Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/evyQ0-CFsMXwdrHhTwzIj0_Tf6Q.roa
File: evyQ0-CFsMXwdrHhTwzIj0_Tf6Q.roa (raw, json)
Hash identifier: ySrnp63KLwGO21qZ2onfq+plS1RwOoQlrJhlm1OL6t0=
Subject key identifier: 7A:FC:90:D3:E0:85:B0:C5:F0:76:B1:E1:4F:0C:C8:8F:4F:D3:7F:A4
Certificate issuer: /CN=401956632453ee001e0c53380a70979434f5ab43
Certificate serial: 01856FC26D1C267773D27CEC6219817B1398
Authority key identifier: 40:19:56:63:24:53:EE:00:1E:0C:53:38:0A:70:97:94:34:F5:AB:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBlWYyRT7gAeDFM4CnCXlDT1q0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/evyQ0-CFsMXwdrHhTwzIj0_Tf6Q.roa
Signing time: Sun 01 Jan 2023 23:54:50 +0000
ROA not before: Sun 01 Jan 2023 23:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 212.18.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:6d:1c:26:77:73:d2:7c:ec:62:19:81:7b:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=401956632453ee001e0c53380a70979434f5ab43
Validity
Not Before: Jan 1 23:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7afc90d3e085b0c5f076b1e14f0cc88f4fd37fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:e7:e4:99:84:2b:21:c8:29:24:fc:66:18:
cf:28:53:d8:c3:0e:68:36:0f:88:b9:2c:50:5a:7a:
2c:17:7a:4f:03:3e:53:ce:94:b0:42:ff:3a:ab:fc:
d3:3b:a2:00:a2:74:23:e4:b3:cb:c7:31:36:38:37:
a6:e5:ca:2d:32:0c:a7:28:97:59:a8:7a:4d:ff:3b:
95:0f:4c:50:be:e9:4b:28:dd:73:ba:91:50:89:49:
fc:01:38:58:aa:d5:d9:69:ae:68:1f:8c:dc:05:8e:
bb:2f:30:09:0e:93:12:d0:de:3a:de:ed:85:6a:23:
ee:c8:ed:b0:60:1e:c0:b1:2d:d1:bd:a8:e3:34:14:
ae:17:6e:f1:37:05:aa:a8:ff:09:1e:14:06:d7:80:
3e:d5:e3:1b:aa:63:b6:96:1f:ea:f0:5b:fa:68:15:
01:a4:d2:95:1e:7b:9c:57:fa:0f:83:a0:03:1d:11:
dd:a0:30:67:3c:07:7b:4b:55:2e:5a:7f:39:48:8e:
9e:b8:bb:2a:ee:93:a0:85:52:bf:25:fc:1a:99:8e:
01:a3:89:05:ec:59:49:ed:b2:f2:19:d1:f2:12:6b:
f3:2e:0c:bb:38:59:27:aa:f9:1f:6f:3f:0a:58:c1:
3b:dd:88:35:31:35:d8:95:4e:9e:b9:56:0a:f6:18:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:90:D3:E0:85:B0:C5:F0:76:B1:E1:4F:0C:C8:8F:4F:D3:7F:A4
X509v3 Authority Key Identifier:
keyid:40:19:56:63:24:53:EE:00:1E:0C:53:38:0A:70:97:94:34:F5:AB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBlWYyRT7gAeDFM4CnCXlDT1q0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/evyQ0-CFsMXwdrHhTwzIj0_Tf6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/QBlWYyRT7gAeDFM4CnCXlDT1q0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.98.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c2:9e:cd:9d:a4:93:20:d4:d6:8f:b9:1a:f0:51:f1:0e:e5:
3b:c8:1e:4f:52:cc:29:0c:50:7b:29:67:73:02:12:38:15:e0:
9a:30:46:00:35:e7:e2:fb:7b:ba:47:6f:9c:86:e1:fd:c7:22:
7b:23:dd:35:28:08:3f:28:85:45:b7:34:b6:5a:73:6a:d4:92:
31:23:d8:79:68:5d:96:3e:7e:69:ee:79:c4:90:ba:75:77:02:
af:d6:63:6c:d8:f0:c7:6a:71:10:87:af:39:71:29:be:bf:39:
e9:95:91:7a:f2:e0:8c:e8:b9:65:1f:04:3a:0b:e4:59:10:fe:
37:56:fb:06:1f:66:27:26:e0:3e:4d:d2:d6:28:53:aa:44:45:
3f:5b:bc:6f:85:21:9b:a0:e0:aa:8a:26:d1:fe:45:9e:e3:dd:
a4:37:6e:81:e3:f6:20:95:7a:e7:13:89:7f:d9:7d:93:3f:0c:
dd:77:7e:51:28:06:0c:06:ab:4b:95:c6:25:a6:17:03:b1:bc:
d9:aa:46:37:56:35:ec:a0:c4:38:0f:45:89:9c:ce:6c:96:27:
ca:06:77:8c:30:df:b6:bf:26:5c:57:aa:10:29:06:4c:f0:99:
4e:4c:19:2c:36:41:dd:45:20:e4:5d:a2:8f:20:91:f0:ed:80:
60:0b:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org