Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f955ef-d8ad-449d-8060-fe243437dfd5/1/zEq9N5UOpgBrBIxJbs7R_rVRuOg.roa
File: zEq9N5UOpgBrBIxJbs7R_rVRuOg.roa (raw, json)
Hash identifier: eabE8RrtzxnQQ2I3eGi+sH76zS+NlQFReBFhbp2MSAE=
Subject key identifier: CC:4A:BD:37:95:0E:A6:00:6B:04:8C:49:6E:CE:D1:FE:B5:51:B8:E8
Certificate issuer: /CN=1cc56cfde7153c116efab52688cac9abd3bf2a5a
Certificate serial: 01856CAF33E2252EC25D2316B0EB8DCEEF00
Authority key identifier: 1C:C5:6C:FD:E7:15:3C:11:6E:FA:B5:26:88:CA:C9:AB:D3:BF:2A:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMVs_ecVPBFu-rUmiMrJq9O_Klo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f955ef-d8ad-449d-8060-fe243437dfd5/1/zEq9N5UOpgBrBIxJbs7R_rVRuOg.roa
Signing time: Sun 01 Jan 2023 09:34:59 +0000
ROA not before: Sun 01 Jan 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.52.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:33:e2:25:2e:c2:5d:23:16:b0:eb:8d:ce:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc56cfde7153c116efab52688cac9abd3bf2a5a
Validity
Not Before: Jan 1 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4abd37950ea6006b048c496eced1feb551b8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:2d:6b:50:50:db:ff:5f:38:37:46:d8:fd:
f8:d7:ed:05:b8:8f:22:96:37:29:8d:8f:38:07:c2:
fb:f3:0d:d5:06:1f:91:06:5a:1c:1f:ba:e1:bb:ce:
56:0b:2d:7c:2f:56:62:4b:71:16:78:b2:ab:2a:74:
cb:67:c7:d1:64:d1:35:d1:fb:f5:89:37:85:a0:ed:
04:d5:12:51:11:b0:95:d7:cc:8c:46:a9:9a:01:39:
a0:2c:89:8e:0d:39:ba:fe:68:e4:7a:b5:15:27:fc:
e4:14:d3:a6:ca:0b:ce:52:47:3e:99:bf:17:53:88:
da:70:da:90:56:92:41:57:43:03:2d:23:82:5a:65:
92:e1:fa:63:d8:9c:74:90:e5:f8:3b:bc:8b:54:4f:
3b:d2:a9:ef:4c:a8:39:c0:c2:c8:e8:1f:44:aa:6f:
f4:9d:e4:37:a7:27:8c:d4:7f:71:6c:e9:f4:8a:45:
f8:9e:59:79:25:8a:6a:49:9b:64:f0:7c:53:1c:aa:
e8:c4:a7:79:ab:36:22:55:a8:14:a4:d5:dd:06:a7:
42:7b:31:53:49:e8:77:ff:fc:2e:94:c3:54:92:c7:
00:fe:d2:e7:5d:15:9c:b2:a7:84:8a:b8:58:b3:b7:
7d:fd:8f:07:79:62:81:36:2a:31:1d:45:f1:c2:4c:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:BD:37:95:0E:A6:00:6B:04:8C:49:6E:CE:D1:FE:B5:51:B8:E8
X509v3 Authority Key Identifier:
keyid:1C:C5:6C:FD:E7:15:3C:11:6E:FA:B5:26:88:CA:C9:AB:D3:BF:2A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMVs_ecVPBFu-rUmiMrJq9O_Klo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f955ef-d8ad-449d-8060-fe243437dfd5/1/zEq9N5UOpgBrBIxJbs7R_rVRuOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f955ef-d8ad-449d-8060-fe243437dfd5/1/HMVs_ecVPBFu-rUmiMrJq9O_Klo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a3:1a:b5:c5:14:61:09:9d:d5:3a:8d:a1:15:dd:f6:d5:29:
8d:4e:83:96:a2:53:0a:38:88:31:c8:67:24:2a:8d:a8:3d:69:
2f:a5:cf:9b:7c:45:e3:da:05:37:ff:19:d8:4a:3d:95:13:49:
35:02:5c:5b:7e:59:a9:a3:54:67:5e:f3:05:48:8f:13:e6:41:
69:6b:23:a7:a7:b1:0e:81:7f:74:db:38:94:d6:2c:4d:5e:82:
a6:c5:e5:97:59:20:97:5c:c9:51:f7:cc:e8:a5:14:ac:f2:04:
1f:6c:e7:f9:28:16:11:90:12:77:38:75:f0:a4:c2:6e:74:8c:
82:e1:57:3d:ae:25:7c:ca:cb:dc:99:9e:db:90:a0:e0:ed:8a:
59:4a:91:cc:0a:e3:df:4d:10:be:03:67:85:6d:01:80:6c:aa:
75:65:1f:34:a3:97:b9:74:9c:a2:62:50:c0:05:77:0e:a1:cf:
29:62:0f:77:48:8e:4f:57:44:e2:f4:9a:4f:82:34:e1:f8:99:
f8:32:33:b7:a0:f8:dc:46:8b:75:3e:3d:aa:3b:1c:06:49:f5:
ad:cf:ab:92:06:fb:9c:a7:af:66:5f:9f:9f:61:be:69:6e:41:
ca:63:58:d0:34:85:f3:2f:d1:8e:1d:f7:0f:55:6a:2d:8b:04:
1a:ee:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 10:47:45 2023 by rpki-client on console-fra.rpki-client.org