Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/iAF_G2pV6xaP5Nj-qsoS4oadbEk.roa
File: iAF_G2pV6xaP5Nj-qsoS4oadbEk.roa (raw, json)
Hash identifier: IECPP9NLpamPhdTPI7U9mqRVwQfMG0AlNNmzakcRT5k=
Subject key identifier: 88:01:7F:1B:6A:55:EB:16:8F:E4:D8:FE:AA:CA:12:E2:86:9D:6C:49
Certificate issuer: /CN=9de68c02854f9dc6785912249522ab7509937e48
Certificate serial: 91B129
Authority key identifier: 9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/iAF_G2pV6xaP5Nj-qsoS4oadbEk.roa
Signing time: Sat 01 Jan 2022 01:59:34 +0000
ROA not before: Sat 01 Jan 2022 01:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.23.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9548073 (0x91b129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de68c02854f9dc6785912249522ab7509937e48
Validity
Not Before: Jan 1 01:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88017f1b6a55eb168fe4d8feaaca12e2869d6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:c1:c4:6e:47:04:de:cd:19:90:c5:ca:bd:
87:ce:79:72:50:9b:f1:fa:19:a9:42:41:ec:67:56:
5d:f4:93:8b:ed:f4:0b:42:4c:50:fc:f9:46:f4:d4:
a5:d3:4e:a4:98:a7:4f:86:af:45:67:69:00:a3:1d:
2c:75:9b:d6:cd:16:7b:ea:d7:52:5d:53:77:b9:7b:
7e:3e:f5:ab:f0:d0:0d:b7:32:d9:d4:2b:ce:08:3a:
1e:d2:a4:69:af:b6:ca:10:f2:ef:84:e1:43:a1:a5:
c3:93:8c:a8:52:2c:00:e0:0c:7d:1b:b7:26:51:60:
ed:b3:94:f8:80:09:a4:fb:e5:ec:ac:cd:57:b4:cb:
c5:0e:ea:b0:e7:b1:e7:6b:16:8c:06:0a:fb:1d:80:
ee:bd:19:0e:93:5a:bb:fd:a0:fb:6b:5f:8e:3e:da:
dc:c0:d4:d5:cb:6b:04:7f:98:38:6c:28:05:15:45:
15:28:d8:96:f8:c4:fa:b2:ac:d3:61:a7:39:03:ed:
c2:e7:a2:58:a1:5f:df:57:e4:ce:34:ad:11:ce:be:
fb:1f:a4:01:69:ad:55:76:93:df:0e:d2:0e:e7:a4:
49:5d:02:c0:8c:c4:ce:9a:ac:64:4e:b9:80:5e:c8:
5b:94:c5:d0:d3:e9:19:d6:67:dc:b8:b3:8a:f4:ac:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:01:7F:1B:6A:55:EB:16:8F:E4:D8:FE:AA:CA:12:E2:86:9D:6C:49
X509v3 Authority Key Identifier:
keyid:9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/iAF_G2pV6xaP5Nj-qsoS4oadbEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.203.0/24
Signature Algorithm: sha256WithRSAEncryption
93:29:4d:be:2d:10:09:9c:14:c3:5d:58:78:99:fc:12:58:42:
32:d8:be:f4:6e:c7:79:ea:1f:90:1d:f4:93:b6:93:ca:83:b3:
e7:85:f1:fe:17:b4:49:48:4e:a6:6a:f8:86:8c:70:b0:c2:8d:
e1:89:b9:a2:d3:17:c1:4e:81:f3:4a:b4:f0:f6:49:85:80:c5:
76:e9:ce:75:2c:6c:86:11:b1:6e:0d:06:cb:ae:60:7b:c3:a4:
c1:f2:f4:2f:15:0c:16:b6:71:c7:6b:37:2d:47:e2:06:30:35:
65:c4:0a:8c:2d:ad:6e:c4:ad:33:2c:73:2c:d7:de:2f:93:2a:
61:3c:55:ba:ca:0d:73:2b:ed:ce:ea:e8:27:08:5c:fc:67:20:
63:e3:6c:03:c4:cd:00:5e:45:1c:46:b4:e6:23:7a:76:bb:3c:
77:7c:94:87:9e:4f:0b:30:c6:dc:9b:96:e6:6f:7a:f4:1f:54:
08:1a:ad:93:1c:bb:9f:59:bb:04:cb:21:79:19:05:c0:ba:5b:
69:2d:89:e8:a2:70:a5:6c:e6:6d:9a:ed:8d:be:78:2d:63:8d:
a1:62:94:3d:e2:6b:19:0c:2d:7d:c4:7a:d6:6e:97:6c:e5:ee:
c5:4c:a3:d3:7e:26:a2:ab:9d:e3:54:70:e3:07:93:ce:22:40:
04:93:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org