Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/jy32GH5xSSKjOrD_7suveKULl1g.roa
File: jy32GH5xSSKjOrD_7suveKULl1g.roa (raw, json)
Hash identifier: KpkNFaM1xwS0mTpeIxoiwTYG3wJ3xPitMHMr39huVbQ=
Subject key identifier: 8F:2D:F6:18:7E:71:49:22:A3:3A:B0:FF:EE:CB:AF:78:A5:0B:97:58
Certificate issuer: /CN=b00bc3444c7690f6c7ab79dc1c4f4340ba0cc9b4
Certificate serial: E9474B
Authority key identifier: B0:0B:C3:44:4C:76:90:F6:C7:AB:79:DC:1C:4F:43:40:BA:0C:C9:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAvDREx2kPbHq3ncHE9DQLoMybQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/jy32GH5xSSKjOrD_7suveKULl1g.roa
Signing time: Fri 18 Feb 2022 20:46:35 +0000
ROA not before: Fri 18 Feb 2022 20:46:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 212.52.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15288139 (0xe9474b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00bc3444c7690f6c7ab79dc1c4f4340ba0cc9b4
Validity
Not Before: Feb 18 20:46:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f2df6187e714922a33ab0ffeecbaf78a50b9758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:3f:a8:83:23:93:bf:59:dc:10:0f:4f:57:
93:3e:46:cb:5a:3d:66:9f:07:77:bd:d2:fd:1d:4d:
6a:bd:e2:70:b6:73:d5:2d:d9:7a:40:cb:9b:0e:cf:
95:5a:c7:f7:c2:04:cd:69:21:72:3f:b9:b2:43:7f:
fa:2e:e4:f1:36:28:87:11:a6:bb:2e:39:70:73:4f:
01:4b:b7:52:d1:8e:14:a3:37:49:37:58:69:dc:10:
bf:46:b2:c7:87:22:a5:5f:5f:d9:25:7a:81:e7:40:
76:0e:a5:d0:b6:68:e3:1f:80:79:da:82:9f:7e:55:
69:95:76:4e:54:96:ac:4e:ab:a8:dd:ee:ce:a4:85:
e0:5a:db:fa:f4:d8:79:8c:a8:da:55:55:76:b6:1f:
eb:d5:04:53:d0:f4:0c:66:99:36:55:6d:24:84:7d:
71:25:a5:5a:5d:9e:4f:b9:2c:1a:1e:b3:dc:6c:47:
07:ca:a0:1a:1f:16:7d:4e:4c:b4:af:7d:35:b2:37:
63:1b:90:20:00:e6:3f:6c:9b:ed:e0:0a:41:fb:9b:
fb:df:42:e4:fc:2d:74:ec:7c:02:32:75:16:50:41:
c2:1a:70:28:95:d6:e7:cb:49:14:6d:6d:05:7c:90:
35:c9:59:76:0e:fe:f1:31:51:d2:3a:ba:a9:9f:93:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:F6:18:7E:71:49:22:A3:3A:B0:FF:EE:CB:AF:78:A5:0B:97:58
X509v3 Authority Key Identifier:
keyid:B0:0B:C3:44:4C:76:90:F6:C7:AB:79:DC:1C:4F:43:40:BA:0C:C9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAvDREx2kPbHq3ncHE9DQLoMybQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/jy32GH5xSSKjOrD_7suveKULl1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/43acdf-ac0d-45b2-9127-b181140e5c97/1/sAvDREx2kPbHq3ncHE9DQLoMybQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.26.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ce:1c:bf:90:62:17:bb:ba:07:24:e9:be:d5:85:7e:91:04:
72:78:44:10:cc:98:4f:ec:e7:13:89:21:cd:1e:7c:c0:df:4b:
57:aa:44:a0:c6:aa:fa:00:37:ea:09:3d:c2:2b:e9:1a:bb:4a:
86:c5:d1:fe:e9:14:8e:57:db:9c:3d:40:9a:49:a4:d5:67:66:
f5:97:ad:18:d7:68:50:10:52:d3:3e:3c:d5:26:fb:fd:65:4f:
d3:b0:9c:b2:4d:21:7e:82:87:18:ab:b1:d2:c9:a7:2e:fa:39:
f3:3f:07:b1:f5:cf:62:6d:e7:e7:93:53:07:df:b6:d2:f4:b0:
63:eb:9f:e8:07:25:bb:7b:ef:ec:3a:1a:71:52:08:35:c1:66:
f2:ac:2f:5c:fb:07:e6:4e:2f:b0:f5:58:6f:93:f4:75:69:2c:
4b:e9:0d:56:3d:09:62:9b:58:b5:2a:76:58:8f:a0:c3:f7:af:
c2:06:0b:72:a2:0d:03:e1:fb:5e:bf:a7:66:a1:b6:15:c1:da:
6b:ce:e5:ca:8c:30:11:54:b5:46:e5:f7:03:88:63:c7:8f:c2:
8e:c3:11:b6:36:03:3c:e5:9f:ee:c4:e1:f4:11:48:d9:ed:de:
30:a6:4f:54:6a:56:2b:e1:07:37:e4:a3:76:00:e3:78:f2:3e:
15:75:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:58 2025 by rpki-client