Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/2uzectWSfr_L-FRbTP9BDTiyENE.roa
File: 2uzectWSfr_L-FRbTP9BDTiyENE.roa (raw, json)
Hash identifier: BfsA8X8OddqzIPXNH0dSCyb8OMTXpOiu7Hl2n2K2c68=
Subject key identifier: DA:EC:DE:72:D5:92:7E:BF:CB:F8:54:5B:4C:FF:41:0D:38:B2:10:D1
Certificate issuer: /CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Certificate serial: 018571957B265C6F399F664782E3217E9D6F
Authority key identifier: 5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/2uzectWSfr_L-FRbTP9BDTiyENE.roa
Signing time: Mon 02 Jan 2023 08:24:59 +0000
ROA not before: Mon 02 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206679
IP address blocks: 84.205.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7b:26:5c:6f:39:9f:66:47:82:e3:21:7e:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Validity
Not Before: Jan 2 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daecde72d5927ebfcbf8545b4cff410d38b210d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:07:aa:bc:e7:64:ae:84:3c:62:6d:5b:ed:
2b:70:4e:5b:fa:72:83:ac:8b:53:f3:77:db:ea:cb:
a1:c1:43:ed:26:b6:3c:c2:bc:8f:62:e6:87:5e:fc:
cf:c4:6f:20:61:63:f7:d2:d1:aa:55:09:97:88:4b:
c2:8d:42:c0:fd:74:54:57:e4:3e:87:d8:0b:39:4c:
a2:a3:6e:03:39:b7:9e:25:bb:8a:4e:50:28:48:5b:
4c:00:95:44:00:9a:4d:87:f0:3d:b3:67:82:32:70:
13:73:9b:c2:6b:50:f8:3e:52:f5:60:3b:16:9c:ab:
dd:f5:ca:5a:a2:91:50:4e:1a:72:3c:81:3f:4e:9b:
6f:0f:08:9f:55:d6:a4:a0:3c:f3:75:22:41:4c:63:
66:37:56:e2:0d:0b:10:2f:2a:eb:5b:61:3f:38:c9:
27:6e:98:f9:80:78:ea:c2:10:5f:0c:61:e6:aa:0e:
76:45:4c:dc:0d:13:44:4a:b1:a1:b2:0d:01:ef:1f:
16:82:9d:2a:78:13:a6:aa:e8:27:af:c5:92:e7:d3:
8f:f7:ac:b6:44:af:2e:9f:95:b5:99:8c:94:97:e9:
0d:44:76:b1:da:6a:88:03:6b:c0:4f:a1:8e:ac:c5:
2d:be:88:8d:f8:2f:35:9b:b6:d3:19:dd:17:e7:38:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:DE:72:D5:92:7E:BF:CB:F8:54:5B:4C:FF:41:0D:38:B2:10:D1
X509v3 Authority Key Identifier:
keyid:5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/2uzectWSfr_L-FRbTP9BDTiyENE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1d:36:df:61:6a:3e:80:35:50:42:6d:cd:64:16:11:c0:aa:
bc:a8:93:f6:bf:33:ea:02:ee:99:34:f4:9c:57:7c:19:ba:0b:
e5:55:12:0c:20:33:a3:2d:8b:ce:a9:b3:fa:85:b3:69:f7:b2:
55:dc:19:9f:cb:47:e2:2d:c5:82:05:4c:25:8c:1c:4d:a4:54:
5a:40:bd:cc:19:33:e7:b8:10:dd:d8:8d:c5:95:9a:8b:ba:35:
e6:91:ce:87:ce:d4:c9:32:37:1a:97:d6:f9:69:dd:1a:02:a0:
86:1d:c6:d5:b2:f0:6b:c4:9d:dc:6f:6f:04:01:da:5f:89:0d:
f5:e1:03:52:28:48:fc:7b:ef:e7:22:9c:6d:a2:d7:ac:7c:1c:
8c:07:90:77:79:8b:cd:b2:ef:ba:04:e1:51:f5:9e:b7:75:ce:
f6:ba:06:fd:cd:f8:7e:0a:ed:da:94:fd:96:4a:0d:ce:d6:5d:
ab:a5:f4:a3:c4:da:93:2d:9b:9b:e2:ca:6a:1d:23:19:88:a1:
03:2f:17:59:41:c7:3a:8f:c2:20:3d:12:ec:ea:ec:2c:d6:42:
27:61:ac:8a:9a:33:a5:58:43:45:48:69:16:7e:e2:ba:b8:e8:
34:8d:cd:da:d7:b8:1f:6e:8b:6a:e8:e1:f0:11:24:e2:ac:f0:
4e:f4:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:20 2025 by rpki-client