Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Pa4IxZuhOpYNIYctjZW13aDzTyc.roa
File: Pa4IxZuhOpYNIYctjZW13aDzTyc.roa (raw, json)
Hash identifier: wJNcuvoMB8J0JBEKHUfAMum6e1Gk2E40KWEu51Ha36g=
Subject key identifier: 3D:AE:08:C5:9B:A1:3A:96:0D:21:87:2D:8D:95:B5:DD:A0:F3:4F:27
Certificate issuer: /CN=3ace7d2f9ea47c8c153c12fd7f3bb5fb65c5d5d9
Certificate serial: 01857102DC80B4A85F09EE0FDC7C4531C31B
Authority key identifier: 3A:CE:7D:2F:9E:A4:7C:8C:15:3C:12:FD:7F:3B:B5:FB:65:C5:D5:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os59L56kfIwVPBL9fzu1-2XF1dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Pa4IxZuhOpYNIYctjZW13aDzTyc.roa
Signing time: Mon 02 Jan 2023 05:44:50 +0000
ROA not before: Mon 02 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 212.52.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:dc:80:b4:a8:5f:09:ee:0f:dc:7c:45:31:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ace7d2f9ea47c8c153c12fd7f3bb5fb65c5d5d9
Validity
Not Before: Jan 2 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dae08c59ba13a960d21872d8d95b5dda0f34f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ea:69:a5:f1:26:37:34:9b:0b:27:d8:23:
47:13:92:f7:37:a6:a2:1f:9d:c9:2a:a7:41:bd:9c:
a9:82:e0:7a:f4:22:28:03:c6:87:01:d1:0c:0a:3f:
42:f6:69:56:59:84:45:67:7d:58:ae:27:70:72:a5:
90:d5:7c:4f:6b:9a:0e:c2:b1:63:f2:bc:ac:65:ca:
9f:11:46:e4:f7:1b:1b:3b:84:1f:d8:34:54:d1:f5:
f0:db:8f:78:1a:96:f2:cc:dd:36:f0:58:ad:d7:0f:
08:94:dd:12:fe:6c:0e:46:52:2d:b8:28:60:ea:bd:
ab:28:f0:bb:26:92:cf:0e:20:85:12:03:77:58:39:
06:9f:b6:82:6e:13:0e:c5:7b:da:61:59:85:53:ff:
9b:5e:50:c4:e6:45:e6:f0:67:52:94:36:6c:70:ce:
6d:11:d4:c4:0a:60:87:b1:5e:53:b9:10:f4:6f:c0:
c7:4d:7c:dd:14:61:a8:9a:e3:61:4e:9b:97:48:f6:
48:01:1d:f7:56:04:2c:82:dd:42:19:29:0b:ce:e0:
4f:ed:bf:20:22:c3:42:e1:71:53:72:2c:5f:ca:e9:
75:4e:70:7b:b6:44:a9:83:cc:da:ca:2f:cf:62:6d:
f0:36:b1:27:05:e5:72:35:ee:2e:6e:c6:3c:6c:20:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:08:C5:9B:A1:3A:96:0D:21:87:2D:8D:95:B5:DD:A0:F3:4F:27
X509v3 Authority Key Identifier:
keyid:3A:CE:7D:2F:9E:A4:7C:8C:15:3C:12:FD:7F:3B:B5:FB:65:C5:D5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os59L56kfIwVPBL9fzu1-2XF1dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Pa4IxZuhOpYNIYctjZW13aDzTyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Os59L56kfIwVPBL9fzu1-2XF1dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.18.0/24
Signature Algorithm: sha256WithRSAEncryption
99:28:f8:5e:62:76:49:9b:08:a8:05:ee:b4:ff:30:28:be:3f:
83:32:c9:ce:af:16:80:0b:80:44:16:16:b7:7a:2e:d2:44:00:
4d:97:4b:44:2a:34:77:d5:b0:85:b7:ec:d9:c9:b6:b4:48:64:
fe:41:ef:bf:e6:84:6f:22:ce:d3:0b:51:ca:98:dd:e6:ab:c5:
8e:1d:6a:ad:c5:da:38:a7:b4:3a:c3:92:d7:da:ab:f2:44:d9:
16:c5:2f:a3:b5:c0:58:3b:3b:b3:d3:11:11:fc:49:d1:b7:b0:
9a:4f:23:9d:74:9e:e9:9e:69:b2:2c:b3:bd:eb:e1:d0:c3:56:
5a:db:65:16:8f:5d:7d:92:1e:80:8b:a2:c8:f9:12:20:49:00:
33:a8:96:58:4a:9b:18:8d:67:19:55:9b:b0:2a:56:c9:12:a4:
1c:32:5d:29:19:ca:ce:5e:36:02:10:83:72:51:fe:e3:16:25:
dd:2f:03:d4:f6:39:65:b3:60:14:ea:bf:99:c1:58:4b:c2:c9:
e6:9b:c5:bd:2e:62:b6:a9:84:42:0e:24:84:3b:4f:fc:73:e6:
5f:e1:e7:bd:a8:5f:e0:e6:c8:33:db:d7:01:eb:d3:b5:52:11:
ee:c5:35:f3:95:f3:1d:46:95:a1:36:fe:f0:bd:1e:7a:82:f4:
39:94:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org