Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pSQeeEbo_1w0okq1zBDPL48VcR0.roa
File: pSQeeEbo_1w0okq1zBDPL48VcR0.roa (raw, json)
Hash identifier: zz9be7x2M4rov7a3yvHkk6pOyM4Kv+YFtZ7oPByrMBM=
Subject key identifier: A5:24:1E:78:46:E8:FF:5C:34:A2:4A:B5:CC:10:CF:2F:8F:15:71:1D
Certificate issuer: /CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Certificate serial: 018B03BA5012885ACB8DB3BEFFD779FEF9C1
Authority key identifier: A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pSQeeEbo_1w0okq1zBDPL48VcR0.roa
Signing time: Fri 06 Oct 2023 06:43:43 +0000
ROA not before: Fri 06 Oct 2023 06:43:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31130
IP address blocks: 212.23.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:ba:50:12:88:5a:cb:8d:b3:be:ff:d7:79:fe:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Validity
Not Before: Oct 6 06:43:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5241e7846e8ff5c34a24ab5cc10cf2f8f15711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:85:94:a5:89:08:be:41:7e:f5:e2:95:c8:
df:da:9f:f7:e3:9a:d3:aa:16:11:aa:e1:c9:e8:1d:
ec:f9:98:16:94:88:2f:70:63:af:63:fd:87:03:33:
f6:27:4b:3c:d1:ff:73:9a:db:0a:8c:de:84:88:47:
04:85:6d:a2:8b:2d:36:19:5b:03:d3:43:48:95:6d:
6c:69:96:95:6b:1f:ea:0b:1f:b5:67:c9:0d:dd:8b:
a1:bc:a6:c7:9f:92:57:6f:7c:90:af:23:e4:80:f7:
c7:ce:df:1a:e9:e2:e5:0e:66:9e:3e:b4:cd:f3:ff:
00:6e:07:6f:4e:33:6a:4c:5f:86:f2:7a:b3:c4:b7:
af:c4:b6:e4:14:2b:d5:4f:91:c3:32:24:d9:c2:72:
29:22:5b:75:88:94:bd:46:03:2e:63:0a:c9:d5:43:
35:1f:6a:10:c5:db:33:a3:1c:72:d8:2c:fa:f9:ba:
78:54:87:a5:30:3e:d8:6d:f2:d1:80:55:d6:19:a8:
ff:dd:49:4c:fb:e3:94:d6:c6:03:12:7f:01:41:16:
4d:e1:eb:15:44:be:e8:83:3d:32:93:5e:e9:75:cd:
f0:be:04:0b:2f:53:99:b0:bb:7f:6a:c9:a1:45:94:
70:21:64:30:b7:83:17:27:22:1d:67:7b:55:cf:bc:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:24:1E:78:46:E8:FF:5C:34:A2:4A:B5:CC:10:CF:2F:8F:15:71:1D
X509v3 Authority Key Identifier:
keyid:A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pSQeeEbo_1w0okq1zBDPL48VcR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.212.0/24
Signature Algorithm: sha256WithRSAEncryption
18:29:33:7b:c7:b0:f0:9d:4d:52:2f:bc:92:61:2d:d5:54:f4:
f1:9e:75:a7:1f:28:2f:f7:b5:fa:43:45:45:24:b9:92:f0:13:
be:51:75:cd:93:f3:83:5c:81:e0:bf:f9:78:be:78:69:c8:6f:
5f:9e:68:fb:f4:d5:be:32:c9:6e:12:eb:4b:60:f7:4c:e0:2e:
49:6d:c9:2d:e7:32:ca:0c:aa:d8:c0:da:2b:ca:33:3b:9e:6d:
83:6c:2a:e3:89:d4:15:4a:58:2f:d7:5a:4a:df:5a:fb:bb:29:
b6:db:ab:38:a7:5b:fb:cf:aa:a7:32:09:42:e4:ae:7a:ba:64:
fc:4d:49:65:b4:0a:63:ec:d7:da:05:9e:ad:e5:7d:83:85:82:
06:39:cd:b1:7e:cb:6a:70:8e:e8:e9:8c:2c:b3:c4:21:bd:52:
47:48:27:cc:06:fb:f4:16:a1:c1:30:bf:be:35:f3:bb:00:8b:
4e:10:e2:9d:cd:24:71:c3:36:2d:c4:7e:d6:71:f1:06:66:14:
0e:88:71:93:25:22:67:43:dc:43:df:b7:aa:f4:f1:43:dd:b1:
20:02:57:84:a0:46:fe:07:a3:24:8b:1e:aa:56:8a:04:bb:cf:
fc:98:02:08:f2:19:15:8c:e3:ed:15:88:e0:a6:49:46:a3:2e:
2c:bf:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:10 2024 by rpki-client on console-fra.rpki-client.org