Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/W_i1FeJR9HuNSUKkTTXqbDJZauQ.roa
File: W_i1FeJR9HuNSUKkTTXqbDJZauQ.roa (raw, json)
Hash identifier: +6hXIpHZsS6wtpH8DZtAbJ4XGlpy1it+/t3sRiTEnzs=
Subject key identifier: 5B:F8:B5:15:E2:51:F4:7B:8D:49:42:A4:4D:35:EA:6C:32:59:6A:E4
Certificate issuer: /CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Certificate serial: 01857042A5D71DBF108833EA4512C57FFE84
Authority key identifier: A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/W_i1FeJR9HuNSUKkTTXqbDJZauQ.roa
Signing time: Mon 02 Jan 2023 02:14:54 +0000
ROA not before: Mon 02 Jan 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.18.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a5:d7:1d:bf:10:88:33:ea:45:12:c5:7f:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Validity
Not Before: Jan 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf8b515e251f47b8d4942a44d35ea6c32596ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:fd:03:74:6d:0a:06:79:95:55:2c:16:40:
23:23:79:f2:21:51:fe:18:80:4a:3a:90:95:1c:61:
46:2f:38:3b:4d:95:87:bf:56:6d:9a:07:fe:38:a4:
a0:07:72:d3:e1:e3:2a:76:92:32:0c:59:08:de:34:
fd:aa:e8:66:9b:16:a3:4e:8a:de:92:a1:89:41:a1:
b8:dd:8b:ba:7b:c8:72:50:3f:cf:c7:e3:79:2f:29:
c8:d3:8e:af:3f:94:c9:00:a4:23:4d:de:a4:50:a1:
40:4e:59:01:fd:01:c1:29:9a:5b:85:0e:53:0b:0a:
fc:6d:ab:8f:8a:0d:00:ab:f4:2a:5c:c3:d0:56:fc:
01:70:05:8e:a1:af:27:52:70:64:50:ad:10:99:74:
5d:63:80:90:83:71:bf:24:32:d7:1f:d7:84:81:84:
b5:a2:79:df:d6:9b:a4:44:9b:ba:8a:9c:ef:a5:bf:
87:60:a7:eb:64:a9:e9:da:b0:58:a3:4a:9e:6a:ae:
14:2c:6b:43:a8:5e:bd:5c:f1:60:bb:fd:af:cf:0e:
e5:39:bc:3e:6a:55:f0:e5:f3:3a:dc:41:0c:cb:3c:
eb:f9:23:28:77:17:ba:4b:27:38:08:fb:1a:72:21:
55:91:12:af:b8:4f:67:0c:72:1c:a5:5d:5f:0f:2a:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:B5:15:E2:51:F4:7B:8D:49:42:A4:4D:35:EA:6C:32:59:6A:E4
X509v3 Authority Key Identifier:
keyid:A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/W_i1FeJR9HuNSUKkTTXqbDJZauQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ef:6a:11:aa:d0:3f:af:2e:cf:a4:b7:63:bb:03:0e:c4:5a:
8e:19:f4:b2:63:46:07:81:62:c1:3e:28:cd:bf:8c:43:bb:ec:
69:6f:6d:45:0d:50:d0:14:ff:02:9f:76:12:e6:3d:7d:e1:b3:
65:c5:84:61:b3:ac:59:5b:65:0a:d8:c3:07:13:2a:c6:5c:6c:
bf:b5:40:65:57:1a:e4:41:cf:d5:cf:e5:a8:a4:53:29:cc:c1:
e1:ea:ae:28:7a:6a:bf:2b:b2:0d:72:79:7b:2f:5b:74:f7:a3:
a2:fd:7f:1e:dd:78:fe:f2:4e:80:b7:21:1c:52:38:c6:ef:10:
e5:b8:12:68:dd:86:93:7b:20:1c:b9:62:9b:90:88:71:8b:a5:
c8:12:af:81:1d:97:d7:a1:17:76:22:34:89:dd:50:61:96:f4:
28:df:7d:11:a1:1b:1b:e7:3b:fe:12:83:29:02:48:1e:46:f1:
c2:54:83:48:84:a9:94:2f:3b:e8:bb:f9:79:e3:09:f6:1e:aa:
81:ce:2a:c0:b3:1d:eb:c1:50:bb:99:11:a1:19:06:4d:93:ac:
e9:20:d5:aa:c4:b5:29:ae:b7:3d:6d:5e:24:e6:f6:ec:f0:40:
6c:31:3c:8d:4a:5b:71:da:ae:23:a6:00:c9:5d:45:ff:29:f1:
2d:75:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org