Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/_kE_49-gVfncdUnnfu-p_okPQwI.roa
File: _kE_49-gVfncdUnnfu-p_okPQwI.roa (raw, json)
Hash identifier: x551WImK7PgpaVcDQu+yAdrMhQblgXTSV08+OvbLKv8=
Subject key identifier: FE:41:3F:E3:DF:A0:55:F9:DC:75:49:E7:7E:EF:A9:FE:89:0F:43:02
Certificate issuer: /CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Certificate serial: 0188208673F9E7E3B638786DF7EEAFBD67E8
Authority key identifier: 17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/_kE_49-gVfncdUnnfu-p_okPQwI.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 212.24.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:73:f9:e7:e3:b6:38:78:6d:f7:ee:af:bd:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe413fe3dfa055f9dc7549e77eefa9fe890f4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:17:ca:6e:ba:d3:a9:1b:5c:d5:e3:91:52:69:
c2:83:f6:db:99:56:2c:83:ef:b4:5f:55:5a:d3:f2:
1f:51:2c:45:15:59:d4:ac:53:32:11:02:f9:05:bd:
3c:ff:19:cf:9e:21:be:50:9f:a9:c1:37:d4:fc:7c:
ac:a8:a5:7e:ea:4b:dd:48:2c:fe:c3:dc:b0:76:a1:
bd:c6:10:8b:f4:4a:9a:90:d5:0c:fd:4c:be:c3:ba:
10:34:3d:2d:9b:e9:67:cf:39:4c:5b:61:59:ee:80:
9d:55:ce:58:7c:a7:f3:60:7e:05:ce:40:b5:ef:60:
3d:a4:2a:ea:8f:7d:63:de:a6:af:c9:87:38:05:a9:
db:ff:6a:d6:99:6d:71:50:00:79:3c:a2:36:4e:6e:
7a:3c:97:36:3e:68:3a:27:26:2a:b4:e5:bd:7e:44:
e7:69:ff:b5:84:3b:48:ad:9b:7d:65:25:04:36:93:
bf:03:28:99:e0:0f:4e:a1:6d:c2:af:04:9a:98:ba:
a6:be:76:62:32:76:47:8f:5f:86:00:51:01:83:c7:
14:b1:4a:4a:79:93:0b:91:71:17:22:3b:6a:e1:eb:
04:35:47:6b:ea:c3:bb:4d:f4:40:c6:2f:cc:ed:8c:
3d:81:1f:cb:d5:4a:a7:62:1b:4f:0c:a5:1a:3b:8b:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:3F:E3:DF:A0:55:F9:DC:75:49:E7:7E:EF:A9:FE:89:0F:43:02
X509v3 Authority Key Identifier:
keyid:17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/_kE_49-gVfncdUnnfu-p_okPQwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.123.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f8:ab:cd:7b:27:c2:73:d9:90:45:34:62:63:3a:33:fd:90:
1b:6d:0c:1d:50:b6:6e:d2:12:45:f5:bd:ec:e4:93:f7:77:03:
d4:63:4d:3b:72:04:a2:85:b6:3c:38:60:9f:e8:06:93:fa:f6:
d0:86:7c:6a:dd:85:ca:41:86:91:92:18:ec:7a:49:0e:18:1c:
5a:73:2f:6c:09:48:f7:54:cb:57:ea:cc:8a:fb:06:c1:cf:0a:
f0:0d:d8:ba:10:c8:fb:13:4a:22:a9:27:a7:17:82:e9:5c:bc:
33:43:d0:2e:64:0a:5b:2e:f4:00:80:93:be:aa:20:21:84:69:
86:d1:2d:a4:f7:9b:1d:17:ad:53:ad:19:05:98:e8:37:fb:b6:
b2:f0:83:48:ca:2e:18:be:d1:b9:82:04:c7:6e:35:b3:5f:67:
63:53:54:3d:13:95:f5:c9:9d:4b:4f:d4:dd:c0:76:7a:a3:83:
72:8c:cd:ff:ab:1f:2b:1f:c0:cb:52:cd:e1:3f:7c:64:ad:cb:
53:5f:69:cf:79:30:75:d2:10:b4:4f:7b:d6:ec:cd:f9:89:74:
36:5d:65:a9:7d:b3:a9:19:f8:5d:fe:74:c1:c9:8c:4c:e5:24:
71:ee:af:f5:f1:bb:95:8d:16:54:09:96:67:14:65:7a:a2:10:
84:f7:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:03:22 2025 by rpki-client