Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/MA_61FzQL0ScqaFAFuxC4CFKaoA.roa
File: MA_61FzQL0ScqaFAFuxC4CFKaoA.roa (raw, json)
Hash identifier: 1XjPa6VXXBjM0wZOdcIgHL+S53EAQswc5gEJSVEHuvo=
Subject key identifier: 30:0F:FA:D4:5C:D0:2F:44:9C:A9:A1:40:16:EC:42:E0:21:4A:6A:80
Certificate issuer: /CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
Certificate serial: 01856F6FF6FC1E2FDC0C913F40EDF10B27E5
Authority key identifier: C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/MA_61FzQL0ScqaFAFuxC4CFKaoA.roa
Signing time: Sun 01 Jan 2023 22:24:46 +0000
ROA not before: Sun 01 Jan 2023 22:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211166
IP address blocks: 212.23.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f6:fc:1e:2f:dc:0c:91:3f:40:ed:f1:0b:27:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03297625f85d5dc18f04cb7b3ed528c760d95de
Validity
Not Before: Jan 1 22:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300ffad45cd02f449ca9a14016ec42e0214a6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:f7:28:56:3f:e6:ee:22:35:2b:9c:55:21:
a1:4b:08:4a:86:2e:5a:4b:b8:e1:e2:60:f7:f8:89:
12:10:a0:7d:b9:15:c7:4b:f3:74:d3:ec:af:7e:31:
c5:2e:b3:38:dd:47:2f:1c:a4:6d:6f:ae:6f:1d:94:
b8:50:0b:a7:ee:8e:ef:2f:c8:38:57:6a:c3:93:22:
2e:c1:a7:79:71:5e:de:ca:07:31:2a:9b:b3:f4:6d:
06:a1:a5:87:2f:63:33:75:ce:ac:32:b9:1c:e0:b4:
41:ec:dc:f2:34:e6:52:01:ed:89:72:85:1d:4e:1f:
71:4f:8f:0a:9c:51:71:47:4b:67:53:a7:71:05:7c:
71:e9:e7:51:76:23:59:65:90:d4:9b:33:af:7d:02:
09:5f:22:b3:2f:a5:4b:39:dc:c9:fc:22:82:22:75:
8c:27:df:94:e0:9f:a9:1c:68:b5:5d:9a:54:7a:7c:
03:f0:c6:35:aa:f5:16:d0:7e:8b:a7:ed:a6:e9:75:
b3:c2:f2:c2:2b:67:8c:0d:ba:79:ae:0d:aa:c8:ad:
79:20:9c:91:71:5a:51:d3:8c:77:aa:a6:b8:16:b7:
0a:29:eb:a7:6f:04:d9:a9:b0:47:d3:15:1a:c1:41:
e0:81:5c:a6:42:71:0a:86:68:15:8b:dc:69:78:f7:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0F:FA:D4:5C:D0:2F:44:9C:A9:A1:40:16:EC:42:E0:21:4A:6A:80
X509v3 Authority Key Identifier:
keyid:C0:32:97:62:5F:85:D5:DC:18:F0:4C:B7:B3:ED:52:8C:76:0D:95:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDKXYl-F1dwY8Ey3s-1SjHYNld4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/MA_61FzQL0ScqaFAFuxC4CFKaoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/949baa-8d2d-42a6-aa07-5e1eff0cfe0f/1/wDKXYl-F1dwY8Ey3s-1SjHYNld4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:09:ef:01:69:f9:a2:c3:4b:cc:f1:78:5a:ab:9c:a5:72:bd:
c7:3d:4e:df:7e:26:76:d8:6f:e6:80:90:95:03:a1:b1:4d:90:
f8:e7:96:59:99:de:cd:32:ab:23:07:31:94:78:43:0a:af:cf:
c3:9a:72:96:f3:89:be:08:1c:32:44:5f:f1:03:33:3c:e8:cc:
e5:36:10:bb:2d:98:93:59:d6:43:8a:71:5f:3e:64:25:e8:47:
1d:44:8e:dc:88:69:c6:1c:4c:05:fa:2b:ee:15:3a:0e:71:f2:
bf:c9:52:9d:87:a2:82:ad:44:c8:4b:40:8a:54:fd:55:30:84:
db:c4:f5:05:f6:44:b3:52:6f:0f:05:5b:ea:39:f7:75:49:61:
90:29:9b:8a:7f:12:80:84:42:06:1d:07:7b:f4:e9:10:d9:47:
41:45:99:36:ef:b9:ec:d0:c4:ad:d7:39:27:e4:7f:0d:0b:78:
fe:3c:f9:23:50:10:75:59:6b:96:d7:8a:fc:c3:b6:8b:37:92:
a6:fd:3c:ad:69:2f:7d:79:af:04:f6:5e:1b:98:e5:8e:e6:83:
08:02:33:c2:e7:a2:82:08:e8:3a:bf:de:0d:fc:67:2f:55:cb:
f6:8d:8b:ea:13:cf:09:e0:f8:6a:59:8d:24:00:89:01:23:0d:
df:17:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:04 2024 by rpki-client on console-ams.rpki-client.org