Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/bijIVaJlMFjWnBSKBdHQBGpklZQ.roa
File: bijIVaJlMFjWnBSKBdHQBGpklZQ.roa (raw, json)
Hash identifier: RtgbTGgs7VBCXOpljs3X8b5Jv+gSYV7mC/2sO8GyTb4=
Subject key identifier: 6E:28:C8:55:A2:65:30:58:D6:9C:14:8A:05:D1:D0:04:6A:64:95:94
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 0188D6E18624EF5E6900EFA5379EEC30985A
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/bijIVaJlMFjWnBSKBdHQBGpklZQ.roa
Signing time: Tue 20 Jun 2023 03:38:04 +0000
ROA not before: Tue 20 Jun 2023 03:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 823
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d6:e1:86:24:ef:5e:69:00:ef:a5:37:9e:ec:30:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jun 20 03:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e28c855a2653058d69c148a05d1d0046a649594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:03:eb:f2:95:4a:b2:21:52:e8:a0:a1:c5:
eb:9f:3e:77:56:18:c6:e0:20:78:0f:d0:2f:62:d8:
9b:4b:ff:97:77:b9:31:f3:97:16:a0:5f:22:2c:37:
fa:8a:ff:1c:0e:50:86:71:e8:d2:3f:f2:0e:30:5d:
0c:87:6d:bb:4b:9a:1a:0f:af:64:ce:16:53:7a:63:
a4:97:ee:2c:de:fc:42:d3:62:e0:0a:f4:ed:eb:8a:
b9:50:53:b5:f1:d7:f8:01:61:16:78:31:69:09:16:
95:99:07:45:1b:8d:e0:5b:ff:44:9f:70:57:2e:cc:
ed:78:8a:56:7b:64:fe:70:36:3d:e9:b8:5d:6c:d3:
7f:b6:f3:c7:02:fc:5a:04:f9:2b:ba:cb:fb:6e:07:
3e:d1:69:a9:79:f4:74:f8:69:51:b8:5d:ae:61:07:
43:50:83:7e:ef:b8:c6:8e:2b:ea:7b:16:94:56:12:
c4:e0:ea:eb:3f:2b:ab:cc:70:49:54:3e:fa:18:57:
a6:17:f3:ea:f8:b6:2a:a8:3c:c7:fb:77:ae:60:53:
e2:a1:eb:c3:0b:a4:de:92:96:be:8a:df:4e:93:d0:
3c:a6:db:30:8b:1d:91:1c:1a:9f:a2:2f:f0:39:9d:
83:28:e1:3d:57:36:fb:04:bf:ae:9e:49:9c:1b:8d:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:C8:55:A2:65:30:58:D6:9C:14:8A:05:D1:D0:04:6A:64:95:94
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/bijIVaJlMFjWnBSKBdHQBGpklZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:f3:cf:19:0e:76:45:5b:3c:ca:f0:dd:12:6d:c6:0c:4e:
79:61:89:c1:e7:fd:c0:27:7a:85:77:8a:77:37:48:99:a9:3c:
8c:98:c9:0c:7c:95:c3:14:f8:78:86:f9:d5:a7:94:79:5a:0c:
39:82:3b:0d:cf:1f:c9:58:cc:24:34:0c:0e:74:1a:37:2d:e2:
19:05:8a:07:66:40:36:72:42:ff:4f:f3:ff:a3:1c:8b:a7:b6:
48:45:71:b5:21:97:2c:75:b8:d0:62:1f:7d:41:ed:19:bc:56:
6a:56:a8:f6:d2:4b:38:b2:60:b8:02:1c:96:7d:f6:9f:72:45:
57:1c:58:a6:57:5a:ed:89:5f:8e:12:79:63:9e:cd:27:0f:60:
1e:2f:62:f8:41:46:fe:59:74:d6:15:87:eb:f3:1f:b5:a5:ad:
05:62:be:5c:35:f8:2f:6b:77:a2:04:4d:0f:1e:fe:43:a4:01:
84:5a:6c:40:33:74:de:1c:70:58:7e:0e:ca:c8:0c:4e:fa:7c:
c2:42:38:76:bc:86:f7:2a:23:96:da:38:7e:5a:c1:11:7e:60:
b3:a4:f7:f8:0a:b9:4f:c0:02:7f:51:69:26:00:4c:31:7b:ae:
88:f4:a1:4b:af:2f:91:b4:31:9f:61:4d:a8:ef:7c:57:00:a7:
1f:d2:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:44 2024 by rpki-client on console-ams.rpki-client.org