Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa
File: m0disnyKYb6jc4TGsz-lZHwahXM.roa (raw, json)
Hash identifier: Gxfgogm7uTsuxM8xkLEm60JU1mCiSxdydIOFVGLVRdY=
Subject key identifier: 9B:47:62:B2:7C:8A:61:BE:A3:73:84:C6:B3:3F:A5:64:7C:1A:85:73
Certificate issuer: /CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Certificate serial: 0185729ED46660932FC799ECF51B9885E734
Authority key identifier: 51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 212.52.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d4:66:60:93:2f:c7:99:ec:f5:1b:98:85:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4762b27c8a61bea37384c6b33fa5647c1a8573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:60:01:3f:45:57:a5:66:55:c1:1f:74:6c:
9f:76:15:39:1d:ea:c9:ad:81:42:60:2e:10:55:34:
d4:15:8b:e9:92:6b:fe:2c:bd:ef:99:3b:66:7b:e6:
99:13:31:0c:e8:43:bc:51:c4:0c:e2:fc:17:34:11:
f3:0a:69:3e:76:ce:b3:2b:84:69:72:fe:e2:b8:70:
94:f7:49:cd:7f:e9:85:7f:48:d2:37:b3:bd:40:47:
d8:c1:20:7c:ee:01:e5:30:79:7f:82:50:ae:c8:b9:
1a:bc:20:33:99:4a:9a:c4:1e:63:0d:0f:05:c3:f4:
21:06:a3:58:10:2d:9c:9b:8a:53:fc:ba:82:aa:d2:
af:1c:b3:56:cd:08:6f:59:2f:73:2f:93:5c:b3:ec:
01:67:60:21:da:19:d3:e5:65:c8:ca:07:fb:f1:6b:
bb:06:e1:7e:5d:bd:49:52:a2:71:b5:55:db:66:32:
97:26:08:8c:51:b5:7a:38:da:c1:7d:4b:75:57:3a:
01:92:2a:fd:b1:e0:4a:ce:13:17:5d:b0:01:2a:f5:
25:08:b5:ff:b7:b9:b6:f3:cd:44:9e:0b:99:ac:36:
e4:ef:93:2b:80:88:e0:d4:74:da:1b:77:2e:e8:44:
85:09:1b:54:5f:ba:26:06:3a:4d:93:36:1a:53:a1:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:62:B2:7C:8A:61:BE:A3:73:84:C6:B3:3F:A5:64:7C:1A:85:73
X509v3 Authority Key Identifier:
keyid:51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/m0disnyKYb6jc4TGsz-lZHwahXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.25.0/24
Signature Algorithm: sha256WithRSAEncryption
25:15:c1:cd:d4:22:a0:8e:d3:6c:ce:d7:66:bf:10:18:75:43:
d2:29:7c:62:0a:f1:54:5a:19:0b:ec:90:ed:98:be:64:e0:83:
d5:b6:68:a1:06:46:de:a6:e2:ca:10:57:2e:5d:bd:6c:67:cc:
e1:a3:8c:37:ca:03:9a:96:c8:00:35:56:5d:19:f6:32:90:6e:
54:49:57:bc:60:1c:bc:ec:99:3b:ac:b7:a8:14:ef:3d:16:a0:
65:47:f1:21:23:13:9a:7e:55:51:fc:09:ab:ad:b9:19:a0:77:
90:c4:38:b6:03:ee:e1:9d:2d:a8:41:1c:59:32:fa:69:c7:1e:
7d:05:85:4f:33:1d:44:3b:e7:08:1b:e1:60:96:02:4d:fb:e3:
f8:09:ab:bc:fa:96:e7:5d:71:0b:f9:b9:89:f9:54:65:e7:e4:
67:77:7f:6b:18:c7:82:e6:9e:60:29:e0:a4:9a:26:fd:11:83:
de:39:d7:8f:10:6b:d0:20:07:55:f7:11:63:a6:bd:72:98:13:
e5:8b:6a:e3:6d:de:02:a4:0a:17:d7:af:ae:d2:3a:8f:ef:a7:
d4:6b:1e:6e:1f:4f:30:62:9d:96:f9:d8:4b:e2:ac:65:db:77:
fd:6d:29:e5:5d:19:6c:1e:2a:ec:c7:a3:b4:fe:25:6f:c3:9c:
8f:7b:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 10:07:46 2023 by rpki-client on console-ams.rpki-client.org