Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/J1UalK8vC_mfAPk4dJ__K4wAK7U.roa
File: J1UalK8vC_mfAPk4dJ__K4wAK7U.roa (raw, json)
Hash identifier: YQnFU/P9rormTQmGvfaRRgmGKdGG7dBFYeul80vJbVc=
Subject key identifier: 27:55:1A:94:AF:2F:0B:F9:9F:00:F9:38:74:9F:FF:2B:8C:00:2B:B5
Certificate issuer: /CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Certificate serial: 018571CC30524CC67F4EE3274D6487C8ED51
Authority key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/J1UalK8vC_mfAPk4dJ__K4wAK7U.roa
Signing time: Mon 02 Jan 2023 09:24:45 +0000
ROA not before: Mon 02 Jan 2023 09:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:30:52:4c:c6:7f:4e:e3:27:4d:64:87:c8:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Validity
Not Before: Jan 2 09:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27551a94af2f0bf99f00f938749fff2b8c002bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:e0:7e:5a:05:1c:07:ab:0c:d5:45:43:f3:
f5:8a:00:9c:53:69:b6:f9:97:a0:78:d5:14:21:bf:
b6:bf:03:84:f0:4c:99:05:31:ef:3b:fa:59:f8:39:
da:e7:4c:7e:54:89:44:5f:66:ed:e6:0d:6c:cb:81:
06:7d:00:66:c1:44:ec:45:61:2a:35:d6:6d:65:a1:
f2:f0:fa:84:12:17:d4:2c:16:2b:dc:bf:2a:2e:53:
78:82:9c:11:ce:57:90:d5:a8:6e:7e:9e:d6:aa:68:
23:ea:83:a9:cf:17:c1:32:fa:02:2e:51:08:60:4b:
a3:7c:14:86:03:ec:40:f2:d0:3a:64:af:56:f2:f8:
1c:6c:88:34:1f:0c:c9:da:64:65:c0:a9:6c:72:89:
ef:e7:a6:57:2c:05:5d:31:b7:17:dc:8a:af:73:68:
d9:55:07:ae:70:76:74:b3:1a:c6:cf:1c:78:89:2b:
b9:66:64:56:56:70:46:2b:be:ef:03:71:3f:a5:2a:
c9:28:a5:4e:cf:4f:41:87:86:a9:a4:74:e7:db:df:
7c:61:ac:5b:e8:df:18:b7:9d:fe:c0:ae:fc:48:12:
39:8b:a8:a9:3e:b0:7c:74:cb:95:92:d2:8c:d5:6f:
de:4b:94:0c:49:46:e3:26:21:67:97:46:5a:c8:aa:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:1A:94:AF:2F:0B:F9:9F:00:F9:38:74:9F:FF:2B:8C:00:2B:B5
X509v3 Authority Key Identifier:
keyid:E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/J1UalK8vC_mfAPk4dJ__K4wAK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fa:42:bc:1d:f7:1d:75:47:a2:10:53:fc:e0:12:2c:4c:f2:
71:33:b0:5d:a0:d6:96:da:a5:0f:89:11:9d:59:c9:87:6d:b1:
c5:ce:06:12:e7:20:6a:e1:81:b4:77:71:64:5a:1f:59:79:34:
cd:51:47:ec:b6:6f:cd:8c:39:7e:be:f5:06:22:f5:d2:51:07:
62:9c:2f:40:3e:a1:66:ad:00:74:46:5d:9a:b3:b2:56:28:e7:
e4:30:2d:e3:47:60:cd:1a:72:28:55:47:e3:92:93:99:9b:23:
b6:62:c4:18:4b:57:01:63:a6:2d:40:cb:a4:cd:6e:14:b7:8a:
f9:27:6f:2f:4e:e5:3a:16:95:5e:c2:57:75:76:bf:f1:6f:93:
3d:be:de:9d:1e:be:a3:a8:31:fe:9b:ec:3a:56:64:f9:8e:07:
6a:c2:5c:b9:90:14:ed:7b:e2:19:72:bc:d4:af:0f:cb:09:14:
f4:10:e3:3e:2a:5f:df:07:10:ba:61:7b:01:ca:48:59:76:b5:
d3:56:9c:0a:61:a1:0d:87:54:d6:f1:f7:27:07:59:98:43:91:
3e:cb:f2:5b:e7:07:5b:ae:ee:3f:b0:45:e7:6c:6b:d1:51:e1:
eb:f2:8f:80:29:5b:e0:cf:1d:39:73:6c:c5:46:69:07:e3:84:
0a:90:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:20 2023 by rpki-client on console-ams.rpki-client.org