Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/cvsQk5TDg77GyH96LiUZnThjTgw.roa
File: cvsQk5TDg77GyH96LiUZnThjTgw.roa (raw, json)
Hash identifier: 1FMe9L06ipnpKrVQvf4PyMaZSA40pev8i28VzlTtD/s=
Subject key identifier: 72:FB:10:93:94:C3:83:BE:C6:C8:7F:7A:2E:25:19:9D:38:63:4E:0C
Certificate issuer: /CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Certificate serial: 800A06
Authority key identifier: BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/cvsQk5TDg77GyH96LiUZnThjTgw.roa
Signing time: Sat 01 Jan 2022 03:54:25 +0000
ROA not before: Sat 01 Jan 2022 03:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 212.52.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8391174 (0x800a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
Validity
Not Before: Jan 1 03:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72fb109394c383bec6c87f7a2e25199d38634e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:95:e6:8e:09:ba:bd:00:7c:40:74:1e:0f:
c4:e4:7b:bf:94:04:ed:66:41:b8:90:53:76:21:78:
41:e1:ba:fa:94:0b:17:61:a9:a2:03:c4:00:a9:52:
a8:d2:bf:90:55:c7:35:ed:41:24:c4:ef:19:60:3a:
ba:a1:f1:76:2f:e5:61:1d:51:33:05:b0:ee:17:f2:
b1:b1:c4:e4:7a:2b:67:07:ee:db:8b:e1:4d:a2:eb:
1a:8b:8e:59:d0:e2:a9:a3:37:cd:a5:51:30:17:b3:
35:7a:50:93:4a:ec:7c:b0:7d:79:92:9a:2a:52:bd:
04:5d:11:a0:df:53:26:cc:0a:8c:27:f4:30:69:4b:
f5:5a:5e:68:0e:bc:37:56:21:e7:cf:2c:c8:09:20:
b5:7a:6c:56:7c:b0:09:22:a6:66:73:60:36:df:3d:
73:1b:3b:2f:01:ec:81:1d:cd:55:2d:19:ac:df:5e:
a7:0d:35:c2:a7:44:92:a3:97:c6:df:4c:18:a5:ea:
4a:e3:c8:65:e3:1f:59:0a:70:ed:e5:27:3a:4f:43:
d6:78:34:ec:40:65:46:7f:f5:a2:65:6b:3f:30:a8:
52:4e:07:d9:36:ab:79:29:9b:f1:24:90:8e:93:9b:
f2:89:fd:d9:0a:6b:11:70:1a:bd:2e:b2:e1:5a:c3:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:10:93:94:C3:83:BE:C6:C8:7F:7A:2E:25:19:9D:38:63:4E:0C
X509v3 Authority Key Identifier:
keyid:BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/cvsQk5TDg77GyH96LiUZnThjTgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
66:eb:65:59:be:1b:30:e0:2e:57:60:bf:60:63:02:36:0a:0d:
d2:15:4a:6e:4a:2d:9d:e9:0d:a1:5b:f5:87:1b:55:d4:50:16:
df:50:7f:67:8f:57:0c:9c:84:3b:6f:7d:0d:84:ac:8f:d9:be:
24:45:64:71:c7:17:71:b5:09:5f:f0:59:4d:4d:5c:7c:41:ee:
31:18:8a:90:d5:32:06:eb:b0:03:ac:77:e5:f9:bd:ae:c0:3e:
8e:6e:98:35:4c:64:d2:e5:b9:a6:3d:b7:24:a6:10:31:e9:04:
c1:f8:90:1b:00:01:87:de:21:02:1f:5f:70:87:b6:ac:a5:7a:
75:09:aa:04:07:66:2e:cd:92:33:68:b2:63:57:5a:4d:09:94:
b6:32:2a:ce:d1:85:1c:df:0e:9c:87:d8:36:27:8a:21:62:b3:
bc:88:16:ef:d9:8e:20:e5:a6:77:96:f3:76:f3:9a:17:58:1e:
17:8d:97:b8:c8:03:32:81:f3:9b:d5:af:c5:ef:a3:24:7e:6d:
d1:01:3e:ee:68:28:70:53:4e:9d:91:9f:5c:07:09:d6:09:39:
9b:b9:d5:94:25:83:77:1b:5a:f7:9c:6e:9a:f0:a4:73:63:1d:
4c:d3:27:03:10:e0:b3:3d:1a:a0:d7:b7:02:29:51:8d:da:79:
4f:8f:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org