Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/8WluD2FA5chN5pQIJStumDzpZ3U.roa
File: 8WluD2FA5chN5pQIJStumDzpZ3U.roa (raw, json)
Hash identifier: a4GLSHiMOHe+/tyZ3ST/eSDZBQ12FLQSV+nsht2aTSU=
Subject key identifier: F1:69:6E:0F:61:40:E5:C8:4D:E6:94:08:25:2B:6E:98:3C:E9:67:75
Certificate issuer: /CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Certificate serial: 01691291
Authority key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/8WluD2FA5chN5pQIJStumDzpZ3U.roa
Signing time: Thu 24 Feb 2022 16:57:08 +0000
ROA not before: Thu 24 Feb 2022 16:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23663249 (0x1691291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Validity
Not Before: Feb 24 16:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1696e0f6140e5c84de69408252b6e983ce96775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:c4:dc:d6:02:bf:31:04:b7:b4:76:2c:18:
23:d8:a8:c3:02:b3:36:c6:73:a2:6a:07:ef:3c:08:
3c:ae:9c:30:08:a7:a9:96:4e:f6:83:5d:47:8d:ec:
bc:b0:d2:37:23:78:95:a0:06:2b:87:d4:a3:82:ed:
e2:ec:01:d4:11:31:0b:c4:5f:38:91:51:18:48:a4:
01:c7:4d:3d:52:3d:58:06:8d:51:82:c8:3d:f0:9c:
d6:fc:f5:63:ed:23:93:21:88:3b:ea:5c:dd:e2:31:
c0:82:6f:9c:b9:22:b8:61:32:19:9a:4b:47:fa:b2:
0b:60:9c:8a:a1:25:69:6c:df:e8:59:29:cb:45:a2:
a9:cb:c0:29:46:23:59:88:16:18:49:a8:ea:d3:de:
1e:72:2a:75:4e:ae:9e:47:fb:58:c8:6a:03:c4:82:
8c:43:80:67:29:67:a2:33:58:e6:4b:8f:d9:01:7b:
c5:cb:bb:3c:75:55:9d:15:c0:61:c5:25:68:70:16:
b6:09:2d:5e:b1:5f:af:79:0f:95:a1:33:35:8a:b4:
b4:0d:a7:29:5e:e9:f6:e1:f9:7b:f7:f8:ba:37:b4:
a4:74:02:89:e5:7d:24:d2:d3:c9:c5:3d:db:a9:54:
4c:3b:ae:bd:79:cb:9c:ec:96:72:ac:73:fa:a3:65:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:6E:0F:61:40:E5:C8:4D:E6:94:08:25:2B:6E:98:3C:E9:67:75
X509v3 Authority Key Identifier:
keyid:E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/8WluD2FA5chN5pQIJStumDzpZ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6e:79:00:ef:9b:58:07:20:0d:ad:33:26:2d:3c:56:aa:ab:
17:0a:ac:3c:da:81:33:b7:13:c0:80:0f:ed:a4:f7:95:95:d7:
98:43:26:38:b1:c3:ef:a9:ab:bd:40:ac:b4:8a:d0:c8:bc:66:
f9:7a:b7:73:84:82:2c:c5:ad:01:39:d0:b0:ea:eb:77:b0:7c:
01:78:98:d9:04:09:5b:73:e0:d3:b2:6e:90:31:8e:12:cf:5c:
37:5a:95:ab:34:23:0f:88:10:69:26:53:be:e7:72:a7:7a:21:
5c:96:15:2a:e6:bd:58:9b:6f:8b:fa:ef:c4:1b:c2:7a:38:a6:
f1:80:b3:ae:13:c2:ab:21:c4:86:03:95:ff:0c:31:32:8f:36:
1d:5d:2b:1b:8a:c6:96:f4:26:92:67:e7:a0:30:eb:90:24:29:
80:cc:69:50:d4:e7:7f:c6:4d:e1:80:35:95:86:43:54:50:d2:
57:ae:b7:4a:71:a5:3c:76:38:24:d9:5c:2d:0f:15:2c:51:d2:
5c:b7:85:de:82:9e:b0:00:2b:8d:d5:18:b1:d7:88:46:e8:f6:
dc:41:8e:2a:fa:13:1d:c1:19:14:f1:e0:f8:61:b5:96:ef:03:
19:a0:d9:23:ca:6d:43:78:1b:a9:7a:d2:2c:e8:de:9e:18:cc:
46:59:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:56 2025 by rpki-client