Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8JKKdalyITl2sMAo04S_Nw1V7iI.roa
File: 8JKKdalyITl2sMAo04S_Nw1V7iI.roa (raw, json)
Hash identifier: 9e5HULSbdHvtEp3mgBi06NHtKgCWOdCPpzcBdFJJ/Ko=
Subject key identifier: F0:92:8A:75:A9:72:21:39:76:B0:C0:28:D3:84:BF:37:0D:55:EE:22
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 01857C43E276F20F9E64DC879A8AA1B6116A
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8JKKdalyITl2sMAo04S_Nw1V7iI.roa
Signing time: Wed 04 Jan 2023 10:11:41 +0000
ROA not before: Wed 04 Jan 2023 10:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213357
IP address blocks: 212.25.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:43:e2:76:f2:0f:9e:64:dc:87:9a:8a:a1:b6:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Jan 4 10:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0928a75a972213976b0c028d384bf370d55ee22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:f4:16:fe:78:73:71:4e:95:02:22:53:db:
b9:63:3a:66:c3:50:5f:30:50:09:26:48:e5:ea:c6:
3e:28:40:24:d6:bf:75:0b:57:20:84:2f:ef:d5:c1:
ce:ad:56:a1:82:3b:16:a6:31:67:cd:d5:15:a5:5b:
6a:63:cd:46:6b:42:4c:7f:ed:eb:26:4c:2f:a1:05:
2d:91:50:4a:65:97:8d:de:a8:4b:e9:8a:a6:bb:4f:
08:4f:52:87:32:58:15:7c:bc:7e:13:7d:55:8a:79:
6e:f7:26:61:44:f5:7c:c0:aa:1b:9f:d2:c6:01:09:
aa:aa:03:10:fc:53:f1:9b:7e:3e:54:65:bc:f1:fb:
55:ef:35:e7:b6:aa:73:5b:77:1d:52:5c:bc:72:73:
71:fb:b0:9b:19:dc:63:bd:70:15:93:c4:aa:65:6c:
a7:d3:05:ed:57:0e:50:d7:9c:f6:15:fa:00:d9:4e:
3e:80:9e:72:56:cf:4c:a4:ee:48:98:6c:58:88:23:
e5:67:0e:b8:51:52:8e:5d:70:3e:8a:1f:d5:e4:cf:
9c:f7:bd:bb:e8:10:dd:11:4e:b4:b5:1a:17:d4:37:
c2:86:8f:3c:76:d8:ea:9c:be:04:ad:34:b6:da:19:
79:12:68:32:ee:f8:63:cd:db:16:29:f8:89:60:3d:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:8A:75:A9:72:21:39:76:B0:C0:28:D3:84:BF:37:0D:55:EE:22
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8JKKdalyITl2sMAo04S_Nw1V7iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.25.56.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4e:c9:02:1d:d7:0e:53:10:9e:32:03:37:f2:cb:de:1b:1e:
ec:86:90:34:85:56:a9:a8:1c:d2:ad:df:88:38:36:05:02:67:
7a:61:00:85:57:22:e8:bb:3d:a2:75:4a:17:34:1f:3e:1c:69:
71:61:bd:83:46:53:a9:b0:02:dd:6c:44:a6:0e:67:18:66:da:
a3:47:1b:c8:f6:55:32:5a:9e:af:3d:17:82:cd:e3:a5:51:84:
cf:32:38:22:97:aa:5d:37:a1:dd:cf:a3:5c:17:dc:1b:03:97:
de:bb:74:9f:a7:b9:48:68:77:1d:96:d1:34:73:ed:59:08:ba:
b5:4a:30:ea:81:3f:fe:a2:54:b9:9d:51:ee:fc:aa:bc:b5:33:
23:45:5f:f8:e0:08:b4:7f:dd:20:4c:13:45:d9:fe:44:3b:1c:
6a:22:52:c1:ba:4e:92:a8:b4:21:e3:26:83:f2:c8:52:d2:e1:
4d:f8:6a:29:bd:da:d9:d9:c9:e7:80:de:ca:d5:54:66:bc:91:
4f:0b:7a:cc:48:4e:f8:56:16:1b:09:24:b2:d4:88:53:75:7b:
80:5f:c2:82:a6:9c:ff:fc:00:c6:59:b1:a5:cc:ee:e8:58:88:
f6:06:a7:9c:42:24:ef:e8:32:66:43:07:6b:6c:db:ad:f7:8b:
c4:f5:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org