Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/8o7Np9Mx3c7x_rnVSHTYxFahjHU.roa
File: 8o7Np9Mx3c7x_rnVSHTYxFahjHU.roa (raw, json)
Hash identifier: uprS6pCVCz/y0+jL0aKBgWDmcjXuX5uhGLVZLtCIyPs=
Subject key identifier: F2:8E:CD:A7:D3:31:DD:CE:F1:FE:B9:D5:48:74:D8:C4:56:A1:8C:75
Certificate issuer: /CN=b00bc3444c7690f6c7ab79dc1c4f4340ba0cc9b4
Certificate serial: 018570708C3E24E7A4CECA9A049CF4E94C4D
Authority key identifier: B0:0B:C3:44:4C:76:90:F6:C7:AB:79:DC:1C:4F:43:40:BA:0C:C9:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAvDREx2kPbHq3ncHE9DQLoMybQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/8o7Np9Mx3c7x_rnVSHTYxFahjHU.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 212.52.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8c:3e:24:e7:a4:ce:ca:9a:04:9c:f4:e9:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00bc3444c7690f6c7ab79dc1c4f4340ba0cc9b4
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28ecda7d331ddcef1feb9d54874d8c456a18c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:51:dd:13:38:46:2f:7e:a2:7d:e5:49:e9:
38:a5:57:b4:77:e2:0a:a2:4f:b5:b7:8b:f4:50:0d:
d5:83:51:47:87:f0:9c:d0:f0:61:74:cf:d1:01:fd:
38:40:ec:e7:74:c1:60:6c:68:fc:b2:9d:22:54:0f:
26:b0:13:65:69:e5:4f:ed:d3:f1:b7:5d:3b:d1:6a:
e6:e1:9a:8c:15:4b:fe:96:ba:04:18:c0:20:25:47:
7e:36:5e:1a:b4:58:9c:13:99:1c:7a:ba:d1:fa:7f:
76:83:9e:d0:99:40:43:a4:d8:86:ec:09:13:de:6c:
23:eb:8b:ad:59:9b:fa:fb:7d:72:c9:3b:05:9c:93:
26:92:cb:c5:5b:a5:68:11:c1:f3:cc:66:68:f9:cb:
7d:bc:e1:f0:1b:fa:38:c2:8e:26:88:1c:d7:73:24:
38:01:a6:07:8b:04:b9:56:48:ec:7b:2e:91:50:e9:
95:92:b4:de:16:73:68:f3:8e:b1:68:67:5f:ff:c5:
52:d7:21:a6:fc:78:99:3c:75:bf:45:61:3a:4c:29:
9f:34:c8:23:e9:30:58:ca:cd:d5:e1:8b:ee:c7:e2:
78:47:65:1e:56:1c:7c:0a:ad:46:f9:14:86:88:fb:
86:11:85:17:b5:7c:ca:b8:21:7a:55:9a:22:77:4e:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:CD:A7:D3:31:DD:CE:F1:FE:B9:D5:48:74:D8:C4:56:A1:8C:75
X509v3 Authority Key Identifier:
keyid:B0:0B:C3:44:4C:76:90:F6:C7:AB:79:DC:1C:4F:43:40:BA:0C:C9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAvDREx2kPbHq3ncHE9DQLoMybQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/8o7Np9Mx3c7x_rnVSHTYxFahjHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/sAvDREx2kPbHq3ncHE9DQLoMybQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.26.0/24
Signature Algorithm: sha256WithRSAEncryption
96:22:4b:35:30:31:99:85:0a:1a:b0:f2:f0:01:28:2b:e2:f0:
14:63:bb:a9:47:ba:16:03:e0:34:ac:51:4f:bc:90:60:65:fa:
d7:15:ff:c6:b9:94:02:c7:de:99:12:ab:2e:1d:a2:bb:74:aa:
27:23:1c:95:80:a2:1f:18:04:9e:4e:37:75:ec:d2:ab:ae:ba:
e0:80:b1:e6:1c:2a:6c:a6:b4:ae:a5:3a:ce:1b:a1:ff:9e:e6:
15:f4:22:b8:6a:40:49:3d:79:43:2d:e5:a3:24:e0:a3:30:cd:
6d:02:75:67:cd:e8:9c:61:48:fa:c2:33:c5:ec:2c:ee:49:32:
0d:93:c1:26:0c:3a:34:33:47:cf:18:16:7a:08:4f:ae:53:de:
8d:41:c1:5e:1e:cb:50:e7:a8:bd:95:bf:52:e9:88:e9:94:90:
9c:f4:2c:63:8f:7e:6a:6b:0b:7e:f2:95:15:78:ba:9e:72:7c:
da:cc:08:ca:d8:d5:de:58:32:31:6e:8a:38:6d:5b:c7:e8:6b:
ee:f3:bd:55:d6:ab:bf:38:a4:9a:2f:b1:e2:38:87:65:20:52:
c8:51:39:48:4e:29:50:a8:78:be:21:74:6f:e0:d3:dc:a2:d1:
7c:ac:bd:42:6b:a7:d4:a2:76:15:e5:af:ab:15:1d:1c:9a:b9:
9a:07:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:58 2024 by rpki-client on console-ams.rpki-client.org