Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/3R0AEqE4fNjsk5cR7jfJthbibEE.roa
File: 3R0AEqE4fNjsk5cR7jfJthbibEE.roa (raw, json)
Hash identifier: YwL/OZ4ckKBN0BsuyNyOyK/DWB3gWKI6fcKzre/J1bQ=
Subject key identifier: DD:1D:00:12:A1:38:7C:D8:EC:93:97:11:EE:37:C9:B6:16:E2:6C:41
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 018722B1E51A37A73E49C7F37F9AC4A80A9B
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/3R0AEqE4fNjsk5cR7jfJthbibEE.roa
Signing time: Mon 27 Mar 2023 10:51:36 +0000
ROA not before: Mon 27 Mar 2023 10:51:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.252.112.0/24 maxlen: 24
84.252.115.0/24 maxlen: 24
84.252.114.0/24 maxlen: 24
84.252.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:b1:e5:1a:37:a7:3e:49:c7:f3:7f:9a:c4:a8:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Mar 27 10:51:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd1d0012a1387cd8ec939711ee37c9b616e26c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:a5:a7:cf:07:84:e5:e1:82:97:34:58:cd:
a6:7b:67:b2:85:88:4c:37:62:66:97:05:06:ec:34:
e8:18:d1:fd:5d:20:31:c0:1b:68:3c:e3:e9:98:c3:
43:31:42:8f:ba:d2:c3:50:3a:be:3b:43:5d:47:26:
e9:9f:49:49:33:45:60:9b:7c:db:cc:d4:5d:0b:ae:
2c:1f:c4:55:de:ab:0b:a4:64:88:3c:7c:dd:89:ea:
c7:d4:f7:bb:39:53:fa:25:a9:0d:50:bb:9d:c8:d1:
65:aa:73:2d:6d:a9:c2:d3:6c:f6:26:bc:11:d8:d1:
80:a3:e6:be:02:27:d3:a6:ac:01:e1:48:d3:eb:c2:
77:2a:80:33:ee:93:0b:e3:ea:f3:37:b8:45:d1:45:
8f:40:39:9f:ec:3a:e6:a3:79:2c:d3:d0:0e:b9:0b:
ea:5a:ab:12:50:c5:b7:7a:a0:45:2a:c4:e2:a5:4c:
9d:85:13:17:b4:f9:92:86:bc:94:37:5f:96:29:6f:
ac:88:a2:60:bb:e5:84:9d:60:35:6a:f3:a4:1b:a4:
a3:ff:b0:e8:b0:4c:83:97:c2:26:fe:bb:ea:f3:6a:
e1:3e:6c:08:92:7e:5d:6e:c3:d0:2f:f6:cf:c9:ac:
36:c4:1f:fd:90:c5:87:6c:eb:f4:66:c5:2e:23:8d:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:00:12:A1:38:7C:D8:EC:93:97:11:EE:37:C9:B6:16:E2:6C:41
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/3R0AEqE4fNjsk5cR7jfJthbibEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:32:10:e3:66:71:a5:95:d9:26:fb:58:04:03:39:b4:25:4f:
10:8a:60:6a:79:e8:ae:1e:1b:f2:16:30:01:0b:e4:5a:7d:73:
a7:a3:7b:e8:a6:21:34:78:74:d5:26:50:d3:12:d1:1b:ed:6c:
70:29:b3:85:f5:ff:34:32:d6:f7:0b:69:c9:80:02:9f:49:c8:
aa:06:48:74:ba:ac:56:1c:83:c5:3a:f1:cf:85:9a:9d:74:09:
c2:39:80:e0:ed:5a:d9:e2:a5:06:f5:e2:a1:ed:84:87:e1:64:
3a:f9:71:d6:86:38:15:e3:02:08:f1:ce:1c:2a:63:34:ba:84:
82:a6:2d:cd:6c:45:c2:a8:4b:c3:22:6e:33:6f:a5:53:51:f4:
36:7e:da:af:57:94:35:38:34:da:6f:89:cb:ef:9e:0f:55:0c:
c0:0c:17:78:9c:b4:bc:27:fb:73:9d:84:a4:e5:dd:91:75:b1:
0f:1f:ce:63:6d:97:7d:ce:16:d6:ae:de:d4:63:26:55:ac:c0:
f6:56:73:24:52:bf:85:c2:4a:ac:e5:79:2d:1e:d9:bb:6a:02:
4a:a2:13:81:e6:1a:8e:83:b0:9a:05:56:66:ce:cf:80:ca:72:
e1:4a:cd:be:2e:ea:ee:6c:68:9f:1c:62:80:13:0a:15:e0:9b:
e9:fe:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org