Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/0xVoSzhoM7pYauNSZbiFb2sBHrI.roa
File: 0xVoSzhoM7pYauNSZbiFb2sBHrI.roa (raw, json)
Hash identifier: cEzEu/hsKP6ZOh0PaAzcJJEPkvi1We74eV/aXQacses=
Subject key identifier: D3:15:68:4B:38:68:33:BA:58:6A:E3:52:65:B8:85:6F:6B:01:1E:B2
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 0188D8BAD810AB668DCFC25F0AE61FFEE2C1
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/0xVoSzhoM7pYauNSZbiFb2sBHrI.roa
Signing time: Tue 20 Jun 2023 12:15:03 +0000
ROA not before: Tue 20 Jun 2023 12:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:ba:d8:10:ab:66:8d:cf:c2:5f:0a:e6:1f:fe:e2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jun 20 12:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d315684b386833ba586ae35265b8856f6b011eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:1a:7e:ce:c0:5a:66:60:c3:b3:aa:63:9d:
de:02:91:d2:b1:ec:99:48:2e:97:fe:bd:63:a7:27:
99:56:c1:5b:e4:c9:82:20:17:3f:e6:8a:8d:0f:25:
af:4e:9d:46:53:58:a9:45:38:87:e9:0a:6d:19:cf:
cd:0c:ba:3a:37:89:ce:c0:47:1e:66:85:16:8c:72:
4e:c1:07:f6:f2:f7:5a:10:63:c1:69:49:16:15:19:
75:4c:ac:f1:71:65:6b:aa:c7:f1:b9:59:12:da:f0:
86:bb:26:c5:7d:0d:4e:91:fb:2d:73:c4:68:89:19:
7f:56:81:d6:c9:25:b1:45:c5:55:96:67:4c:32:ed:
6f:13:1f:76:f7:91:bd:70:49:58:c8:4a:9c:92:27:
70:aa:c9:e0:b9:07:6a:e0:6d:e9:ef:22:a6:3b:73:
e4:55:59:8c:ae:e6:ec:d1:fa:6f:d0:33:da:d2:67:
1b:ad:4e:b3:fe:e1:d4:99:aa:c2:a4:6d:c0:b7:0e:
72:a9:1f:79:02:d6:fb:38:12:9b:6c:8f:e0:96:24:
58:a9:2c:89:1f:fc:8a:15:8d:7d:45:85:e6:c3:3f:
84:a7:b4:2c:65:d1:0c:17:9f:25:f7:81:e9:df:26:
b0:81:e6:c3:9a:3a:22:13:35:37:56:a0:2d:a5:5a:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:68:4B:38:68:33:BA:58:6A:E3:52:65:B8:85:6F:6B:01:1E:B2
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/0xVoSzhoM7pYauNSZbiFb2sBHrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4e:d3:5b:25:3a:6c:8f:0a:b8:d8:04:d1:e3:11:18:30:5c:
2e:39:b7:72:1c:3c:ac:d9:8e:e7:60:b1:c2:9e:e4:1a:d5:01:
7f:08:00:56:70:e3:62:3b:66:ed:9b:c0:44:0d:61:1d:ac:26:
61:94:81:cd:04:d5:ab:6d:8c:55:0b:ee:0a:49:ec:2f:06:fd:
7b:2a:0f:1d:b1:a9:38:2a:4e:4a:45:81:73:a9:83:6f:09:be:
d7:7b:66:ec:34:17:39:c7:bd:9c:21:44:c4:fc:c9:34:93:fc:
05:2d:22:fb:89:62:f1:d0:cb:c3:a5:35:4e:0f:09:87:4d:cf:
82:d9:fb:37:d7:63:a5:8e:82:24:0b:32:b1:50:1d:f0:56:96:
19:24:8a:6f:10:61:5a:11:6b:dc:4b:d7:82:3e:2d:1a:ae:0f:
79:82:9c:e0:35:11:27:9b:34:70:4c:8c:94:17:81:b9:dc:f2:
84:ec:64:8d:44:68:c3:87:b5:25:00:8d:2e:64:b8:d1:9f:d4:
01:a5:cc:44:97:c0:e4:d4:bf:aa:84:73:72:3d:b7:36:ae:14:
8f:19:da:c9:c3:0e:09:8b:41:42:3e:6a:b6:a2:0d:de:b8:fc:
bb:4b:31:f2:80:cc:b0:b1:a3:d9:83:e8:5e:3e:21:35:44:92:
8b:34:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:07 2025 by rpki-client