Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/abb7Tj9y0IWkvCw2sbuEkZGx2Ns.roa
File: abb7Tj9y0IWkvCw2sbuEkZGx2Ns.roa (raw, json)
Hash identifier: Hq3tgP3ISnTxs76x6vWCXiGOVipA3O94srSDesVzDwA=
Subject key identifier: 69:B6:FB:4E:3F:72:D0:85:A4:BC:2C:36:B1:BB:84:91:91:B1:D8:DB
Certificate issuer: /CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Certificate serial: 01857042A6859B22A41C1B38A77C2F087DD8
Authority key identifier: A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/abb7Tj9y0IWkvCw2sbuEkZGx2Ns.roa
Signing time: Mon 02 Jan 2023 02:14:54 +0000
ROA not before: Mon 02 Jan 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 212.18.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a6:85:9b:22:a4:1c:1b:38:a7:7c:2f:08:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Validity
Not Before: Jan 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69b6fb4e3f72d085a4bc2c36b1bb849191b1d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:a2:6c:ba:59:11:ae:8d:3d:bb:79:77:e8:
77:cf:f6:2d:c7:69:17:a5:26:66:ec:8a:ef:93:93:
88:77:3c:e1:e6:b0:da:63:0a:7b:55:8c:49:10:71:
2b:7c:b9:ca:5d:34:75:30:17:ee:82:2b:4c:14:4d:
c3:e8:5f:29:c8:13:fb:fc:e7:03:49:c7:b5:38:3b:
ca:59:25:c7:74:0f:10:b2:3b:19:bc:36:bc:df:7f:
18:62:a3:86:e1:fb:7f:07:8c:65:df:c1:c7:58:c0:
7d:70:56:76:00:d5:58:a7:d4:b8:8a:60:95:8f:1a:
03:cc:2b:03:cb:20:78:d8:36:a9:9a:7d:19:6f:f8:
f5:c1:d3:4b:36:64:16:f4:a9:0e:93:be:ac:43:cc:
94:e3:03:04:fd:2e:88:76:a1:76:8f:ce:e9:a3:23:
1d:ce:bc:4a:36:3d:e7:44:d0:2c:13:d4:29:cd:b7:
b6:7d:6d:6c:a6:69:7c:38:88:70:5e:52:5f:83:63:
4a:cb:d6:ce:66:b5:ab:6d:7b:f2:bd:a2:2e:a1:d5:
2c:79:78:1f:ce:cf:5b:b5:dc:79:12:c2:25:ef:d1:
d4:a8:f1:5c:e4:fe:05:14:59:f7:88:67:38:32:1a:
ab:43:4f:d8:23:e6:08:75:ff:95:be:4d:8a:d1:26:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:FB:4E:3F:72:D0:85:A4:BC:2C:36:B1:BB:84:91:91:B1:D8:DB
X509v3 Authority Key Identifier:
keyid:A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/abb7Tj9y0IWkvCw2sbuEkZGx2Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:e9:ba:20:92:31:f7:a0:74:e3:46:67:26:2d:df:65:a0:
ec:f2:0a:4a:4b:fa:50:f6:fd:b6:f9:08:30:4c:08:15:f9:b9:
ce:4f:53:64:20:11:cf:67:b3:3b:8e:56:6f:54:ee:7e:99:57:
8e:17:ef:4b:5d:dd:0d:28:3a:46:66:73:47:2f:2c:4c:85:c6:
7b:f2:1a:b9:42:fe:fb:80:13:33:83:a9:2d:0c:ba:93:b4:53:
1a:4a:1c:b3:db:f1:b5:27:9c:2b:0e:04:92:95:43:6c:54:42:
b7:d4:cb:61:14:25:8a:9e:32:b1:56:7a:96:b5:13:1d:0c:f5:
54:54:d1:03:56:0a:52:62:a5:32:ac:0b:86:b4:a8:df:c8:5e:
64:99:f4:05:95:d5:14:45:0a:8b:5c:02:6c:31:9c:b6:f0:7e:
ab:dc:6f:e2:6e:2b:d5:89:d1:0c:b7:1a:5f:e3:12:83:2f:d5:
c2:ff:7b:eb:fe:4b:51:3f:a2:0e:aa:04:11:78:66:92:12:4a:
0c:68:e9:1a:00:8c:a5:fe:3b:24:b3:4e:17:1f:c2:6d:9c:d4:
ac:6e:52:98:53:39:f2:fa:d1:86:eb:50:a4:75:56:4f:66:23:
81:9a:83:33:42:d9:d8:b2:16:5a:4f:a6:3c:67:91:3a:70:22:
eb:26:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org