Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/6ReFfpCe76V3-N5K66GAHXPOiVE.roa
File: 6ReFfpCe76V3-N5K66GAHXPOiVE.roa (raw, json)
Hash identifier: SmHdX7Hr1U03hGOk+/mumRlTVpcA+UpWzPTdF1oxhoY=
Subject key identifier: E9:17:85:7E:90:9E:EF:A5:77:F8:DE:4A:EB:A1:80:1D:73:CE:89:51
Certificate issuer: /CN=1f573c589715771347f91af02b54a7f1774b552d
Certificate serial: 01856F3024752B7DD3FB87EBDB25E4687094
Authority key identifier: 1F:57:3C:58:97:15:77:13:47:F9:1A:F0:2B:54:A7:F1:77:4B:55:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/6ReFfpCe76V3-N5K66GAHXPOiVE.roa
Signing time: Sun 01 Jan 2023 21:15:03 +0000
ROA not before: Sun 01 Jan 2023 21:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 212.18.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:24:75:2b:7d:d3:fb:87:eb:db:25:e4:68:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f573c589715771347f91af02b54a7f1774b552d
Validity
Not Before: Jan 1 21:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e917857e909eefa577f8de4aeba1801d73ce8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:a2:6d:79:13:2b:7c:4f:35:be:ba:66:cb:
cd:52:af:9c:9f:df:32:e9:b6:6a:a7:b4:6d:7d:cf:
35:a7:1f:56:2c:e8:5f:fa:01:4f:04:c1:2c:60:3b:
17:8c:55:6c:a5:79:34:51:3c:a6:eb:76:18:61:7c:
ac:4a:68:81:ca:0a:5c:74:d7:5f:6b:fa:63:8e:69:
e3:00:7f:84:d9:68:55:8e:08:0d:3b:03:bc:43:e5:
85:0b:f2:8e:15:a9:30:80:44:47:91:db:1c:81:f5:
5f:57:7b:aa:ed:75:f2:fc:0a:50:14:50:32:87:37:
b7:97:bc:b5:71:02:a5:08:77:85:97:06:73:35:fa:
5d:ae:b5:43:98:51:c9:be:60:61:80:5f:11:e1:74:
12:fe:3c:75:8a:a1:1e:eb:8c:b3:5c:87:e7:a3:07:
00:f0:0c:c7:1b:44:3a:c1:b2:cd:21:e9:d4:5a:4a:
58:d1:03:1b:77:42:5b:95:65:8f:87:fc:60:ba:f1:
c7:fb:23:b7:81:36:2b:e3:51:d9:af:3e:26:33:78:
2a:df:83:4d:8e:59:1f:3c:aa:02:c4:63:3a:80:a0:
ff:32:96:23:e5:38:4f:66:15:28:48:d2:a8:22:6b:
b0:2e:3f:52:74:6f:2f:ca:7d:ef:7b:60:2f:dd:61:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:85:7E:90:9E:EF:A5:77:F8:DE:4A:EB:A1:80:1D:73:CE:89:51
X509v3 Authority Key Identifier:
keyid:1F:57:3C:58:97:15:77:13:47:F9:1A:F0:2B:54:A7:F1:77:4B:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/6ReFfpCe76V3-N5K66GAHXPOiVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0eda9a-3cce-4d77-9e93-35224651e007/1/H1c8WJcVdxNH-RrwK1Sn8XdLVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:61:25:28:73:84:62:7d:f8:fb:5c:56:3a:f1:88:e7:e7:b8:
bd:9c:fc:12:49:4a:44:a1:9a:a1:1f:fd:51:98:54:71:b7:bc:
67:97:87:9c:a9:95:c4:db:01:37:58:6c:87:eb:11:69:d7:6c:
dd:9e:71:e8:93:85:2c:c9:5b:7e:1a:68:ea:5e:d7:88:30:5a:
06:b9:a9:c7:2d:3f:b1:23:26:bc:33:2f:79:e4:bf:aa:ab:b6:
71:ec:50:1b:fa:da:52:ca:57:71:5c:9b:f9:15:23:1c:3b:7d:
c7:d5:6a:4a:2e:41:f4:96:24:25:05:ca:d1:91:ec:6e:78:1c:
13:19:91:2c:bb:36:96:1b:06:ce:2f:c2:bd:74:ec:c7:ce:4c:
c5:ab:46:c3:27:01:a0:5a:95:8d:2b:62:6e:65:ac:d3:0a:48:
a7:1c:53:71:e5:72:b6:7a:18:a9:14:83:47:d4:13:be:18:8d:
d1:17:a2:d2:3a:81:b0:90:c5:c9:06:48:b1:c2:cd:d4:87:a8:
57:70:ae:db:ab:86:e4:68:ab:6f:d7:6e:af:94:14:9b:18:68:
73:0c:07:52:25:e0:95:0d:ed:14:0c:38:03:5d:3b:04:90:54:
d0:5e:d9:c8:a8:70:94:8d:d9:41:b6:9b:fc:4c:c9:eb:00:13:
3e:00:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 11:16:57 2023 by rpki-client on console-fra.rpki-client.org