Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/IVOqgac7Ugl7EO9dGyLl0o0FFrc.roa
File: IVOqgac7Ugl7EO9dGyLl0o0FFrc.roa (raw, json)
Hash identifier: jDzclWizA2LPtEDgZbZOoLYDwurE7zMp8XnAW6npdEM=
Subject key identifier: 21:53:AA:81:A7:3B:52:09:7B:10:EF:5D:1B:22:E5:D2:8D:05:16:B7
Certificate issuer: /CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Certificate serial: 0181F45582936D3C387B003B1CBE6922B75A
Authority key identifier: 35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/IVOqgac7Ugl7EO9dGyLl0o0FFrc.roa
Signing time: Tue 12 Jul 2022 21:34:13 +0000
ROA not before: Tue 12 Jul 2022 21:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 212.24.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:55:82:93:6d:3c:38:7b:00:3b:1c:be:69:22:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Validity
Not Before: Jul 12 21:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2153aa81a73b52097b10ef5d1b22e5d28d0516b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:ac:f8:5c:c0:5f:30:a6:d1:78:01:4a:49:
ea:88:83:fc:c7:07:61:1c:c6:14:7b:df:70:0d:98:
be:fd:a7:ac:aa:ac:66:f0:f8:ed:04:d5:5c:c9:b3:
4a:2a:60:3d:95:68:18:4c:f7:11:a6:73:dd:14:49:
89:4f:53:5b:a8:a9:4a:3c:0c:2f:df:3a:87:ce:73:
4e:a7:f2:53:21:fe:40:66:4e:b8:12:88:99:0e:cc:
b9:e6:cf:f7:2d:20:fb:95:70:ac:ee:a5:a2:62:a7:
af:51:cb:87:8d:b7:22:b7:1d:60:e8:e9:d9:7c:5e:
50:fb:cf:d3:e2:26:3c:c3:f2:24:3a:b9:11:1f:7e:
9b:7c:07:10:af:1c:29:ce:63:02:ed:de:57:82:b5:
0e:22:2c:af:38:3b:dd:00:21:0b:f0:27:e3:39:e8:
ec:f7:fe:8b:e8:e2:eb:89:89:a9:06:27:07:f8:54:
44:8d:84:e7:d2:42:9d:52:eb:9b:4d:98:5e:fc:06:
86:c8:b3:6b:06:72:d4:6f:7c:a2:ff:8b:f4:3d:b7:
ab:04:43:ba:dc:74:32:65:85:c8:2b:2b:71:5e:f8:
ca:a8:b0:a8:32:6b:d8:82:c0:60:01:45:bc:8d:fe:
32:fd:5a:b4:a6:4b:c6:32:72:9a:21:5c:33:10:61:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:AA:81:A7:3B:52:09:7B:10:EF:5D:1B:22:E5:D2:8D:05:16:B7
X509v3 Authority Key Identifier:
keyid:35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/IVOqgac7Ugl7EO9dGyLl0o0FFrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:25:7e:41:32:77:13:67:df:bc:4f:b2:e8:38:ca:76:57:9c:
1d:6d:29:74:02:00:23:a9:5a:75:9e:ba:1b:ec:bf:5a:3f:5d:
23:ce:35:31:fd:7a:81:76:ee:5b:d0:01:60:a5:f1:16:88:14:
b3:40:36:39:c6:50:d6:b5:fe:07:4b:50:aa:85:d6:a5:e1:ae:
43:ea:86:19:aa:a9:e3:ee:c3:19:c3:ff:ca:23:e0:ab:ea:67:
47:65:34:ca:ba:a3:19:d2:2b:84:5c:fa:8e:c1:57:f3:dc:fc:
48:59:33:1e:2d:45:a9:35:3b:fc:65:ba:0a:16:ae:e3:77:be:
25:74:d1:17:b8:b1:e7:84:12:1d:04:71:8a:50:94:f5:68:51:
a0:36:0a:10:5c:11:dc:05:53:0f:02:be:85:ba:64:04:73:2f:
12:fc:83:6f:f3:65:ef:70:7c:b7:65:e1:88:a8:e0:7f:c1:3c:
33:36:cc:74:a7:3f:77:a6:47:50:d0:f7:de:95:4d:ab:d3:13:
58:ae:ef:3f:bc:a0:85:62:79:5e:c2:80:4d:c7:f3:35:de:76:
ec:82:85:11:66:d1:3b:e9:f6:8f:7e:98:41:a0:c7:ee:12:a0:
57:f8:de:33:b8:a1:7f:cc:89:bb:28:67:4b:bc:d0:be:7b:82:
fa:a1:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:37 2024 by rpki-client on console-fra.rpki-client.org