Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/3OKzX3srt1O_uUgTLqnohY0B0WQ.roa
File: 3OKzX3srt1O_uUgTLqnohY0B0WQ.roa (raw, json)
Hash identifier: +UTRCKGaodvlMIJFW6ApxuGx2PsVPRUNuSiOp+FUGKw=
Subject key identifier: DC:E2:B3:5F:7B:2B:B7:53:BF:B9:48:13:2E:A9:E8:85:8D:01:D1:64
Certificate issuer: /CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Certificate serial: 81675E
Authority key identifier: BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/3OKzX3srt1O_uUgTLqnohY0B0WQ.roa
Signing time: Sat 01 Jan 2022 03:54:25 +0000
ROA not before: Sat 01 Jan 2022 03:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 212.52.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8480606 (0x81675e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Validity
Not Before: Jan 1 03:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dce2b35f7b2bb753bfb948132ea9e8858d01d164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:4a:6b:a1:89:f7:cc:e3:4c:39:22:22:98:
83:05:74:a2:36:07:74:41:e5:52:52:ee:b0:b0:7c:
d6:f9:02:bc:1d:d1:9f:f3:91:83:98:58:87:f8:03:
c9:b2:9f:11:5c:d2:4b:6a:ff:2d:ab:69:be:8f:91:
f0:90:10:89:51:c0:cf:e5:2b:72:8c:18:22:64:2c:
53:42:39:7b:11:4d:b8:33:c7:32:e0:80:30:86:ed:
cd:e3:c7:3c:9c:62:33:40:0f:d0:fd:a3:a2:74:01:
2e:25:b5:7d:5a:ea:34:91:60:6c:41:0b:b8:b6:00:
66:01:ee:10:61:dc:db:b1:22:57:e5:92:f7:b6:4f:
13:20:26:b9:4d:3b:af:13:01:58:17:33:ea:70:b1:
45:2a:e9:29:c5:5e:26:5a:27:c3:70:0a:c6:12:77:
80:07:33:dd:20:4d:1b:ab:ff:74:76:97:77:87:54:
31:a8:dc:5d:64:41:3b:9e:f4:f6:fb:3f:1a:73:6e:
dc:f7:1a:8e:a3:d8:47:85:2a:21:58:7e:a2:c1:da:
50:47:ca:af:17:d3:10:59:62:15:85:2e:4f:d1:d8:
91:7e:6c:7f:06:d4:91:51:6a:b6:dd:19:35:aa:35:
e8:4a:4d:7f:56:0c:b8:56:b8:93:19:6a:d7:2f:5a:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:B3:5F:7B:2B:B7:53:BF:B9:48:13:2E:A9:E8:85:8D:01:D1:64
X509v3 Authority Key Identifier:
keyid:BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/3OKzX3srt1O_uUgTLqnohY0B0WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b6:9d:dc:6b:4e:f5:63:81:76:cc:0c:aa:44:40:0e:d4:3c:
22:b8:74:5a:e5:d0:37:57:02:e5:96:91:2e:a0:2a:2a:48:26:
aa:b7:7f:89:51:89:8e:7a:9b:c2:fd:1d:1b:21:e5:73:da:a6:
b8:48:2a:d7:f8:4d:f0:fa:7a:b4:da:d6:1a:60:f6:96:87:68:
fa:0d:16:7b:c5:bd:75:86:c3:12:e8:29:04:48:7f:6a:cb:99:
a1:70:bf:c0:aa:5c:7b:bc:95:dd:76:bd:80:bc:1d:e6:86:f9:
89:0f:7e:66:c8:ff:83:47:47:da:92:97:b0:32:da:7c:2e:9d:
9c:0d:e1:38:f6:10:ef:a2:94:db:ad:c1:1a:0d:55:fe:f4:41:
ef:3e:14:28:9b:56:83:e1:66:51:12:1f:d5:a5:ae:aa:a6:56:
b4:8a:d1:43:93:f1:38:e7:55:d6:b1:81:65:4f:d8:f0:a6:b3:
81:62:43:6e:02:d7:ed:7f:42:05:bd:2b:fe:1e:7c:f5:2c:68:
9e:62:e2:e5:bd:47:0e:9d:12:fe:bf:8a:37:99:cb:ac:18:c6:
94:7e:22:d3:a1:05:28:06:6d:d1:74:e3:7b:1e:0a:b6:65:a6:
6b:5b:90:79:fc:67:bc:5d:c3:04:a5:94:2a:d3:0d:7e:c5:82:
5e:2d:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:12 2025 by rpki-client