Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/3GCeP_UmNvF6zT7zmH065FkaoNc.roa
File: 3GCeP_UmNvF6zT7zmH065FkaoNc.roa (raw, json)
Hash identifier: iJzs87C8mckIqUwKRHUgjMXhNIIpO3vI2hm0TjemKnk=
Subject key identifier: DC:60:9E:3F:F5:26:36:F1:7A:CD:3E:F3:98:7D:3A:E4:59:1A:A0:D7
Certificate issuer: /CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Certificate serial: 018570152C67DB0E4DBDE9FE7810D8496B23
Authority key identifier: 0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/3GCeP_UmNvF6zT7zmH065FkaoNc.roa
Signing time: Mon 02 Jan 2023 01:25:13 +0000
ROA not before: Mon 02 Jan 2023 01:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 213.232.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2c:67:db:0e:4d:bd:e9:fe:78:10:d8:49:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Validity
Not Before: Jan 2 01:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc609e3ff52636f17acd3ef3987d3ae4591aa0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:37:b4:c6:35:58:be:df:e5:49:de:a5:cd:
21:a1:0f:ac:b3:61:ef:e9:47:60:88:b2:5c:73:fe:
9c:7d:b0:86:fd:ea:ea:f0:e4:78:f3:94:78:50:17:
2d:08:d3:1d:7f:50:d4:15:2c:0c:5c:c2:53:2f:17:
23:e3:a3:df:87:11:f1:47:a4:8f:44:06:c9:9c:10:
2c:20:b0:02:53:31:31:2e:fe:8a:f7:c3:a6:7a:c4:
1f:17:80:66:09:93:a1:1d:35:4f:d2:f5:02:47:5f:
74:ae:77:4e:60:82:bb:63:60:cc:c9:e3:86:eb:5c:
d4:8e:cf:61:82:45:c1:ea:98:42:47:d7:49:87:ef:
db:07:c4:9e:dd:02:70:b2:5c:e4:db:e3:53:8b:10:
0c:45:1e:6a:ac:f0:ec:f2:65:a8:5d:1e:f4:e0:d8:
39:20:a2:b4:64:6b:a2:e4:32:d7:9b:6d:bf:e5:2a:
56:c0:6a:90:ff:07:03:76:2f:9b:9f:02:b3:4a:c7:
8e:94:8f:96:17:04:fc:3f:03:71:45:df:06:28:d3:
e4:21:cf:18:f2:ab:bc:d1:8a:e0:44:b7:7f:6f:c5:
39:9f:f4:2e:f3:82:8c:ab:19:82:62:5e:5b:29:ee:
95:9d:c1:f6:9a:a6:ea:da:a6:5d:bf:e4:4f:96:a4:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:60:9E:3F:F5:26:36:F1:7A:CD:3E:F3:98:7D:3A:E4:59:1A:A0:D7
X509v3 Authority Key Identifier:
keyid:0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/3GCeP_UmNvF6zT7zmH065FkaoNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:06:3a:33:bf:be:60:e6:8b:18:f8:eb:b5:eb:28:01:28:76:
ef:73:15:bf:c4:f9:1d:fa:44:16:e0:66:f9:e0:9c:27:cd:a6:
64:7f:60:3b:b3:89:9c:93:72:58:57:0a:ba:61:7d:b9:82:d8:
aa:28:d4:42:0f:14:2c:96:a2:4c:48:5d:4f:69:4d:b5:9a:2e:
a1:74:8b:1e:b9:0e:b7:ce:47:47:1c:8a:e2:97:5d:63:fb:ef:
49:36:e4:08:24:12:02:aa:59:60:b8:8b:fc:c5:c8:06:ad:05:
6a:88:e3:a2:60:e7:cd:b8:c5:c1:28:d8:dc:a0:61:35:77:c0:
cf:52:bb:e7:96:27:96:d3:89:9d:c4:e2:ba:98:9a:92:d2:60:
89:d3:a5:33:7a:bc:b7:35:12:3c:c7:7c:da:fd:a5:03:3b:16:
81:8a:25:f0:c5:6d:0b:f1:dd:33:f4:9d:e5:60:83:b4:31:7b:
24:44:f1:a6:24:da:1e:b9:bd:0b:90:5b:73:6c:4e:cb:96:0b:
c0:b7:90:e7:f5:96:00:dc:d1:85:c6:14:cd:06:ca:c5:9e:90:
98:77:f4:61:41:74:1a:14:e1:0e:29:94:80:ae:4a:c2:3f:9e:
b5:69:8a:5b:d2:d9:16:fa:51:70:e1:3d:fd:63:e8:87:3b:ff:
b1:bf:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:36 2025 by rpki-client