Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/SxzIxx8DgQXfG8yGx_IsuykDcd4.roa
File: SxzIxx8DgQXfG8yGx_IsuykDcd4.roa (raw, json)
Hash identifier: ztdMbb8u6AifMNXBMyHvPOQxlRTAWOAl4w0p8cQuq3E=
Subject key identifier: 4B:1C:C8:C7:1F:03:81:05:DF:1B:CC:86:C7:F2:2C:BB:29:03:71:DE
Certificate issuer: /CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Certificate serial: D805E0
Authority key identifier: 67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/SxzIxx8DgQXfG8yGx_IsuykDcd4.roa
Signing time: Fri 04 Feb 2022 20:59:35 +0000
ROA not before: Fri 04 Feb 2022 20:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.18.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14157280 (0xd805e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Validity
Not Before: Feb 4 20:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b1cc8c71f038105df1bcc86c7f22cbb290371de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:73:af:d2:05:36:6f:a6:bb:c1:76:49:59:
14:95:83:75:53:b4:33:d9:76:23:31:97:3c:69:a2:
6d:ab:00:84:41:67:54:59:0b:8c:47:91:f6:49:71:
42:e2:a1:b2:88:0b:6a:e5:4c:46:46:e8:b1:d9:c4:
a3:9e:33:0e:a7:d3:7c:45:1c:c5:64:79:ca:a9:70:
8f:af:21:28:67:fc:2c:de:ef:d8:9f:7b:48:cb:c7:
e4:55:a6:9b:69:9f:98:fe:b5:98:89:09:f2:50:47:
f7:e0:d2:3a:06:03:7a:03:29:54:ba:ad:72:28:04:
03:b0:d4:b4:34:b8:a8:a0:78:18:8f:a8:3e:d2:57:
cb:72:4a:80:93:b5:f6:d0:d8:15:75:24:f8:f3:a8:
a6:5e:d3:db:72:1f:e0:8e:f5:0b:9f:11:c6:d4:4f:
96:3e:72:cb:c9:09:b3:a4:6c:c3:00:8e:b9:35:18:
87:37:83:cc:91:12:a2:15:4f:89:ab:48:bc:d6:ab:
af:a3:8a:90:d4:a9:fe:08:c4:c6:74:ad:f6:cc:18:
77:d8:18:4e:28:05:09:9d:42:9d:70:63:02:60:67:
10:27:18:e5:4e:9e:cc:32:60:9e:30:74:97:7d:ab:
a6:3e:52:ed:87:45:d7:72:b6:1f:6b:1e:54:91:8d:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:C8:C7:1F:03:81:05:DF:1B:CC:86:C7:F2:2C:BB:29:03:71:DE
X509v3 Authority Key Identifier:
keyid:67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/SxzIxx8DgQXfG8yGx_IsuykDcd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.115.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e8:68:c6:a5:6f:11:21:d5:92:d5:12:b4:1d:fc:a1:5d:76:
86:f5:0d:a2:e8:1a:c0:91:7d:b1:22:6b:ba:58:d6:99:84:97:
bb:de:95:ab:5f:b6:b7:7c:a7:ee:c8:ec:0f:2a:bb:31:23:c6:
c9:0d:2d:3d:cb:fa:ab:65:a5:4e:0e:78:74:d2:c2:47:38:13:
9e:67:0c:e0:5f:f8:64:e2:13:23:74:5b:5c:d0:23:7c:a6:a0:
93:39:6e:47:08:26:5e:a2:56:98:44:a2:64:62:30:54:0b:2a:
87:b1:fd:b2:43:3a:46:7d:9e:73:00:69:61:0d:ca:23:7b:b5:
cf:38:a8:cc:5e:e4:51:c8:9c:3c:13:34:f3:df:1b:9c:58:8f:
ec:31:5a:78:35:73:39:98:f6:46:51:cf:4a:d3:98:ff:5d:68:
5a:92:57:67:13:31:bb:cb:12:a8:5b:27:3f:0a:a7:5a:b0:ec:
5d:b9:d8:ea:57:f2:80:94:f8:62:a6:8e:90:65:fd:b8:97:a6:
a1:7f:45:c7:41:8d:c8:ad:7f:02:68:9b:2f:10:e4:c5:9e:f7:
82:74:5b:7b:32:1a:7c:74:ef:d7:da:d8:b5:79:92:7d:0f:7e:
73:2f:74:8e:23:53:d6:99:9e:16:54:19:78:a5:b7:61:d1:52:
27:b7:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:23 2024 by rpki-client on console-ams.rpki-client.org