Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/1-uDY8IfyhqdbVkV7lJ736LTTbpE.roa
File: 1-uDY8IfyhqdbVkV7lJ736LTTbpE.roa (raw, json)
Hash identifier: ynKcdOSHSMeU1T2sdLMFvGId2BZ/eUceQDFwJ85P0PU=
Subject key identifier: FA:E0:D8:F0:87:F2:86:A7:5B:56:45:7B:94:9E:F7:E8:B4:D3:6E:91
Certificate issuer: /CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Certificate serial: 016A6E75
Authority key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/1-uDY8IfyhqdbVkV7lJ736LTTbpE.roa
Signing time: Thu 24 Feb 2022 16:57:09 +0000
ROA not before: Thu 24 Feb 2022 16:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23752309 (0x16a6e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Validity
Not Before: Feb 24 16:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fae0d8f087f286a75b56457b949ef7e8b4d36e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:23:91:c7:00:fc:d0:94:16:23:aa:9c:62:
65:fc:a3:f1:de:91:e8:a0:ad:8d:8e:d5:ac:6c:35:
60:10:8c:82:d2:dd:39:5d:85:c9:fb:2e:98:87:3a:
8b:d5:8a:1b:af:96:e8:61:ac:73:f8:0c:71:e4:e3:
e4:a5:95:d0:6d:7d:50:47:0b:fb:ab:93:08:7d:d7:
9f:32:07:38:22:8e:dd:1c:e3:24:c5:21:6f:05:1e:
2a:a5:5f:4a:c4:eb:88:a2:3a:78:69:af:bb:be:7e:
ff:c1:a2:b1:7b:7e:d7:6b:91:6b:f5:b3:77:09:c6:
29:47:9c:77:b6:a0:ea:81:14:18:41:7f:bf:f9:3b:
21:fc:e0:57:f9:19:fa:da:23:07:a7:1b:21:eb:61:
76:52:43:e1:61:e1:b3:29:47:99:14:69:96:73:c5:
9a:bd:b4:78:f8:9a:05:e6:46:8a:8e:6e:f6:24:de:
f8:85:c5:3f:46:29:88:e5:05:e5:de:21:81:2e:40:
80:c1:59:12:ac:55:79:57:ab:f3:07:a3:08:04:f4:
24:98:e6:64:54:da:b5:c0:32:a8:66:cb:ed:e9:d9:
6c:81:1a:43:9d:95:3b:da:63:3b:3e:d5:21:5d:e2:
d8:09:f8:1b:f8:e2:cd:29:9c:29:30:e5:0c:d2:70:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:D8:F0:87:F2:86:A7:5B:56:45:7B:94:9E:F7:E8:B4:D3:6E:91
X509v3 Authority Key Identifier:
keyid:E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/1-uDY8IfyhqdbVkV7lJ736LTTbpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
38:db:aa:f7:b4:6f:c7:e4:da:77:d7:25:49:eb:65:26:60:66:
73:85:d5:d0:9f:79:23:dd:63:ea:d5:8c:f8:b1:91:6a:cf:a5:
5c:5d:42:8e:9d:93:d3:8f:22:7a:5b:d9:a6:3b:0f:34:ae:1f:
f7:2f:31:83:5a:51:0f:ad:3b:3a:c3:29:95:57:b6:b5:53:bf:
72:19:62:4e:b5:e3:96:d9:05:8e:61:62:d2:66:53:49:9e:3b:
01:78:92:de:fc:91:a3:9e:64:6f:b7:26:19:18:92:e5:a4:90:
21:f5:4d:4d:74:a5:12:bf:65:05:dd:2d:11:44:3c:c6:83:a3:
64:e6:f3:ce:74:a1:54:5e:b6:c5:ec:82:94:64:2d:64:22:b7:
c2:11:3d:1d:b2:00:cd:9d:d3:35:1d:4e:fa:d6:69:8f:e9:b0:
42:ac:d2:8b:3b:d3:f5:d3:fb:f7:de:83:ef:a0:7a:a9:60:5e:
74:3a:bb:93:a3:6d:38:5f:48:89:ca:16:ab:f8:76:16:cf:92:
ef:7c:99:4d:57:8d:8e:45:1a:69:6c:90:61:d5:e7:a5:cb:b9:
11:02:b6:4f:15:7c:8a:8d:94:f7:25:2c:f8:85:ea:4e:7e:f4:
fa:75:05:a1:70:64:a1:b3:21:66:fc:d6:70:fa:52:9c:39:88:
4f:dd:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:26 2025 by rpki-client