Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/J2Gl-qM1FaPtAciljvlSFhwk0Tg.roa
File: J2Gl-qM1FaPtAciljvlSFhwk0Tg.roa (raw, json)
Hash identifier: n+pI2XwBFG+yfDGqYHmQIToMPZpQEXwNlMdj0StI9v8=
Subject key identifier: 27:61:A5:FA:A3:35:15:A3:ED:01:C8:A5:8E:F9:52:16:1C:24:D1:38
Certificate issuer: /CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Certificate serial: 01856F1DB34A39C5B6636AEFB8553DDED4A4
Authority key identifier: 35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/J2Gl-qM1FaPtAciljvlSFhwk0Tg.roa
Signing time: Sun 01 Jan 2023 20:54:55 +0000
ROA not before: Sun 01 Jan 2023 20:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 212.24.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b3:4a:39:c5:b6:63:6a:ef:b8:55:3d:de:d4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Validity
Not Before: Jan 1 20:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2761a5faa33515a3ed01c8a58ef952161c24d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:4d:56:54:3a:c3:18:7a:ec:80:1f:c5:68:
1c:d7:c7:b4:83:7c:08:0a:45:b4:ba:f1:c7:9f:16:
d4:13:d7:f1:29:ef:17:85:b4:5a:19:37:2f:8d:45:
0a:7c:3c:69:14:62:53:16:d0:56:ee:25:20:5a:cf:
ed:28:8f:38:46:a9:22:65:f5:77:0c:64:1c:23:22:
38:a8:1f:a7:80:b0:e4:3d:ff:7b:0e:98:46:04:4b:
78:70:f3:34:4b:ec:81:29:04:3b:2a:f3:04:4b:1d:
67:cf:5e:54:21:7f:c7:ed:68:87:ac:fb:10:8c:fb:
6a:eb:cb:1e:7f:43:74:53:d4:9f:1e:ec:c2:28:d8:
d6:e4:f6:32:65:59:51:b7:7b:df:c3:96:df:40:b3:
b7:7d:9e:61:14:71:b8:8b:ce:d8:d8:71:2c:bd:05:
a0:04:ac:b0:23:0e:7a:a1:ed:8d:e6:1d:78:d6:1f:
c7:55:86:33:50:75:b1:6c:d8:f1:24:4c:1b:4d:90:
f9:ff:75:c3:44:45:71:90:88:8b:fb:01:69:0e:8d:
d0:64:09:c5:b2:76:8a:2d:fe:33:65:39:6e:7d:46:
85:82:07:d2:21:59:8f:a3:0c:c9:92:d7:3d:58:72:
56:3d:4d:a7:59:f3:99:8b:f5:ca:cb:03:c8:17:35:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:A5:FA:A3:35:15:A3:ED:01:C8:A5:8E:F9:52:16:1C:24:D1:38
X509v3 Authority Key Identifier:
keyid:35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/J2Gl-qM1FaPtAciljvlSFhwk0Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a5:2c:f3:3f:ec:83:4b:71:db:3b:09:18:fa:14:49:44:00:
fe:f1:94:62:75:c3:9f:7b:fb:7f:2c:6e:a9:c1:49:6e:5e:51:
87:c8:a5:93:21:54:c2:53:f4:7d:11:ea:4a:b1:17:87:6f:9e:
ed:47:44:b4:73:0c:d5:9e:14:22:a3:87:ba:b9:cf:9b:cb:b8:
93:3a:4d:53:6a:5e:f5:c0:ac:2d:96:d4:fa:c0:98:d5:bb:91:
da:01:12:e5:9c:4c:62:b5:2b:e6:c6:fc:3c:5c:5d:90:46:dd:
e0:77:29:d5:b7:6f:1c:a0:de:16:e6:69:20:10:95:7e:b5:9e:
47:c8:ca:ee:28:63:e1:6f:8d:5a:c8:c9:06:55:1a:6e:e5:27:
5e:99:b4:1a:79:95:a8:8b:b6:1c:e9:d3:43:e5:c6:46:7e:70:
f2:1d:7b:23:8a:a3:fa:1e:29:c1:20:bf:74:01:c5:37:d0:90:
26:41:26:4e:d2:77:c0:9d:54:e1:37:8b:c5:6d:a1:b8:01:f5:
77:84:c4:db:00:74:4b:09:4e:9c:ba:10:db:ed:aa:6d:e0:81:
f1:cf:f4:ed:8a:4a:5b:33:c5:89:25:63:d9:2c:18:d9:25:12:
ed:c8:cc:bc:37:1c:82:75:f6:fb:c6:73:12:f3:da:ae:98:eb:
31:a1:7a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:37 2024 by rpki-client on console-fra.rpki-client.org