Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa
File: x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa (raw, json)
Hash identifier: 9YunDA5ITjbtykJhvWd4ARk2KczpiEKO7R7gNNLq0Dw=
Subject key identifier: C7:D4:00:38:08:08:50:23:A4:C5:63:60:1A:02:CC:D5:DC:03:82:B8
Certificate issuer: /CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Certificate serial: 013C4087
Authority key identifier: DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa
Signing time: Sat 01 Jan 2022 02:01:15 +0000
ROA not before: Sat 01 Jan 2022 02:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.6.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20725895 (0x13c4087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Validity
Not Before: Jan 1 02:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7d4003808085023a4c563601a02ccd5dc0382b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:d9:91:bd:2e:27:09:f4:2e:d1:46:2d:22:
19:45:00:d9:64:7c:10:1a:14:22:56:a6:09:cc:99:
61:34:6e:da:75:53:e4:87:5c:ba:1d:f1:5b:9c:b4:
1d:b2:16:4a:7f:12:8e:cb:e5:a9:5a:53:ab:d9:25:
45:50:91:11:10:fa:3a:30:3e:89:77:3f:c8:17:bf:
26:8a:50:84:02:2c:0f:68:55:09:38:60:3e:ec:04:
b6:d7:3e:98:fb:cc:78:bd:d9:90:ef:6e:c6:10:3c:
b7:dc:c3:4f:76:bf:a5:82:43:3a:0e:91:ef:87:76:
16:16:ee:08:cc:41:7d:43:9b:65:b5:1a:1a:d6:93:
64:6b:3b:93:f0:37:01:4a:01:05:ef:fb:b5:7a:db:
a6:16:1d:28:ad:05:42:48:14:3a:2e:e6:ac:fb:f9:
93:05:ac:47:55:45:59:fb:65:14:c4:b2:6d:f9:2c:
9d:63:5e:ef:00:97:0e:b4:14:89:bb:0e:5f:c1:7e:
82:d4:4a:3c:69:5f:d7:75:b8:1a:a2:a1:9e:3a:b8:
35:5e:42:96:16:4b:e1:63:3e:5d:60:92:99:49:b4:
9b:46:71:58:a5:cf:08:4b:12:c8:a0:e5:68:98:e0:
4d:b9:2e:f5:85:37:88:8f:d4:b2:63:b2:35:05:20:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:00:38:08:08:50:23:A4:C5:63:60:1A:02:CC:D5:DC:03:82:B8
X509v3 Authority Key Identifier:
keyid:DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/x9QAOAgIUCOkxWNgGgLM1dwDgrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/3yKkq7kzn2XoH4cfxFSZX1vyoBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8c:47:d5:8b:c6:71:43:0d:7c:ce:e6:3b:1a:96:69:a4:15:
87:56:e5:10:2a:10:f5:0f:c0:97:70:0e:4f:39:d1:ad:0f:71:
12:eb:20:52:8e:01:97:59:11:a7:2f:49:bb:6e:7c:1a:81:be:
10:fb:a5:46:39:57:26:d5:d1:aa:26:a6:e9:89:e8:e6:24:3f:
66:f3:6c:6b:11:c2:06:08:6a:c1:c1:5a:2c:0c:61:c1:68:e4:
64:1f:8b:27:5e:b7:17:d8:8b:df:fc:87:f0:61:e4:cb:b3:2b:
54:7d:ca:8f:dd:a1:a9:79:25:7b:52:a0:4c:ea:cd:45:e8:c9:
16:fd:4e:d8:50:f8:c3:37:38:d4:c5:3a:0d:8f:b2:fb:d5:a3:
a7:cb:05:94:83:88:84:78:a9:0f:97:41:2d:bd:cb:8e:2a:99:
90:ca:e9:76:03:c4:4f:81:12:66:26:65:a3:87:a1:5d:a8:ba:
e4:e2:95:dd:b7:6f:22:83:55:c6:7f:1f:2a:f8:63:fd:d9:2e:
e3:0c:bd:51:ba:c7:6f:98:81:58:2c:fd:14:d2:a6:c4:36:4e:
01:44:69:e7:fc:34:b1:72:4c:fc:7a:08:42:37:e8:0f:48:51:
f3:1d:b9:a4:0c:b2:e4:f8:b8:9f:ca:cc:8b:8d:5b:e2:5a:02:
85:ba:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:06 2025 by rpki-client