Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/edgUZOeoKdvuFP4BtcxsoMGpY7g.roa
File: edgUZOeoKdvuFP4BtcxsoMGpY7g.roa (raw, json)
Hash identifier: Y9jafrqbhHYadSSUOkgovt7v6OS0+YawOxjoklzZlQs=
Subject key identifier: 79:D8:14:64:E7:A8:29:DB:EE:14:FE:01:B5:CC:6C:A0:C1:A9:63:B8
Certificate issuer: /CN=bb641d5a52f440f7989e3c1f616e95ae7cf50ba8
Certificate serial: 0189CFBB7C50810261664079B105FBB24D95
Authority key identifier: BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/edgUZOeoKdvuFP4BtcxsoMGpY7g.roa
Signing time: Mon 07 Aug 2023 11:21:57 +0000
ROA not before: Mon 07 Aug 2023 11:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:bb:7c:50:81:02:61:66:40:79:b1:05:fb:b2:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb641d5a52f440f7989e3c1f616e95ae7cf50ba8
Validity
Not Before: Aug 7 11:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79d81464e7a829dbee14fe01b5cc6ca0c1a963b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:77:9f:de:18:6e:36:b7:06:5a:b7:90:2a:
7b:1c:af:19:76:5f:89:fc:6f:51:78:a6:20:6b:4b:
87:8e:44:a3:5b:02:e8:60:05:7a:e9:29:4d:e0:cd:
d6:39:76:d9:eb:1b:0b:d5:98:dc:26:ae:1c:3c:03:
6d:77:98:f8:4c:32:64:6a:0e:de:ea:02:fd:65:40:
4c:0b:6a:25:85:00:c7:f3:0b:ea:52:43:41:e7:6b:
37:d8:d1:ad:72:a6:cb:08:83:a5:97:f1:90:d4:f7:
38:53:70:86:78:5e:1b:44:c4:d9:14:47:d2:a1:1c:
b6:68:7b:ca:88:bc:9f:24:fb:0f:14:b5:62:a5:8c:
94:06:b0:5f:b1:1a:e1:fb:08:55:86:c2:3f:81:3e:
70:3d:89:ef:3f:c2:5a:8b:82:31:ac:5b:3c:c9:27:
57:bb:f0:eb:df:a1:33:f8:d3:0f:6d:f6:e9:21:cc:
e9:8f:1d:95:76:cb:ba:bb:a9:6a:f0:37:4f:44:2b:
91:4e:c0:29:92:2f:7f:79:84:d7:f9:4d:b9:13:cf:
ef:31:d6:b6:00:24:b7:0d:17:f9:be:4b:0b:f4:01:
48:f2:78:c7:24:98:3b:e8:ad:88:03:19:b5:ba:d2:
55:10:6a:39:3d:61:32:89:1c:b7:c8:a1:df:67:19:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:14:64:E7:A8:29:DB:EE:14:FE:01:B5:CC:6C:A0:C1:A9:63:B8
X509v3 Authority Key Identifier:
keyid:BB:64:1D:5A:52:F4:40:F7:98:9E:3C:1F:61:6E:95:AE:7C:F5:0B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/edgUZOeoKdvuFP4BtcxsoMGpY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/53e415-2876-4653-9a0a-70798463f50f/1/u2QdWlL0QPeYnjwfYW6Vrnz1C6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.207.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1c:8e:03:18:b8:83:a9:04:85:ec:ef:72:c1:11:11:d6:10:
10:e3:6c:d6:e1:e1:18:8c:3e:60:d0:22:f7:4e:8d:98:04:e9:
66:8d:80:30:f1:d9:bd:b1:68:f7:33:ba:01:97:1f:e5:32:a0:
d1:04:73:2a:cf:3b:4a:3d:18:e9:b9:80:83:48:11:04:a6:0c:
95:de:1c:65:49:6e:ee:f9:c4:e0:25:d8:ca:fc:f8:d4:b3:9d:
81:1e:f7:71:2c:d5:76:c4:b2:34:56:07:cd:0c:7c:cf:dd:a7:
64:fb:de:60:c3:c2:70:a8:f4:be:9d:72:c9:e8:38:1b:ea:0e:
c5:c0:80:9a:e3:6d:41:9f:31:73:a7:ec:c2:36:bf:0d:53:da:
9b:d6:6f:2b:3e:01:4f:e8:25:7f:67:07:69:4e:98:09:8b:3f:
75:ee:b5:d5:e2:91:21:8f:2a:a8:cc:cc:b0:cd:2f:62:ca:fb:
fc:4d:0b:c6:7d:78:13:05:24:8a:70:67:9f:9b:37:33:7e:14:
1f:c2:07:95:a9:d5:61:29:55:78:09:e3:87:ed:b1:63:62:65:
7a:54:be:bf:cf:29:3b:c0:b9:72:67:12:0f:7a:3d:6a:89:33:
77:1c:7f:5a:54:d4:12:c4:c7:b6:77:35:4e:dd:11:99:5d:34:
12:99:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:14 2025 by rpki-client