Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/i1WHXuxyFTW6ktgBwyGViIUSa_w.roa
File: i1WHXuxyFTW6ktgBwyGViIUSa_w.roa (raw, json)
Hash identifier: cBrcbZzyixckjeA4LUhw+i25tDZvqbsRQIQwXPjdPAA=
Subject key identifier: 8B:55:87:5E:EC:72:15:35:BA:92:D8:01:C3:21:95:88:85:12:6B:FC
Certificate issuer: /CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Certificate serial: 018571CC2F3211204217EF244800795126F3
Authority key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/i1WHXuxyFTW6ktgBwyGViIUSa_w.roa
Signing time: Mon 02 Jan 2023 09:24:44 +0000
ROA not before: Mon 02 Jan 2023 09:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:2f:32:11:20:42:17:ef:24:48:00:79:51:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Validity
Not Before: Jan 2 09:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b55875eec721535ba92d801c321958885126bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:83:b8:7f:43:39:1a:d8:95:58:6d:74:c4:
f1:cb:a2:d1:28:8b:9d:a4:79:3e:ae:6d:8f:c3:2f:
1f:3c:ad:15:94:bc:4a:6e:7c:6c:c3:5f:4c:a9:b6:
83:d4:c2:1e:e6:8e:b6:49:4d:d6:14:c8:1e:3d:12:
48:41:9a:71:33:36:28:ad:d9:c9:e8:0e:7b:65:71:
cb:4d:17:6d:04:e0:82:91:b1:58:66:02:ea:cb:8b:
59:23:3e:09:eb:56:0a:18:dd:b1:67:11:07:dd:7f:
cb:91:5a:c8:14:46:f8:48:d0:f7:9f:7d:8a:ca:07:
87:9c:02:ff:85:a3:50:47:1b:2c:be:06:0c:a4:2d:
c8:82:0e:5e:4c:9e:67:50:c6:69:39:80:b7:07:39:
11:a2:bc:c9:78:69:4f:ea:02:ca:85:bb:b2:82:20:
c7:5f:86:54:cf:20:87:47:31:21:71:d0:12:b9:27:
fd:9e:8f:93:37:84:9e:bc:f3:19:3e:8c:ec:40:b5:
52:de:6c:a6:d4:bb:4c:77:09:ee:be:8a:06:7a:91:
cc:55:9c:13:34:c6:d3:0e:6b:f5:1b:2f:a8:54:80:
07:07:62:18:46:86:ad:e0:59:e4:5a:47:b6:27:39:
2a:b3:f8:07:db:7e:c1:04:7c:e1:f0:da:4b:3c:a9:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:87:5E:EC:72:15:35:BA:92:D8:01:C3:21:95:88:85:12:6B:FC
X509v3 Authority Key Identifier:
keyid:E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/i1WHXuxyFTW6ktgBwyGViIUSa_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1c:d5:a9:fa:31:c8:6c:19:53:b3:d0:26:86:9e:ff:e7:28:
49:7e:08:9c:e2:52:91:77:ad:a4:ab:e4:e0:a0:46:cd:b4:ef:
11:22:27:f4:e0:ec:22:0b:56:a3:8a:ba:4d:ab:57:40:6b:3d:
94:0a:c0:df:d7:ae:ff:e5:b2:c4:5c:c9:2f:0c:98:d0:24:a0:
7a:42:bb:39:df:79:68:25:68:c2:c4:6e:9c:60:a3:61:da:d8:
2b:3a:db:11:24:0c:e3:82:b9:11:5f:f6:b0:66:43:57:b0:47:
13:79:d3:33:83:ee:21:2a:6f:b4:96:13:60:11:b2:ef:15:db:
c9:0c:f0:62:ee:d9:e0:22:0a:69:a8:4a:0e:77:a7:e8:ba:f6:
39:de:d8:c6:98:b4:84:26:d4:1a:20:48:1a:f3:3f:90:85:d2:
62:f5:37:b5:d7:e7:69:b0:b1:f1:5a:ff:f3:fd:54:4a:df:3c:
8f:b9:46:43:0a:d0:b9:d0:b8:54:1f:e8:b3:d5:32:77:a5:1a:
66:eb:be:67:1a:49:af:1e:8b:73:61:86:ea:1f:07:90:b6:bb:
60:e3:26:31:84:b7:e6:c9:be:36:ac:fc:18:ea:f2:b3:00:49:
92:87:06:e0:31:a6:61:f3:6a:7e:df:27:65:31:e5:74:69:0b:
22:37:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:41 2024 by rpki-client on console-fra.rpki-client.org