Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/Cz_veIc5h32CUyo_p6CTo5eRpv4.roa
File: Cz_veIc5h32CUyo_p6CTo5eRpv4.roa (raw, json)
Hash identifier: 5VogBi/7gk99tQmV30FJA6HPric8POdD9nug2e/8fw0=
Subject key identifier: 0B:3F:EF:78:87:39:87:7D:82:53:2A:3F:A7:A0:93:A3:97:91:A6:FE
Certificate issuer: /CN=eb78a51f95e5a2bdca00792bff49323d1783a595
Certificate serial: 018572DEE91C2DC8BFB825F2D2A6672ED5F7
Authority key identifier: EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ilH5Xlor3KAHkr_0kyPReDpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/Cz_veIc5h32CUyo_p6CTo5eRpv4.roa
Signing time: Mon 02 Jan 2023 14:24:49 +0000
ROA not before: Mon 02 Jan 2023 14:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6876
IP address blocks: 212.24.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:e9:1c:2d:c8:bf:b8:25:f2:d2:a6:67:2e:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78a51f95e5a2bdca00792bff49323d1783a595
Validity
Not Before: Jan 2 14:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3fef788739877d82532a3fa7a093a39791a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:b5:1e:8a:b6:cb:ae:2d:e5:4a:d4:67:15:
8a:46:51:10:a3:d6:e5:6f:26:89:45:36:d1:7b:73:
76:32:d6:39:a2:6b:26:12:7e:3d:11:f6:8c:e0:fe:
13:6d:6b:41:3c:51:44:1b:ee:20:30:08:7b:40:b6:
6d:f3:ef:d4:27:b1:79:53:a7:5b:7f:4d:0b:2c:2e:
24:94:5f:ac:58:04:68:6f:d0:54:bf:23:5c:40:c5:
90:d7:a7:53:90:f5:2c:37:ad:03:c9:7c:83:de:0e:
3d:fe:e8:c9:66:6c:8e:81:fb:71:b5:9e:8c:c7:09:
42:fb:d6:57:4d:3a:21:80:82:ee:eb:37:37:29:5c:
22:6c:8b:26:e6:39:b1:1c:f5:bc:d4:c6:a5:5b:0a:
d8:d2:73:52:bc:5e:33:27:f6:92:ca:26:98:fe:f0:
34:6d:f0:bb:64:cf:2b:fd:c2:d7:a5:af:32:83:2e:
13:de:ba:de:c9:d9:fd:3c:3f:00:49:0e:ed:4e:fc:
59:69:4b:f4:81:f9:a7:31:c7:15:cb:22:3e:2d:a5:
6d:69:00:a6:1f:7d:68:5b:98:3e:7c:38:a7:10:71:
2e:dd:46:16:d9:75:1f:0f:4d:9a:98:81:dc:7c:e6:
67:77:5e:0a:9c:3c:5d:95:8b:b8:a2:df:fc:2b:c7:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:EF:78:87:39:87:7D:82:53:2A:3F:A7:A0:93:A3:97:91:A6:FE
X509v3 Authority Key Identifier:
keyid:EB:78:A5:1F:95:E5:A2:BD:CA:00:79:2B:FF:49:32:3D:17:83:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ilH5Xlor3KAHkr_0kyPReDpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/Cz_veIc5h32CUyo_p6CTo5eRpv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74637a-cf75-4f08-8fc7-03a4500e1040/1/63ilH5Xlor3KAHkr_0kyPReDpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:92:e2:3a:0d:23:08:90:40:83:70:43:ee:6d:da:e8:3c:75:
55:7a:3e:cb:5d:ce:4d:bc:6c:85:74:a7:e2:c3:cb:eb:38:c0:
a6:61:eb:b7:b4:e6:99:12:dd:a4:2f:bb:85:3f:7a:17:b6:24:
17:4a:47:6f:4e:87:b5:f6:cf:cd:7f:dd:c8:6e:9c:f3:67:0b:
c3:e8:d8:3a:15:9f:50:ee:ea:68:3b:0b:0f:e9:98:7d:83:91:
f2:08:f9:cb:c5:20:10:b0:db:38:50:9b:fb:c0:4e:6c:91:fe:
34:1b:64:bd:3d:58:54:a2:fa:cb:e0:de:1c:d9:c0:1a:94:74:
a6:61:f7:11:45:7f:4f:67:b7:3b:cc:92:ca:ef:01:a9:8d:61:
9a:17:92:91:e2:c4:c8:b5:ca:b8:b7:b3:51:98:b4:c0:86:c1:
2c:a2:a9:e3:a7:8a:3f:74:a0:ef:99:08:84:ae:95:de:00:26:
b6:e0:c1:2c:7e:c0:16:ff:28:b9:ed:38:2f:ed:d2:41:76:a8:
e1:68:45:32:69:5c:2c:eb:a9:c6:86:2d:58:58:7c:05:af:24:
20:d3:0a:42:2a:b9:16:28:1d:00:7f:76:03:8b:d0:a3:bd:72:
42:53:5e:b1:73:16:75:89:22:95:89:81:75:a5:84:29:52:4f:
d0:c3:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:33 2024 by rpki-client on console-fra.rpki-client.org