Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/pj9abcrRkx7CC_rZ8pv2oH7tGMI.roa
File: pj9abcrRkx7CC_rZ8pv2oH7tGMI.roa (raw, json)
Hash identifier: ivsBJoL5AkYIOoqMrgUn1Ntk3LEwZLie0DaBuOK32OM=
Subject key identifier: A6:3F:5A:6D:CA:D1:93:1E:C2:0B:FA:D9:F2:9B:F6:A0:7E:ED:18:C2
Certificate issuer: /CN=dee12d8c09292452c66b3a3521095333a9ecfe95
Certificate serial: 018CC6B82BAD065ECF2FF06BF652E4E5C562
Authority key identifier: DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/pj9abcrRkx7CC_rZ8pv2oH7tGMI.roa
Signing time: Mon 01 Jan 2024 20:30:07 +0000
ROA not before: Mon 01 Jan 2024 20:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211298
IP address blocks: 87.236.176.0/24 maxlen: 24
193.163.125.0/24 maxlen: 24
2a06:4880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:2b:ad:06:5e:cf:2f:f0:6b:f6:52:e4:e5:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee12d8c09292452c66b3a3521095333a9ecfe95
Validity
Not Before: Jan 1 20:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a63f5a6dcad1931ec20bfad9f29bf6a07eed18c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:7a:26:75:5f:7b:37:75:d9:07:7c:41:b8:
b8:3c:eb:12:96:73:49:e0:9e:e4:56:2c:3d:50:60:
83:47:3e:7d:20:7f:f4:93:1e:b4:d4:9d:84:39:6b:
d5:53:5b:cb:4c:2e:0e:b6:9f:5b:46:a6:60:01:70:
be:4d:9a:15:3c:37:7e:6f:1e:0a:b9:2c:58:5d:0a:
a5:54:34:84:a3:e1:fa:98:a7:6c:8a:46:8b:36:90:
20:36:2e:7b:a5:91:5b:dd:8d:bb:13:98:53:2b:5e:
41:6a:07:79:4b:24:a3:2c:e1:08:3b:cf:7c:48:66:
e5:85:09:e7:67:2d:23:99:04:04:9b:df:ae:94:8d:
9e:37:20:f2:69:56:12:11:16:27:13:0f:7a:d4:d3:
66:1f:ce:83:8a:e0:0d:6d:ab:e4:be:9a:9f:36:d0:
9b:7b:30:c0:82:d8:5b:8b:c5:f2:39:46:2c:9a:31:
c8:93:6e:43:7c:bb:80:a7:8b:a0:d2:d7:41:3b:62:
08:96:18:a1:c8:42:10:d1:fe:0b:e7:df:1d:04:fb:
ab:55:38:a1:3f:e6:9f:7d:67:93:0b:79:93:cc:3a:
95:b3:e5:3a:72:f0:e8:1a:94:c9:a0:1e:7a:35:77:
df:36:a7:3c:49:92:e9:03:70:f7:19:ba:8b:8c:ae:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:5A:6D:CA:D1:93:1E:C2:0B:FA:D9:F2:9B:F6:A0:7E:ED:18:C2
X509v3 Authority Key Identifier:
keyid:DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/pj9abcrRkx7CC_rZ8pv2oH7tGMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.176.0/24
193.163.125.0/24
IPv6:
2a06:4880::/32
Signature Algorithm: sha256WithRSAEncryption
45:1e:37:7d:fb:f2:5e:09:ea:4f:dc:48:ae:9e:c8:78:87:94:
68:f9:3c:07:51:91:87:f8:55:e6:4a:d6:30:f6:e5:ac:44:9f:
a5:2a:69:41:c2:ee:1a:42:14:5b:a3:98:f5:62:84:31:d8:b3:
e9:92:06:9d:98:0d:16:ca:ad:89:8d:a7:c8:85:71:ad:59:a3:
da:52:f4:b3:97:16:5c:4c:bf:d3:c3:03:92:d8:0d:87:22:96:
76:01:57:84:9e:6a:3c:32:2f:29:3f:39:97:4e:61:90:d7:74:
73:c2:a4:15:07:62:0f:87:40:5f:ed:8e:89:c5:42:93:44:71:
de:d3:80:9f:f1:b9:04:21:01:30:39:ca:bb:42:fa:72:e5:da:
c6:27:de:a2:19:eb:ad:89:c1:45:1d:1d:36:aa:94:12:d9:af:
f2:3d:d1:e4:4f:c4:5c:97:a9:f4:4e:1d:19:a2:ff:61:56:52:
d2:49:85:bd:17:f8:ae:53:b4:65:a4:c0:6c:ea:97:5e:5b:7e:
e2:93:f7:d1:a7:e5:28:4f:77:44:60:2f:03:13:bc:04:b5:f7:
f4:99:e5:e2:79:af:04:5f:b8:3c:b1:88:a2:96:f4:b3:bb:40:
73:7d:be:54:1f:24:66:6a:3a:e0:e5:68:65:8e:86:82:f0:b2:
63:e1:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:43:43 2024 by rpki-client on console-ams.rpki-client.org