Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/aj_goSmqD8VSlBN45dfqh4Dnuwc.roa
File: aj_goSmqD8VSlBN45dfqh4Dnuwc.roa (raw, json)
Hash identifier: 1WpewGrPFPUQTUq4i907OO6IiyADmytYKN9fE6NbMC8=
Subject key identifier: 6A:3F:E0:A1:29:AA:0F:C5:52:94:13:78:E5:D7:EA:87:80:E7:BB:07
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 01856F4B885B2A40F7CFB8C0DF5DAD24B711
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/aj_goSmqD8VSlBN45dfqh4Dnuwc.roa
Signing time: Sun 01 Jan 2023 21:44:59 +0000
ROA not before: Sun 01 Jan 2023 21:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:88:5b:2a:40:f7:cf:b8:c0:df:5d:ad:24:b7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jan 1 21:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a3fe0a129aa0fc552941378e5d7ea8780e7bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:26:aa:90:ff:52:be:e9:08:bf:77:17:25:
d9:2e:41:52:f4:56:a8:46:e0:79:11:13:3d:35:fc:
fd:65:2a:23:60:49:97:21:7f:3c:a7:c8:dd:5e:b9:
6c:7f:b2:75:9d:61:08:da:9c:bd:ff:c6:92:e4:fc:
0b:5a:0a:6b:fa:c6:3e:f4:48:89:9b:e9:78:50:57:
8f:27:62:99:5a:fb:d5:29:d6:0f:cd:48:ce:a0:38:
ac:b6:4b:a3:f4:17:7d:32:f3:c6:3b:df:86:b1:37:
23:fa:17:17:b1:73:c8:0a:2e:89:d6:25:d7:d1:4b:
81:60:ba:5c:16:fb:8e:a7:37:6c:dc:f4:5d:ba:ca:
cc:6a:a8:98:5f:2b:de:ee:95:e6:93:4a:51:7b:9a:
9a:00:ff:76:6c:d1:ba:c6:ad:0c:ba:d5:7c:b1:a3:
8c:2a:7c:5d:dd:53:96:6f:0a:07:df:7b:d5:f8:a9:
07:08:85:61:48:77:06:cf:28:02:59:5f:5e:b8:74:
33:13:0e:27:91:93:6d:d2:e0:0a:2c:1c:58:80:5c:
da:95:72:6c:86:8b:fe:0d:59:dc:bd:2e:27:28:ac:
4a:f4:30:b6:b7:3d:94:7d:12:a4:1b:38:4f:07:a9:
2a:32:2e:55:47:1a:eb:09:72:0e:51:e2:26:55:56:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:E0:A1:29:AA:0F:C5:52:94:13:78:E5:D7:EA:87:80:E7:BB:07
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/aj_goSmqD8VSlBN45dfqh4Dnuwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8c:d8:a9:4d:bb:ad:ef:04:b2:02:a7:53:ac:28:bc:00:40:
84:99:81:67:11:67:05:0a:61:1a:69:7f:3b:d2:55:a6:4e:29:
db:c8:47:99:24:b4:87:29:c4:82:9f:dc:a1:77:28:b7:ec:cc:
18:bc:8a:1f:65:bc:2e:e3:51:e5:a1:f9:df:6e:06:9d:ad:6b:
fd:ea:fb:71:86:75:71:16:ca:39:b7:7b:e1:da:c0:87:1a:ae:
b6:38:90:d2:b3:69:fd:fd:8b:64:9b:73:04:98:94:03:36:3f:
1b:62:ba:c9:03:61:e9:57:58:ab:28:b3:a8:92:0e:31:af:36:
fc:eb:28:e8:ba:bc:9f:9f:c0:31:77:66:61:f2:da:3b:fc:8c:
28:2b:65:88:d5:95:67:03:a3:ea:eb:a2:aa:cf:fd:bd:4c:07:
ce:d7:05:b9:41:13:c4:33:fb:9f:ed:51:c6:6a:96:59:5c:cc:
ec:8a:5e:72:ea:c5:2c:2f:3d:b3:f4:53:06:1a:a0:d0:8a:eb:
65:f1:a0:53:6a:ce:e6:07:ca:fd:66:c0:d1:ca:2c:dd:8a:e7:
75:fc:ff:8e:13:4c:d0:92:d5:51:cc:f1:d2:63:27:fe:12:e1:
78:d0:a9:58:dd:7f:5b:48:4e:20:63:50:0a:aa:c0:3f:18:79:
09:dd:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:06 2025 by rpki-client