Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/_8SL83a5kgn62U2ScjK_0wmDdbI.roa
File: _8SL83a5kgn62U2ScjK_0wmDdbI.roa (raw, json)
Hash identifier: kKk1XlYwZH64a4SbdlatPhgZ2mwvdEzYiewJl8IO5aU=
Subject key identifier: FF:C4:8B:F3:76:B9:92:09:FA:D9:4D:92:72:32:BF:D3:09:83:75:B2
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CA5617B3762F4C911654E510A74FCD98E
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/_8SL83a5kgn62U2ScjK_0wmDdbI.roa
Signing time: Tue 26 Dec 2023 09:07:58 +0000
ROA not before: Tue 26 Dec 2023 09:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 212.26.18.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:61:7b:37:62:f4:c9:11:65:4e:51:0a:74:fc:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Dec 26 09:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffc48bf376b99209fad94d927232bfd3098375b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:f7:4a:6b:74:4a:e1:ef:51:47:e0:ef:53:
d2:3f:57:65:4e:24:c9:54:67:9f:da:74:51:57:af:
5d:77:a8:3a:6b:cd:05:5a:80:6f:9d:0f:a3:35:1f:
d0:32:16:24:a8:7e:26:5c:ef:90:fd:5a:ba:e7:d6:
8c:10:b8:87:37:b9:8b:46:61:19:ae:fb:13:63:14:
10:33:31:34:d0:73:79:0e:ab:2b:11:db:fc:48:88:
80:db:0d:f3:5f:4b:34:b4:93:74:d3:c3:08:8b:6c:
09:49:e3:3a:a5:ce:e2:c9:7e:0f:79:ce:d4:6c:56:
37:35:56:29:fd:31:37:52:1a:1a:88:2d:95:c5:f9:
62:69:be:07:bc:f9:4f:e1:ac:da:63:6b:85:c8:85:
55:9e:c9:e9:ff:b0:c3:cf:af:87:c3:bf:71:e5:11:
a0:aa:b8:02:27:77:eb:94:d4:58:bd:af:39:08:37:
62:90:17:af:60:39:c2:b6:53:d1:d3:12:03:f7:b8:
29:62:86:61:58:7b:a4:bf:9f:52:41:d5:41:c1:0b:
68:ce:74:eb:56:09:53:40:60:c8:9c:29:ab:3b:d4:
e7:52:13:24:9d:86:53:7e:08:28:ea:ec:9d:d1:a0:
db:25:f3:35:cb:15:2a:6d:c1:d9:95:5e:34:3d:09:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:8B:F3:76:B9:92:09:FA:D9:4D:92:72:32:BF:D3:09:83:75:B2
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/_8SL83a5kgn62U2ScjK_0wmDdbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.26.18.0/24
212.26.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:57:1c:40:0e:01:4a:2c:47:9c:92:47:3e:2d:f3:d4:ef:0c:
70:92:0a:16:88:61:91:98:15:e8:89:41:63:bd:bd:f7:76:43:
0d:c4:59:0d:84:0a:c1:09:ac:92:c4:77:9d:c7:90:de:a1:c8:
81:4b:bc:eb:49:d5:4a:82:2a:d4:21:e2:30:6e:8e:d7:f2:8c:
fb:85:3c:28:13:7d:1e:45:5a:d8:a5:5a:da:6a:ee:0e:d7:84:
41:41:02:8e:7f:37:d0:ad:b1:83:e7:12:80:83:24:8d:d2:39:
9f:9f:8e:37:00:08:5a:d4:87:e5:f2:c9:1a:ab:cd:16:2f:e6:
62:4e:95:db:5f:c1:a3:f6:74:f5:49:ce:2b:8f:4b:13:1e:ca:
81:e5:09:a0:be:60:33:f1:b6:9e:af:2f:20:67:dc:dc:ed:11:
85:ae:f7:f1:7d:7f:80:98:35:b7:79:4c:95:55:bb:62:bb:9d:
81:e5:d8:72:77:f5:07:19:4c:3f:bc:ca:e4:c7:e7:dd:bc:44:
9a:38:2f:e0:9c:06:98:64:7b:55:8e:e5:b4:bf:b8:11:b2:93:
4d:80:6f:b5:db:50:dd:bb:f9:d9:c6:0b:94:77:e4:52:07:a0:
46:dd:83:a5:6b:73:07:3c:1e:2c:87:4a:fd:09:66:7c:88:d3:
47:81:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:29 2025 by rpki-client