Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/A0H9LlgNa5Dg472dzf6i9QUs5nU.roa
File: A0H9LlgNa5Dg472dzf6i9QUs5nU.roa (raw, json)
Hash identifier: 5la5arGUyomGyNWNMCFLwPRgH1WQHXvRaKfA2adTimw=
Subject key identifier: 03:41:FD:2E:58:0D:6B:90:E0:E3:BD:9D:CD:FE:A2:F5:05:2C:E6:75
Certificate issuer: /CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Certificate serial: 01856DC1E353414736A615587AEE17422E65
Authority key identifier: BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/A0H9LlgNa5Dg472dzf6i9QUs5nU.roa
Signing time: Sun 01 Jan 2023 14:35:00 +0000
ROA not before: Sun 01 Jan 2023 14:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 212.52.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:e3:53:41:47:36:a6:15:58:7a:ee:17:42:2e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Validity
Not Before: Jan 1 14:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0341fd2e580d6b90e0e3bd9dcdfea2f5052ce675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:eb:cd:ed:bc:42:af:33:74:07:19:e9:aa:
ff:fe:49:72:51:2f:77:49:59:80:41:ca:9f:f2:8a:
8f:1f:de:7e:af:ce:3e:bc:b3:c1:55:2f:3d:d6:63:
71:4d:83:f9:a0:13:fd:5f:31:35:40:75:86:c1:71:
55:ae:c1:ad:f6:4f:a0:2b:be:ec:82:e2:61:8c:7a:
7a:fe:aa:98:81:d7:4b:8b:b5:ee:32:e4:a1:9c:d5:
b4:75:0e:ff:f8:7e:84:97:8e:9a:af:a9:0a:45:b9:
86:a8:05:91:48:2f:58:02:47:08:67:49:35:ff:06:
7e:52:ba:ba:48:1d:0a:09:db:84:45:75:32:9c:95:
61:f0:45:86:b0:11:8c:b8:29:8b:3d:a1:1d:78:61:
a9:36:80:e8:39:9a:be:6c:2e:28:4d:6a:1f:3e:2e:
6d:d2:be:0c:c4:26:1c:41:c9:a3:84:be:23:f4:30:
c8:2f:5f:4a:0c:d4:be:d1:22:24:0f:9a:ab:57:35:
f8:64:9d:61:e6:14:58:47:39:ce:88:d0:2d:a1:21:
54:d4:ea:b7:e3:a3:71:54:36:be:a0:74:a7:bf:43:
db:1f:8b:e3:cc:7b:bf:96:df:ff:4c:3c:00:8d:b3:
52:99:f0:fc:2b:af:7b:12:31:0e:e2:70:99:5e:4b:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:FD:2E:58:0D:6B:90:E0:E3:BD:9D:CD:FE:A2:F5:05:2C:E6:75
X509v3 Authority Key Identifier:
keyid:BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/A0H9LlgNa5Dg472dzf6i9QUs5nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a7:e7:7a:f3:d6:2a:72:25:02:d1:e4:10:ef:8a:6b:bc:fd:
25:ea:1b:cd:40:55:ef:d2:03:2e:f1:64:0f:bd:83:08:be:f9:
02:6e:6a:d2:af:7c:a8:3b:c4:6c:90:7e:1e:c6:6e:99:02:68:
c8:8a:c8:4f:2c:07:fb:42:64:e0:23:f0:ba:f4:0f:1a:d6:89:
e9:13:37:a0:2f:22:2a:28:53:97:5c:39:e0:f5:53:5f:13:67:
1a:42:d8:0d:a3:87:80:bd:a3:80:cf:91:e6:af:1c:05:ae:98:
ef:c7:c6:5a:2b:d5:84:a2:77:e6:fb:02:c7:d4:02:6c:80:e2:
6c:e1:21:14:cc:d9:1c:21:84:03:4c:ad:9d:04:c1:e8:e5:3e:
d0:be:69:92:fa:92:9c:28:8a:77:de:8e:ee:99:3c:97:03:01:
73:96:b0:e3:d2:ec:65:b9:df:77:b7:e3:a9:c0:9a:b7:4f:b0:
98:45:d4:27:8e:20:39:a2:8a:57:fe:f8:2a:8e:fc:b9:96:ff:
7b:7a:99:30:cd:b3:6b:a5:49:3a:b9:b1:73:46:23:e7:d4:30:
73:65:7c:43:3a:c5:9a:2f:85:0d:1c:5f:6c:62:3e:96:d2:bc:
1e:a3:0a:a2:fa:69:bd:87:a3:63:71:b6:0c:58:32:a4:33:f7:
b3:f0:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org