Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/Ith8Br5DBeGRRtnVSwszOweTrb4.roa
File: Ith8Br5DBeGRRtnVSwszOweTrb4.roa (raw, json)
Hash identifier: lpZFB6U6C3opS7HOSiwPu01PdY4n2e4AF+2wSp0WRD4=
Subject key identifier: 22:D8:7C:06:BE:43:05:E1:91:46:D9:D5:4B:0B:33:3B:07:93:AD:BE
Certificate issuer: /CN=d0ca153080e4a99ea858951152209829ef6d3b72
Certificate serial: 018820867297B5FA10A7AC4C8DFCF5D9A7D3
Authority key identifier: D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/Ith8Br5DBeGRRtnVSwszOweTrb4.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 212.52.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:97:b5:fa:10:a7:ac:4c:8d:fc:f5:d9:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca153080e4a99ea858951152209829ef6d3b72
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d87c06be4305e19146d9d54b0b333b0793adbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:da:95:3d:d8:22:9e:b7:49:74:ea:22:48:
bf:a7:21:b0:c6:5c:c7:9a:04:32:7c:c4:69:c0:56:
1b:0b:12:f2:61:f0:e3:07:4c:b7:22:1f:a8:c9:7a:
49:68:7c:95:99:30:93:92:d0:22:e0:19:bd:51:4b:
c4:c3:71:3d:b6:db:e3:35:7a:0c:29:c9:ea:a9:ce:
43:64:85:0e:0d:01:39:46:35:6f:ab:3f:bd:ec:bb:
b2:fb:7d:f9:d1:ae:7b:e7:c6:77:8a:da:74:49:5d:
51:c9:fa:7c:33:a3:ce:e1:e9:b8:42:ec:54:c6:1a:
88:55:5d:57:b1:d0:68:67:2a:9b:26:15:dd:5d:dc:
4f:7e:ef:7d:2c:6e:05:cb:9c:4f:5a:07:a5:07:8e:
f8:8e:19:f3:fd:11:1f:a3:9c:4a:4d:a5:91:ea:48:
5b:6f:03:09:e0:24:c0:74:0e:c1:0d:fa:d8:2a:57:
6a:3b:20:f3:3f:c2:ae:bb:32:39:7a:e0:bf:b5:26:
29:2d:bb:9f:1f:12:a1:88:62:52:cc:e9:6c:93:cf:
68:7c:90:38:0a:85:e4:37:fa:7c:52:c6:b7:3f:63:
f7:98:db:d3:e4:e8:0f:ae:ec:6d:40:2e:90:c3:05:
c2:41:60:3c:3b:3d:5c:d4:ba:b4:70:5d:a6:08:00:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:7C:06:BE:43:05:E1:91:46:D9:D5:4B:0B:33:3B:07:93:AD:BE
X509v3 Authority Key Identifier:
keyid:D0:CA:15:30:80:E4:A9:9E:A8:58:95:11:52:20:98:29:EF:6D:3B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MoVMIDkqZ6oWJURUiCYKe9tO3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/Ith8Br5DBeGRRtnVSwszOweTrb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/288ee2-c1dd-4d3f-bd7b-09dc3e253df1/1/0MoVMIDkqZ6oWJURUiCYKe9tO3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.11.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2a:3b:76:c4:c3:3c:26:2b:19:9b:54:ac:a3:74:41:96:d4:
af:74:45:74:23:3c:fd:c4:0e:34:8e:a0:4e:bf:f9:f3:7c:2a:
34:f6:bf:72:1c:ac:dd:e9:ce:39:9d:c8:5b:42:64:80:01:6f:
2a:d1:f8:00:6c:cf:d5:43:fd:fa:7a:9c:07:cc:a1:ea:5f:60:
fc:e1:3d:78:d5:ec:2f:43:8b:8e:8b:93:26:75:8b:23:b9:0b:
90:31:5c:e1:0d:bd:1b:38:38:04:ff:37:8d:a0:fb:fc:0e:54:
9d:c2:35:07:2d:b2:a0:25:e1:f2:a7:38:c6:0a:c9:7b:83:7b:
8d:ca:cd:79:26:80:35:76:6b:6c:6d:94:51:37:21:ca:4e:8e:
96:86:eb:eb:14:48:e5:6f:38:c0:2c:66:95:91:32:86:b6:a6:
0e:c8:0e:f2:06:ab:f9:94:02:e0:1c:4b:49:a2:31:15:4b:65:
a1:22:b6:35:e9:c7:33:20:0d:30:d8:5c:a9:55:90:cb:fa:93:
11:a7:ed:fa:22:47:ed:f0:1d:41:40:e3:01:9d:e0:f5:14:63:
ce:ee:08:77:f7:d0:83:e9:93:2c:a9:21:15:83:c5:97:93:7f:
65:63:2f:34:d0:ac:d7:d5:72:c5:a5:66:65:24:12:2a:f0:70:
78:18:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 10:15:57 2023 by rpki-client on console-ams.rpki-client.org