Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/9P_2hrpgyrP6_N_0aKSPmS2ijhs.roa
File: 9P_2hrpgyrP6_N_0aKSPmS2ijhs.roa (raw, json)
Hash identifier: zrav2mYV+zi2HJtBlvyEpNyJ+wrViTL6AcDpo8bDdyM=
Subject key identifier: F4:FF:F6:86:BA:60:CA:B3:FA:FC:DF:F4:68:A4:8F:99:2D:A2:8E:1B
Certificate issuer: /CN=bb641d5a52f440f7989e3c1f616e95ae7cf50ba8
Certificate serial: 01857D4F38E7A1B68310613A9F972DC53B42
Authority key identifier: BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/9P_2hrpgyrP6_N_0aKSPmS2ijhs.roa
Signing time: Wed 04 Jan 2023 15:03:41 +0000
ROA not before: Wed 04 Jan 2023 15:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 212.23.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:4f:38:e7:a1:b6:83:10:61:3a:9f:97:2d:c5:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb641d5a52f440f7989e3c1f616e95ae7cf50ba8
Validity
Not Before: Jan 4 15:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4fff686ba60cab3fafcdff468a48f992da28e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:bf:e8:a0:f5:ef:58:ad:70:0f:15:6d:1e:
39:29:fd:e0:35:fc:e2:2f:0d:8b:45:91:77:90:2b:
81:f2:e9:b5:1d:78:ee:37:68:fe:9c:84:73:d1:bb:
7e:50:c7:12:3d:cc:6c:34:c5:97:7e:d2:e1:73:02:
81:64:2b:f7:4a:e1:4e:39:71:5d:77:db:92:bb:27:
ed:35:e0:08:46:6b:80:81:6f:c9:5d:21:0e:d5:64:
ee:4f:ed:da:dd:7c:d8:0a:69:3a:15:ad:5c:fe:44:
19:a8:62:a2:f5:cb:c2:82:f9:f1:c5:f8:99:da:53:
db:90:e2:4f:0c:bb:46:33:f0:f7:15:c0:c2:38:ef:
12:99:75:32:78:59:26:a0:05:3e:f7:5a:93:fb:ca:
a8:ee:2f:de:47:37:e6:50:39:7f:40:3e:d2:43:f1:
bc:11:11:5a:99:2c:fe:66:19:24:e2:ed:51:95:6e:
80:11:51:fa:fc:b3:59:9e:9b:78:fc:97:f4:65:21:
a3:48:91:ca:31:25:96:a4:79:6f:38:0e:79:b2:bf:
4f:24:4b:5e:fd:82:30:d1:24:4f:7c:62:4d:b7:be:
c2:3d:81:ad:41:ef:60:d1:a4:4e:9c:77:a0:08:35:
92:33:02:0c:6e:9e:53:9e:3d:0d:b8:62:31:02:eb:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:F6:86:BA:60:CA:B3:FA:FC:DF:F4:68:A4:8F:99:2D:A2:8E:1B
X509v3 Authority Key Identifier:
keyid:BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/9P_2hrpgyrP6_N_0aKSPmS2ijhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f2:f3:b0:3b:05:99:26:b4:8d:dc:a6:c8:a7:32:47:42:c1:
48:82:22:e2:38:7f:f5:4c:84:9a:9f:1a:4c:2a:ac:36:e0:d5:
e7:05:d9:03:4a:a7:fe:82:77:a0:2e:9e:21:bb:fc:da:c0:8e:
fd:ee:3e:c8:25:af:56:05:4f:ce:84:97:6b:d2:99:6f:17:33:
fe:d1:8f:c6:96:c8:c0:2d:56:94:04:6c:da:66:c7:27:dc:ce:
bd:82:56:fc:5c:a0:1f:8b:db:59:74:78:68:50:65:2b:df:41:
ff:67:a7:b1:53:aa:70:67:86:8e:50:95:a2:bf:d3:5a:6c:60:
f8:0c:b9:4e:0b:c8:1d:18:fb:d6:3e:4c:ec:43:dd:f0:65:69:
f3:d0:70:6b:bf:6f:2a:dc:fa:d6:f0:a4:67:58:ea:2f:ee:f4:
60:d6:24:6d:a2:e2:9c:26:31:7f:77:20:5e:c0:98:f5:b6:55:
a4:ef:28:71:58:22:0c:51:9e:dc:7f:69:ca:cf:1b:79:a3:f6:
ce:0b:f6:80:15:31:ee:9f:66:b3:d1:2e:dd:9e:94:b6:c6:94:
4b:4e:13:f3:fa:ee:3a:b2:b9:43:5b:9d:48:6e:99:b7:7f:36:
33:49:17:4a:88:65:e7:c7:00:c9:ad:49:b5:66:d6:2e:5a:d9:
05:84:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:38 2024 by rpki-client on console-ams.rpki-client.org