Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/pmKMy2AC6UIq894OP1UtEeB6Bok.roa
File: pmKMy2AC6UIq894OP1UtEeB6Bok.roa (raw, json)
Hash identifier: /xZSRs6xlWHYJD/6FtTUxZAxov4DR28olC1OyVWPt6s=
Subject key identifier: A6:62:8C:CB:60:02:E9:42:2A:F3:DE:0E:3F:55:2D:11:E0:7A:06:89
Certificate issuer: /CN=34f2c2a7b8c521dac8c25a4a498e7164a932da23
Certificate serial: 0C2E437E
Authority key identifier: 34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPLCp7jFIdrIwlpKSY5xZKky2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/pmKMy2AC6UIq894OP1UtEeB6Bok.roa
Signing time: Sat 01 Jan 2022 05:57:54 +0000
ROA not before: Sat 01 Jan 2022 05:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8989
IP address blocks: 212.70.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204358526 (0xc2e437e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f2c2a7b8c521dac8c25a4a498e7164a932da23
Validity
Not Before: Jan 1 05:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6628ccb6002e9422af3de0e3f552d11e07a0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:99:01:0f:fc:ed:da:c6:ed:d7:54:ea:73:
50:66:b9:e5:a0:73:82:22:c9:80:fd:43:0f:1d:27:
71:11:37:69:a6:03:90:c6:73:26:be:7d:e6:8e:5f:
40:ab:6a:c0:67:41:d8:ed:f9:b9:7f:9b:c2:53:29:
1a:d4:ba:73:65:57:83:fe:d3:5e:2b:c8:69:68:52:
11:7f:a1:20:e6:dd:1a:cf:fa:f2:ee:4f:01:86:3c:
6b:1f:98:c4:35:59:88:76:26:ba:40:22:6e:4c:b0:
68:27:62:1a:04:f6:bb:4b:c5:95:f7:a0:34:c3:ca:
62:f7:32:3d:93:14:c6:70:e9:02:9f:e3:b1:5a:ea:
ac:d5:53:d9:17:39:f8:82:11:97:c1:98:2b:e6:49:
1e:5f:50:0d:35:96:62:87:41:38:75:bc:1a:a0:78:
f3:4d:5d:b4:74:17:da:c0:3f:62:a8:07:a9:fd:39:
20:90:0b:a2:f9:e6:f6:6d:ea:9e:da:9c:74:22:93:
ce:6a:ce:48:da:1b:d5:bb:f1:8f:75:14:2b:8c:9d:
8c:46:51:27:f3:3c:17:c2:98:01:f7:71:dc:64:bd:
4a:6e:e6:db:1a:53:2e:ac:64:71:2a:57:16:5a:f4:
88:0d:80:8e:6b:c4:59:c9:f8:22:fd:7f:6d:af:c1:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:8C:CB:60:02:E9:42:2A:F3:DE:0E:3F:55:2D:11:E0:7A:06:89
X509v3 Authority Key Identifier:
keyid:34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPLCp7jFIdrIwlpKSY5xZKky2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/pmKMy2AC6UIq894OP1UtEeB6Bok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:90:07:54:35:e9:8e:90:b0:99:74:cf:19:d5:de:eb:07:ab:
48:b8:08:c5:ad:e4:5d:36:02:61:9e:3c:e7:a8:32:26:bc:82:
f1:ef:75:43:9a:0d:59:45:d1:b7:8a:f1:27:d9:91:37:ae:45:
a6:ed:b0:8c:58:8b:cb:f1:34:33:6e:81:59:f0:0d:f8:c8:ff:
7b:e8:f5:6e:f8:ec:17:a8:3b:10:26:10:db:22:71:8a:a6:a7:
9e:8d:20:14:3d:27:3b:17:95:af:48:3e:91:37:1d:af:46:e0:
52:7c:3f:58:17:b2:26:29:b4:49:f9:44:a7:70:4c:dc:3c:6f:
dc:a8:cd:18:11:54:25:7b:f4:b5:31:43:92:a9:3f:d4:3c:ee:
ab:66:7b:69:ad:53:d9:93:1c:69:44:c5:26:ba:0d:a8:9e:5b:
20:9e:f6:d6:ca:da:46:a7:0e:f5:1f:1c:92:43:a3:30:f9:d8:
6d:50:48:9f:c5:7c:7c:47:73:6c:29:c3:71:20:df:ba:d9:36:
bf:50:4d:f4:a0:97:de:58:c6:c9:3f:62:61:97:96:e2:e2:87:
91:2f:c8:07:c8:ef:62:bd:71:46:2f:36:eb:c3:58:92:ff:3a:
e6:64:38:43:7f:2e:d1:3f:4a:0d:c9:31:2a:3d:4a:21:32:62:
68:0c:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:33 2024 by rpki-client on console-fra.rpki-client.org