Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/Ku21p_Pv9a2kdXuXshW7SVlpSvw.roa
File: Ku21p_Pv9a2kdXuXshW7SVlpSvw.roa (raw, json)
Hash identifier: r0T51XDZNkcql7rguxCDYxXZOP0w5XjlmR4If/M6Nqw=
Subject key identifier: 2A:ED:B5:A7:F3:EF:F5:AD:A4:75:7B:97:B2:15:BB:49:59:69:4A:FC
Certificate issuer: /CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
Certificate serial: 01856F5DB90D4E470D858893C32C4ED36137
Authority key identifier: 25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/Ku21p_Pv9a2kdXuXshW7SVlpSvw.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51082
IP address blocks: 212.52.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b9:0d:4e:47:0d:85:88:93:c3:2c:4e:d3:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aedb5a7f3eff5ada4757b97b215bb4959694afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:ec:7e:2f:e7:24:d0:64:2d:f2:1f:0b:74:
9d:5d:59:20:ab:d0:72:30:ca:36:f0:43:f4:b0:e7:
51:7c:e7:2b:3b:80:ca:fe:f3:31:50:e6:5b:31:ef:
bc:a7:68:31:e7:94:f0:e9:65:3e:ca:16:fd:3c:44:
9e:53:b6:5b:96:b7:e2:90:c5:50:e1:dc:8e:d5:2c:
fc:3a:f9:79:91:ca:10:bc:7b:f0:40:56:67:a1:cb:
0d:40:04:42:dc:e2:10:b4:66:44:7f:20:b7:d0:6e:
6b:a5:99:8f:0a:5a:e5:f2:95:37:82:6f:68:76:0b:
21:9b:5d:7e:4e:92:1c:9e:d3:46:e6:c4:55:ba:2d:
0c:44:f4:e0:93:9a:8e:48:7e:79:27:73:25:81:ca:
1e:d5:80:f2:dd:b7:f7:d5:0a:7c:2c:93:2c:e3:f1:
97:53:31:9f:af:40:c7:d8:02:b5:bb:36:79:42:96:
39:cb:5b:12:fb:cb:0d:cb:98:1d:d8:2f:d4:62:1c:
4b:c9:f8:ad:b5:cc:d6:64:f8:9b:8e:0a:71:54:ea:
bb:8e:b4:d3:f5:c4:f5:79:ff:ce:fc:d2:8d:82:47:
53:a4:d5:d5:8f:57:46:d4:dc:78:e7:ca:44:e5:b7:
2b:f4:bb:c5:54:72:6e:32:b0:2d:cd:6f:ae:04:ab:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:B5:A7:F3:EF:F5:AD:A4:75:7B:97:B2:15:BB:49:59:69:4A:FC
X509v3 Authority Key Identifier:
keyid:25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/Ku21p_Pv9a2kdXuXshW7SVlpSvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/JTg9Nbnmq7MF_1ePC4go6KUA6sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:f1:9c:f7:b9:b3:8c:d7:59:53:77:0d:ba:13:6e:6b:9f:73:
5e:db:58:d2:45:93:e5:dc:ca:e2:60:b3:81:96:2f:f7:3a:c8:
94:74:46:61:9e:31:b5:d8:ef:53:9a:1d:ab:16:b9:54:3a:a3:
86:45:e1:83:52:fb:5a:5b:57:35:f0:41:b8:1f:6d:3e:c1:5c:
98:9f:da:08:c2:3f:f9:9f:5c:74:7c:e1:49:19:37:96:fc:2f:
53:73:40:34:1b:a6:c5:09:89:ce:d9:7b:40:e1:e6:99:9f:d2:
97:40:fd:4b:f8:d4:2a:80:2e:2e:5a:50:b5:81:ff:35:b0:86:
93:e5:2e:90:61:c7:6f:7d:9b:12:d7:99:f3:5b:ea:80:06:e0:
24:32:a3:b1:3c:e6:0d:06:a4:ad:73:75:b5:06:4c:04:87:a0:
69:3f:4e:ef:82:79:01:94:27:13:8b:0f:31:e3:25:88:45:4e:
b0:17:33:6b:fb:ef:a0:69:e8:c9:1e:be:42:90:db:6e:cd:b2:
68:72:55:80:aa:15:cd:ca:e9:30:a4:27:a9:5f:8e:49:04:d3:
6d:c2:15:b6:c8:3d:41:90:e9:a6:3c:50:07:ee:b2:8b:d1:8e:
d6:2f:e9:c7:16:a9:e8:d0:27:f0:46:c7:51:26:42:ab:ca:45:
97:75:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:29 2024 by rpki-client on console-fra.rpki-client.org