Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/ATkqo-9qbIkZ_1B1rHNu-KZSeVU.roa
File: ATkqo-9qbIkZ_1B1rHNu-KZSeVU.roa (raw, json)
Hash identifier: ADk1lgz9d55Iud6O3WlF91IgEFGy7XMGKvVRNaryVKM=
Subject key identifier: 01:39:2A:A3:EF:6A:6C:89:19:FF:50:75:AC:73:6E:F8:A6:52:79:55
Certificate issuer: /CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Certificate serial: 01856FCB91150FFDB9E81F44803D4E795674
Authority key identifier: 25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/ATkqo-9qbIkZ_1B1rHNu-KZSeVU.roa
Signing time: Mon 02 Jan 2023 00:04:50 +0000
ROA not before: Mon 02 Jan 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 212.52.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:91:15:0f:fd:b9:e8:1f:44:80:3d:4e:79:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Validity
Not Before: Jan 2 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01392aa3ef6a6c8919ff5075ac736ef8a6527955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:d6:ff:59:df:19:9d:d3:a7:d9:26:69:a3:
f7:92:9c:c0:ae:cb:40:b1:01:14:72:8c:47:01:10:
e5:b1:a4:cb:8a:c7:23:1e:5d:bb:bd:1d:6f:e6:42:
92:0f:2a:f7:c6:1d:27:4e:17:7f:16:8a:87:5b:28:
6f:c4:de:7d:b3:ef:1b:ae:d7:10:4b:7f:a8:26:39:
2b:1e:18:27:57:3a:99:42:39:54:4c:a7:4e:a9:62:
74:46:cc:ac:1a:2f:62:3a:0d:41:eb:06:bc:1e:28:
f8:96:e3:5e:08:7f:61:ca:1f:f9:e6:ab:32:0f:19:
69:a9:ae:18:64:c2:16:57:d0:85:e4:a5:ec:23:30:
6f:2e:f2:ba:64:5d:2c:b9:b8:62:3c:1c:dc:e1:6c:
c5:9c:b0:e5:88:9d:71:ec:14:bc:52:cf:52:f4:59:
8f:1d:ec:65:a4:21:7e:58:8a:e4:e1:35:9e:a6:ac:
41:63:66:bb:40:75:61:87:c5:de:b7:54:1b:f9:35:
b5:0d:2a:81:94:73:0e:a1:0e:a5:10:ea:66:4e:44:
9e:63:9b:10:02:1d:57:08:5a:bb:e6:af:e8:f3:0f:
97:65:c8:03:46:4e:e0:3c:af:9f:f4:24:d0:46:6c:
c4:ea:2a:6f:0d:37:e5:5c:2f:ef:cd:2d:eb:01:fa:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:2A:A3:EF:6A:6C:89:19:FF:50:75:AC:73:6E:F8:A6:52:79:55
X509v3 Authority Key Identifier:
keyid:25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/ATkqo-9qbIkZ_1B1rHNu-KZSeVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.23.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c6:8e:de:a1:b4:ff:1c:b4:bc:6b:bb:45:bc:51:c5:23:ef:
05:81:6c:25:00:4a:c8:b9:94:2b:5b:20:0e:d2:39:41:86:ef:
c6:f1:da:4a:aa:30:e7:dc:c5:3a:ca:0d:dd:47:f6:37:15:8a:
cc:b7:5b:c8:c5:a0:27:73:60:6c:ee:f4:e5:12:fb:36:28:29:
e3:c5:50:0a:22:a6:56:5c:b0:e6:30:0c:75:d5:76:60:c9:97:
22:91:80:05:6b:35:e1:55:81:97:2f:9b:f8:f6:fd:d2:60:54:
9d:0b:75:fd:34:06:43:46:5e:49:b5:11:d4:a0:4c:51:92:43:
d5:b9:b6:9e:f9:15:8b:6f:a0:6c:a4:db:b6:c9:33:76:27:5c:
7e:b3:63:a3:14:95:c8:1b:c2:00:0e:dd:2c:d7:b0:6e:2c:25:
37:25:43:d3:fa:53:50:86:68:fa:2b:30:ba:a1:a7:c2:b3:48:
d3:21:eb:c3:38:66:32:9b:9d:25:90:f0:1a:45:10:e1:3c:9d:
28:7b:25:0c:b7:04:e2:3f:fe:e8:01:2c:72:cf:5f:55:74:cf:
a0:68:dc:3e:e3:6c:58:22:c3:0a:1f:06:1c:b7:fd:ca:b5:61:
cb:56:86:86:c0:5b:f3:69:a1:62:f9:1a:05:0b:5a:8f:ad:f7:
6e:67:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:01 2025 by rpki-client