Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48abfc-dc94-482e-b5d1-cef9afdaf3c3/1/vVvjXRqJlmPvxqMVBkfPUgsO4tE.roa
File: vVvjXRqJlmPvxqMVBkfPUgsO4tE.roa (raw, json)
Hash identifier: NSjgCxTYGvz443Zb/zviUYeJqpFksuGVAC5k4l4ds+g=
Subject key identifier: BD:5B:E3:5D:1A:89:96:63:EF:C6:A3:15:06:47:CF:52:0B:0E:E2:D1
Certificate issuer: /CN=586b35b86d7c326c90ececb2294647e223bd2858
Certificate serial: 01856BCA3EFBE1DE63E398F45304B559F8E3
Authority key identifier: 58:6B:35:B8:6D:7C:32:6C:90:EC:EC:B2:29:46:47:E2:23:BD:28:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGs1uG18MmyQ7OyyKUZH4iO9KFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48abfc-dc94-482e-b5d1-cef9afdaf3c3/1/vVvjXRqJlmPvxqMVBkfPUgsO4tE.roa
Signing time: Sun 01 Jan 2023 05:24:54 +0000
ROA not before: Sun 01 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202790
IP address blocks: 212.18.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3e:fb:e1:de:63:e3:98:f4:53:04:b5:59:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b35b86d7c326c90ececb2294647e223bd2858
Validity
Not Before: Jan 1 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd5be35d1a899663efc6a3150647cf520b0ee2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:17:f9:66:67:5e:94:44:c2:28:e2:de:76:
ce:ae:74:cb:34:c4:2a:62:0a:4e:f1:d0:05:d1:63:
6a:07:2b:73:52:4b:64:1e:e2:ff:e5:cf:b7:51:19:
f7:ce:58:0b:be:49:cc:f5:1f:63:66:e7:75:8c:0f:
b8:aa:d4:f7:94:53:2c:f5:d0:b1:d1:43:05:ff:b7:
e7:b9:74:c2:ea:8a:b0:6c:ac:b9:c7:34:76:12:89:
9a:93:f4:5e:d6:3b:43:bc:8c:a8:92:67:e3:b6:2b:
2a:5e:d7:14:d4:81:3b:6c:0a:41:29:f0:6c:60:04:
3d:26:ca:3e:9b:a3:8c:bb:07:b9:8f:90:cb:9f:35:
2b:5d:e8:e0:60:c6:c0:59:c3:90:f2:b0:a2:fc:09:
27:13:ee:74:6a:67:07:bb:40:38:d7:6e:39:38:2d:
f9:4b:89:36:85:5e:b5:5c:44:67:c6:0b:bf:02:af:
eb:4f:eb:1f:9d:69:35:59:96:48:87:64:10:c6:4c:
4d:73:25:1e:3e:31:5a:b7:d7:30:f5:29:98:f8:e4:
df:1f:30:23:5d:5b:37:f5:e2:38:38:91:01:3e:94:
2c:df:66:d3:fa:35:d8:35:c9:e8:f4:da:1b:20:cb:
0a:f3:00:ea:45:d9:0a:de:18:99:42:1f:9e:db:9e:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:E3:5D:1A:89:96:63:EF:C6:A3:15:06:47:CF:52:0B:0E:E2:D1
X509v3 Authority Key Identifier:
keyid:58:6B:35:B8:6D:7C:32:6C:90:EC:EC:B2:29:46:47:E2:23:BD:28:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGs1uG18MmyQ7OyyKUZH4iO9KFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48abfc-dc94-482e-b5d1-cef9afdaf3c3/1/vVvjXRqJlmPvxqMVBkfPUgsO4tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48abfc-dc94-482e-b5d1-cef9afdaf3c3/1/WGs1uG18MmyQ7OyyKUZH4iO9KFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.121.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fd:e5:0d:91:d4:d8:fc:ff:fd:67:ed:b2:22:b5:c0:5c:48:
f5:ed:67:35:15:b7:58:32:86:3f:fe:db:77:b2:9a:70:b4:93:
1a:53:47:f7:05:a4:35:63:7f:46:ec:e8:3e:f9:d5:e7:4f:80:
96:4b:07:7a:62:2f:83:1d:00:a9:32:95:1c:7d:ad:57:a5:de:
ea:83:a6:9b:18:e9:46:79:45:1e:4e:37:02:b8:a3:0f:b2:51:
93:e9:24:af:aa:39:b5:d8:bd:42:ae:f2:df:d6:9e:3f:64:2c:
ef:2f:ba:13:69:89:f1:46:49:c1:aa:09:ee:89:2a:20:81:d0:
04:63:18:7f:47:ed:a7:59:c5:0b:66:b8:e6:e5:8e:70:b1:fe:
73:b6:4b:a4:08:da:34:a7:70:64:22:f0:f1:64:8c:08:18:c4:
02:26:cf:c8:8e:42:5f:49:25:b8:09:c9:4a:30:1e:5a:1a:a6:
8a:7e:96:71:f8:f5:a8:73:05:72:3e:dc:35:95:5f:81:77:2e:
2f:0d:2f:07:89:b0:49:b1:1e:de:5e:78:64:bc:c3:4c:4e:1f:
82:10:3e:f9:8e:a1:6b:0f:21:ae:0f:0d:e0:41:81:a3:81:76:
7b:4c:11:9a:eb:49:63:c5:27:78:5d:3a:12:50:77:c2:19:c2:
05:20:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:47 2024 by rpki-client on console-ams.rpki-client.org