Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/9FQB9ME0MBjuO76c-4ALJhpOZ-c.roa
File: 9FQB9ME0MBjuO76c-4ALJhpOZ-c.roa (raw, json)
Hash identifier: aMRewkdwTZFufCy1XcKAhP8eKnSfM7dpEMIWZgmLaiQ=
Subject key identifier: F4:54:01:F4:C1:34:30:18:EE:3B:BE:9C:FB:80:0B:26:1A:4E:67:E7
Certificate issuer: /CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Certificate serial: 01856F0210CEA4429A009F4AB5FE0FF38B91
Authority key identifier: 63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/9FQB9ME0MBjuO76c-4ALJhpOZ-c.roa
Signing time: Sun 01 Jan 2023 20:24:44 +0000
ROA not before: Sun 01 Jan 2023 20:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.23.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:10:ce:a4:42:9a:00:9f:4a:b5:fe:0f:f3:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Validity
Not Before: Jan 1 20:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f45401f4c1343018ee3bbe9cfb800b261a4e67e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:c3:6e:fa:52:dc:c6:a7:f7:dc:4d:b3:66:
64:c3:f2:10:31:d3:c2:d4:e9:c8:62:e2:c6:8c:a8:
6b:52:5b:7b:20:ef:67:a5:4a:45:78:39:36:d7:2b:
bb:fe:cc:d5:38:9c:f1:6a:c9:b0:db:a6:0e:e8:10:
63:7a:55:14:44:2d:9b:49:e6:6a:3f:96:8d:a2:f3:
cd:a2:aa:a0:a9:5a:77:91:5f:d4:36:03:bc:c1:4b:
ec:c8:a8:e7:c3:b5:52:d2:41:fe:86:c1:12:ab:ed:
82:78:ea:89:c8:72:59:08:26:6b:3f:1b:7b:3d:aa:
f4:ab:e9:6c:bf:21:0b:b3:c9:ff:a1:6e:fa:be:9a:
1d:3c:86:6d:a3:d4:7c:75:9e:48:d7:f9:7a:47:c4:
fe:39:00:19:58:78:44:2a:ef:dd:03:a1:33:08:84:
17:b2:67:9d:c5:6f:a5:54:94:f7:dc:50:8a:18:e8:
43:7a:df:c8:9b:3c:0b:67:a9:3c:fd:31:5a:f8:9d:
46:3b:92:1d:78:94:e1:3f:52:fb:13:bf:84:b6:6b:
f2:72:d3:8c:02:1f:13:c1:38:eb:0f:f3:3a:e0:df:
96:b6:73:f1:5b:6c:87:c2:1e:d5:63:a2:eb:57:ee:
0e:9e:f0:7c:74:ec:01:fc:04:a1:50:a3:9d:2f:73:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:01:F4:C1:34:30:18:EE:3B:BE:9C:FB:80:0B:26:1A:4E:67:E7
X509v3 Authority Key Identifier:
keyid:63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/9FQB9ME0MBjuO76c-4ALJhpOZ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:09:a4:71:da:3c:46:7b:49:84:ce:df:91:8a:04:ee:00:d8:
2d:5b:08:04:9b:68:46:b1:32:bf:c8:17:29:56:6b:92:81:73:
c5:08:c0:ed:03:fc:e3:86:6c:88:82:d5:5b:26:36:d8:94:05:
e1:c0:d7:86:68:d0:33:be:4e:d3:b1:a9:88:25:5c:7c:dc:14:
c7:77:73:e3:be:79:90:75:93:6c:f1:ce:93:11:eb:c1:6d:82:
66:08:3f:46:f7:c7:80:ba:da:bd:ff:23:48:c1:d7:d7:82:cb:
ff:ce:5a:14:af:7c:7e:c9:82:ef:af:38:a1:4f:fb:75:d1:50:
ab:ff:20:b8:69:0f:6c:dd:d1:ff:58:28:12:93:0c:0e:c7:90:
a9:fa:e2:a0:03:fb:ce:ce:e6:87:f4:3f:71:bf:c2:49:f7:81:
ea:82:d5:00:7e:bf:3c:a6:a8:48:73:74:07:aa:f1:bc:6d:e1:
5a:3c:52:4e:04:76:e9:af:ab:56:5a:2d:13:06:90:6e:f2:eb:
6c:8a:fa:d2:23:a9:a7:b1:bf:bb:ae:ec:b0:b7:54:ae:cb:bf:
f9:87:91:44:47:44:f6:f0:b5:88:03:59:2b:94:41:08:a9:e1:
9b:d5:76:ba:58:30:68:e3:5c:5e:0f:38:be:c5:fe:d2:a2:7f:
59:f4:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org