Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/69ylDNkxM9OdrsI1XOXQSYvWLg8.roa
File: 69ylDNkxM9OdrsI1XOXQSYvWLg8.roa (raw, json)
Hash identifier: EhBJQn2YJ39Mb6Dv1CyinZbni3G4fwyUnblXWa2zoz0=
Subject key identifier: EB:DC:A5:0C:D9:31:33:D3:9D:AE:C2:35:5C:E5:D0:49:8B:D6:2E:0F
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 0188DFC9FD0223D17E77CDC77C3CDF03B61F
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/69ylDNkxM9OdrsI1XOXQSYvWLg8.roa
Signing time: Wed 21 Jun 2023 21:08:56 +0000
ROA not before: Wed 21 Jun 2023 21:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:c9:fd:02:23:d1:7e:77:cd:c7:7c:3c:df:03:b6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jun 21 21:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebdca50cd93133d39daec2355ce5d0498bd62e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:8a:35:d3:38:f1:ac:55:c2:4c:7e:a9:d4:
33:76:9a:1c:3c:1c:39:86:6e:51:2c:90:61:33:2a:
78:f5:07:0c:ff:c3:1f:7b:ef:9b:fe:48:0a:0e:f6:
a3:84:c4:8f:45:e4:92:37:63:63:d5:63:f3:90:d7:
fd:e8:bb:22:14:ff:5a:bb:f1:ab:ca:b2:d2:fb:8d:
c6:80:3c:cc:62:85:07:22:0e:a0:b0:fb:38:9c:13:
60:59:7c:3f:da:bb:0c:75:a3:c4:53:c7:d7:bb:46:
8d:3f:25:d2:8d:6d:55:52:f6:5f:49:ae:a8:83:60:
8a:9c:b3:48:e5:8c:66:22:0e:20:ff:38:4c:95:c6:
6d:11:69:2a:dd:3f:cd:b5:5f:b9:f2:99:f1:5c:2d:
83:c9:be:a1:56:28:3d:1e:de:4c:93:c8:71:77:24:
c0:7c:7a:c4:29:97:e2:9e:bf:3a:32:1a:de:a1:21:
31:57:f6:39:81:7e:1c:d8:8c:ed:26:dc:c0:29:47:
38:d2:89:d0:2e:68:d7:4b:9d:ac:c0:c8:a8:d6:88:
a4:71:d5:dc:4c:86:21:97:1a:08:3b:47:a0:f9:7c:
61:0c:c3:62:90:b1:0a:47:36:c3:6c:cc:35:43:45:
66:58:50:c3:be:87:50:d9:5a:69:a0:a4:f5:31:65:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:A5:0C:D9:31:33:D3:9D:AE:C2:35:5C:E5:D0:49:8B:D6:2E:0F
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/69ylDNkxM9OdrsI1XOXQSYvWLg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
55:88:d4:c6:19:e2:7d:6b:c1:72:bd:69:04:a5:0b:a8:74:e4:
72:9b:89:0c:46:da:be:6a:70:f9:a1:7f:04:c0:84:26:03:01:
a2:84:62:fc:3a:03:f6:d9:34:f5:5e:6b:98:09:33:ae:66:43:
a7:a7:99:ea:f1:e9:ce:6e:0d:57:b9:19:de:a6:f6:fa:a9:0f:
7d:b8:e8:6f:fc:f2:77:f1:07:3e:7d:1d:73:07:b5:90:2b:93:
d0:51:c0:ea:1e:f1:22:fd:e9:74:0a:52:40:fe:ec:b1:2d:d9:
ec:b2:50:a5:cb:98:69:10:66:e3:fc:e1:b0:4c:59:29:a2:27:
e5:b0:4b:3e:0a:0f:0b:23:d5:98:2a:3d:2c:a7:c6:ec:f2:ea:
58:37:48:04:27:98:5c:d1:c1:d0:fd:71:73:1f:10:22:38:44:
d4:de:66:ae:bb:44:d2:44:a1:4a:0d:49:b0:35:79:ca:30:47:
3a:c3:d9:c6:ac:a7:c3:50:25:ab:fd:8a:de:7e:a9:a2:09:6d:
d3:32:fe:7b:b5:4f:da:db:98:4e:f1:e0:90:aa:4e:98:53:0b:
14:fc:97:09:26:3a:2a:5f:e0:16:76:8f:19:df:9b:5d:8e:32:
59:ce:d7:41:52:50:46:a5:65:1e:2b:05:2f:1d:65:87:37:4a:
39:5d:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org