Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/w0YlMDRL9Q0VSlEhzLACgc9Eg20.roa
File: w0YlMDRL9Q0VSlEhzLACgc9Eg20.roa (raw, json)
Hash identifier: Ha1YniXfHI/b5EgUt9Dn0/qjEhHumWWNI6UZcPz/UtM=
Subject key identifier: C3:46:25:30:34:4B:F5:0D:15:4A:51:21:CC:B0:02:81:CF:44:83:6D
Certificate issuer: /CN=ad970b5be7d5f8a779a48f7b14724dc3ceb9792b
Certificate serial: 0570BA98
Authority key identifier: AD:97:0B:5B:E7:D5:F8:A7:79:A4:8F:7B:14:72:4D:C3:CE:B9:79:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZcLW-fV-Kd5pI97FHJNw865eSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/w0YlMDRL9Q0VSlEhzLACgc9Eg20.roa
Signing time: Sat 01 Jan 2022 08:53:47 +0000
ROA not before: Sat 01 Jan 2022 08:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47110
IP address blocks: 212.6.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91273880 (0x570ba98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad970b5be7d5f8a779a48f7b14724dc3ceb9792b
Validity
Not Before: Jan 1 08:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3462530344bf50d154a5121ccb00281cf44836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:a0:b7:68:be:57:e6:b8:a4:65:cd:73:d7:
28:0a:ba:0e:09:b3:0f:7c:0f:68:35:2c:8b:12:17:
8e:58:57:4c:59:c6:90:c8:c3:01:04:ca:b3:cf:5f:
8f:0a:d1:1c:57:9c:e2:02:3e:32:87:f6:13:b0:84:
d7:3a:4e:67:c4:29:23:97:96:18:71:57:03:07:b8:
86:f6:2b:b6:e3:0c:02:7c:04:39:d4:3d:b4:c0:53:
89:89:94:93:a7:b1:da:08:c5:4c:e1:ae:ea:2f:34:
8b:d9:05:0d:e4:41:f2:cc:c8:52:25:3f:aa:a9:c6:
12:17:31:e7:3a:64:09:09:b7:d4:3e:77:e0:19:f5:
73:76:4c:f8:11:83:b5:d7:b9:ca:e2:06:90:0d:01:
e4:60:e1:92:72:f5:6b:8d:ee:37:db:c8:83:94:52:
ba:5e:22:14:e9:e9:c9:58:9f:3a:6b:d3:ba:4c:a1:
5f:c7:15:4e:48:1e:53:56:0e:93:0f:fc:84:16:4e:
4c:25:f6:fb:33:a7:78:a0:42:d7:44:b2:5e:3b:21:
18:e5:50:a4:22:5a:de:9a:75:e9:c7:da:40:de:f2:
f1:37:7c:1d:2d:fe:a2:10:81:d1:8b:41:50:98:ae:
49:e4:1d:1c:7c:33:0b:bd:e2:b8:ff:dd:88:27:70:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:25:30:34:4B:F5:0D:15:4A:51:21:CC:B0:02:81:CF:44:83:6D
X509v3 Authority Key Identifier:
keyid:AD:97:0B:5B:E7:D5:F8:A7:79:A4:8F:7B:14:72:4D:C3:CE:B9:79:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZcLW-fV-Kd5pI97FHJNw865eSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/w0YlMDRL9Q0VSlEhzLACgc9Eg20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/rZcLW-fV-Kd5pI97FHJNw865eSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:a3:c7:92:c8:79:e0:48:3d:a0:be:8d:20:b0:56:5e:c8:
12:61:ec:52:ca:7e:1e:f3:be:d0:34:67:a4:66:7c:0f:bb:3c:
d0:08:dd:c2:b2:ea:bd:53:73:b3:3e:ca:04:56:c6:2a:c3:9d:
4d:7a:b8:9b:a3:f3:a4:d2:ed:c3:a4:f0:ce:f3:9b:26:8e:94:
47:e4:27:82:35:00:e0:f4:1f:6f:7b:77:84:3c:75:b5:b7:6e:
a4:a5:55:60:ec:ef:db:29:c6:53:e7:6d:29:5b:a9:1f:f9:04:
31:57:73:f3:05:b3:8c:9a:4b:72:b8:89:e3:0c:8f:9e:14:3e:
56:a5:02:1e:6c:41:f0:ab:e1:73:a8:79:50:dc:47:e0:35:19:
5f:04:f0:08:fd:7c:a0:0f:7f:0b:6f:ae:65:45:d8:21:75:12:
83:e3:7a:27:1a:56:d9:29:b7:ee:23:67:ff:8e:a5:3d:00:64:
07:cf:9f:2e:8f:e6:60:d5:03:d4:22:89:db:f0:6d:88:4f:df:
ee:4f:85:f7:12:0f:a8:34:1a:7e:d7:5f:f4:59:22:14:d0:99:
93:fe:68:a0:ee:7f:a7:b8:60:44:ee:81:a6:b8:a3:81:e9:a6:
19:98:d8:43:ed:34:07:a9:94:42:5b:8a:b6:0b:ef:59:9f:c6:
30:14:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org