Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/MY_P-6huuB_LwvEa-9zIo2vrRzE.roa
File: MY_P-6huuB_LwvEa-9zIo2vrRzE.roa (raw, json)
Hash identifier: /CDCAjygnMfLj2UYCZzbJ2ih15no/PupVBC0v7rUtuw=
Subject key identifier: 31:8F:CF:FB:A8:6E:B8:1F:CB:C2:F1:1A:FB:DC:C8:A3:6B:EB:47:31
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0185708CE43A30007DA194B38830D8B4EF16
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/MY_P-6huuB_LwvEa-9zIo2vrRzE.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202712
IP address blocks: 212.7.214.0/24 maxlen: 24
212.7.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e4:3a:30:00:7d:a1:94:b3:88:30:d8:b4:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318fcffba86eb81fcbc2f11afbdcc8a36beb4731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:de:56:a8:13:2f:46:ef:d3:50:f0:e8:85:
ae:ae:a4:74:39:04:13:94:b1:64:a6:1c:af:3d:41:
0f:8b:10:e4:7e:7b:a1:87:bb:70:ee:42:c8:ff:87:
97:1a:3b:64:ac:7e:5d:e4:24:85:65:8e:e0:72:1d:
75:1d:9a:8f:84:e0:76:cb:0d:ba:f9:67:ce:04:1a:
7a:41:e3:cc:d3:c5:a4:dd:5b:7f:95:a5:d1:e3:89:
fe:7b:d0:b7:26:b5:8f:fa:f2:98:cb:a8:13:39:15:
f2:e3:43:a9:0a:c3:b5:a8:f3:59:ad:61:58:e4:05:
3c:7d:f1:13:db:77:a0:9c:f0:9c:8b:e8:71:26:88:
21:8d:47:19:fc:60:12:4f:5a:d5:ed:7d:6f:31:79:
7d:64:7c:61:0b:89:c2:39:f6:e0:2c:ab:4b:d9:af:
54:c5:d4:cb:3a:cf:b5:ac:3d:b7:9f:72:93:eb:24:
59:ca:22:10:7a:c3:55:6a:d7:fc:67:c7:93:4b:44:
7a:f7:c3:43:48:25:d1:71:da:05:ba:1a:d1:1d:21:
59:b2:3f:d0:5d:91:30:74:b3:63:f0:9b:7f:56:d7:
9a:42:62:8a:f6:ce:41:6f:86:5e:54:d0:90:82:73:
a3:57:21:44:dc:27:d3:4b:21:2b:18:47:f9:82:e4:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:CF:FB:A8:6E:B8:1F:CB:C2:F1:1A:FB:DC:C8:A3:6B:EB:47:31
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/MY_P-6huuB_LwvEa-9zIo2vrRzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:12:54:39:c0:15:60:36:5c:91:93:e8:11:81:29:e1:f0:e3:
4f:53:ec:0e:01:a2:c5:cc:68:24:6c:82:de:b2:6f:6b:49:0b:
e2:9d:f5:30:d5:f0:ad:87:e8:09:e0:96:65:b6:06:e4:60:32:
5d:49:2c:f3:15:72:a2:bc:b6:9a:41:f6:53:88:33:72:63:b4:
fd:9a:b1:36:e7:19:e0:24:f1:04:ce:26:61:24:12:f6:de:f5:
be:33:fb:de:05:4e:18:6b:27:47:5c:c7:19:59:64:eb:c6:46:
fb:57:18:86:b5:d1:6a:44:c0:d3:e5:e5:e2:fc:f0:ac:9c:8d:
68:c2:65:0f:3a:19:8a:a1:03:8e:c5:53:80:be:53:5b:14:63:
87:93:06:ad:3f:93:3d:11:54:24:d4:85:39:1b:d7:73:1c:3f:
c5:a0:c9:34:16:89:51:63:c5:9e:13:32:86:4a:53:3e:0d:a8:
b9:c4:cc:6c:a5:9e:6e:32:57:42:17:92:a9:5d:9c:04:2f:06:
26:eb:c3:66:53:50:d6:0d:2e:eb:ec:a0:15:b1:3d:d2:7d:a5:
80:d9:d9:17:9a:37:70:d3:ed:c2:16:17:89:74:8b:00:8b:ea:
89:9c:36:be:d2:72:86:18:2b:f0:08:24:91:ac:92:92:f6:e3:
84:0d:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org