cf:fd:4d:d1:bc:71:9e:75:b5:ef:d2:7a:
dc:19:38:b5:9c:00:06:47:c6:5c:a3:82:28:96:cb:7b:1f:ea:
b2:a7:95:af:a8:ca:31:9f:db:42:d9:87:d8:77:16:54:67:0c:
16:5a:a2:27:e6:3a:46:af:96:79:af:6c:f8:e6:41:b8:14:87:
02:ab:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:57 2024 by rpki-client on console-ams.rpki-client.org