Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/ID42iVSyZho4qBDshU1ZQo78Qco.roa
File: ID42iVSyZho4qBDshU1ZQo78Qco.roa (raw, json)
Hash identifier: yj0j0Ua6N5AcogAVEV+lGBRX41hlTD/7X/juISs5Nj8=
Subject key identifier: 20:3E:36:89:54:B2:66:1A:38:A8:10:EC:85:4D:59:42:8E:FC:41:CA
Certificate issuer: /CN=ad76f791438115f4d05a9d200c2365755dd19471
Certificate serial: 70B81C
Authority key identifier: AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXb3kUOBFfTQWp0gDCNldV3RlHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/ID42iVSyZho4qBDshU1ZQo78Qco.roa
Signing time: Sat 01 Jan 2022 03:58:04 +0000
ROA not before: Sat 01 Jan 2022 03:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210760
IP address blocks: 212.52.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7387164 (0x70b81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad76f791438115f4d05a9d200c2365755dd19471
Validity
Not Before: Jan 1 03:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=203e368954b2661a38a810ec854d59428efc41ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:4b:ff:37:af:02:c6:2f:ca:01:81:be:b3:
a2:31:ad:0a:79:44:c6:9a:1f:6d:72:f8:c9:c5:77:
ae:5b:15:ea:cd:d9:ac:78:4a:e4:cb:0b:a4:1b:03:
37:e3:68:35:61:f4:f6:5c:fb:49:bf:36:1d:4c:91:
bc:2a:50:2f:9a:cc:2e:66:17:2d:42:2e:2d:5a:a7:
28:0e:21:cf:2a:aa:00:1f:e1:de:44:b5:e6:36:78:
10:a3:83:d0:11:9d:99:de:ed:df:18:26:c5:b9:b6:
dd:0a:6b:c7:58:05:bf:05:a6:92:b4:d1:6d:1e:f6:
5c:b1:cb:8b:b8:0c:be:96:eb:59:01:d6:34:2a:7a:
5f:25:9e:3c:7c:59:e6:12:e7:20:00:f9:7d:c3:92:
0f:92:5a:9f:6b:cd:f5:8a:e1:2a:88:22:e4:fc:9d:
45:4f:1a:ab:dd:01:2e:c0:e7:9a:02:9d:c3:7f:d3:
b2:cd:b4:1c:d5:69:a2:78:e3:7f:06:a8:12:a7:11:
16:6a:07:a4:d7:13:34:7c:ff:19:fc:29:66:82:81:
0a:79:fe:1e:bd:73:62:9a:7b:2c:cd:26:e9:5c:25:
70:c0:ac:ac:45:40:03:6c:94:f3:da:d0:c7:ea:dc:
25:c0:d1:dd:89:e5:78:35:ef:28:84:41:18:b4:53:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:36:89:54:B2:66:1A:38:A8:10:EC:85:4D:59:42:8E:FC:41:CA
X509v3 Authority Key Identifier:
keyid:AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXb3kUOBFfTQWp0gDCNldV3RlHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/ID42iVSyZho4qBDshU1ZQo78Qco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.22.0/24
Signature Algorithm: sha256WithRSAEncryption
32:03:54:ed:f8:8f:ad:ef:86:7e:35:09:73:f7:19:02:5e:23:
81:40:a7:8d:5e:3b:3c:68:d5:da:d9:b0:e7:fa:78:41:be:69:
04:e6:68:18:86:66:ea:35:3c:d8:37:37:97:af:ac:95:6c:9a:
47:28:bc:fb:f7:68:23:22:27:bd:1b:bd:cb:05:90:ad:bb:95:
41:33:d7:71:41:c0:17:74:97:1a:96:6f:a6:aa:80:75:4a:c4:
49:a8:6d:2b:19:78:1c:25:0e:2f:af:5b:e0:1b:8a:75:6b:2e:
f8:32:34:47:94:c7:3b:dc:f7:e9:b3:6b:3f:2d:51:18:a5:b3:
f7:70:d4:cc:c4:7d:cf:5b:72:c2:ec:bd:45:eb:d4:fb:83:b2:
eb:9f:06:d0:4b:72:9c:d4:f2:63:f1:f1:b4:49:7c:3f:bc:0d:
cf:ee:dd:4e:56:ab:b5:8c:c3:82:35:55:00:2a:36:2f:cb:8a:
e6:c1:55:ed:d8:63:73:63:7f:e6:b1:1a:6b:a8:d3:43:d5:18:
1f:85:8f:5b:db:01:31:6c:97:e3:f3:d5:45:61:1f:e9:5e:51:
12:72:9c:37:d0:2a:6c:7e:c7:fb:32:d4:43:e9:ff:37:39:c6:
72:c9:ea:3d:f0:df:b5:e7:b4:a9:c3:40:79:5c:83:45:4b:cd:
70:75:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org