Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/T-AdPBKFxDecUeq_Hw3eDTXHeW4.roa
File: T-AdPBKFxDecUeq_Hw3eDTXHeW4.roa (raw, json)
Hash identifier: TP4S7fxXVLyx+Yd7jRZQSRGLim5O7pE/GneeWdAN/hU=
Subject key identifier: 4F:E0:1D:3C:12:85:C4:37:9C:51:EA:BF:1F:0D:DE:0D:35:C7:79:6E
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0CA8E369
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/T-AdPBKFxDecUeq_Hw3eDTXHeW4.roa
Signing time: Sat 01 Jan 2022 05:57:30 +0000
ROA not before: Sat 01 Jan 2022 05:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50599
IP address blocks: 212.7.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212394857 (0xca8e369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 1 05:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe01d3c1285c4379c51eabf1f0dde0d35c7796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:e7:91:3e:32:50:73:48:47:c8:40:6d:08:
f8:88:f3:44:d4:da:97:30:f4:43:a0:dc:17:91:af:
93:58:b3:27:4f:79:86:1f:f7:aa:bb:fa:68:39:3a:
a3:1f:86:78:1d:d1:bf:1d:7c:a3:57:84:3d:15:c7:
c4:2f:eb:1a:b2:7a:38:e3:eb:f3:0e:a5:45:0e:08:
25:56:59:25:65:a4:9a:2e:7a:c9:74:f4:5e:6c:d8:
ab:70:7c:82:ed:0c:49:0c:7e:52:f4:68:cb:8f:6d:
4f:58:8f:80:06:23:1b:cb:95:85:2f:a0:e3:26:d5:
fd:ce:a4:e3:5a:b9:e0:f4:8c:5f:f0:49:2f:f0:81:
10:8e:f7:94:2c:ef:97:67:83:e4:8b:a3:a7:1c:a3:
ad:f5:62:04:59:c7:7b:89:92:20:09:43:2c:85:57:
fa:2e:01:87:6f:ad:02:d3:44:21:dc:cc:a1:70:1b:
a3:a9:c8:76:55:21:3a:36:35:b4:d1:9e:a3:e6:5d:
df:6e:e6:0c:6a:34:58:ff:fc:72:cf:4f:91:2f:16:
5d:bf:29:a8:d8:74:e7:bf:72:24:0a:bb:c6:24:78:
99:70:4b:8f:66:16:29:69:56:00:34:04:2b:d9:2c:
f2:c6:6e:1b:7d:55:e9:6f:58:64:a6:c7:8f:a5:ba:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:1D:3C:12:85:C4:37:9C:51:EA:BF:1F:0D:DE:0D:35:C7:79:6E
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/T-AdPBKFxDecUeq_Hw3eDTXHeW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.213.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e2:d6:33:69:63:f7:4a:3d:09:b5:29:cc:da:db:33:12:29:
44:4a:d6:a2:49:81:82:d2:26:70:e3:de:ed:ee:15:c4:1b:09:
fd:53:76:35:c4:6a:95:5b:60:5e:e0:a9:65:77:86:f8:8b:c4:
b6:e9:3b:40:98:8c:4f:fb:2f:a9:0c:23:d1:7f:9b:53:fc:f3:
a5:d6:72:09:14:5c:72:c9:c9:14:e8:07:af:d5:cf:7b:3b:fb:
4e:e1:fa:be:3b:fa:d2:b7:d4:b9:5e:68:fe:ba:c8:d2:7b:3e:
08:08:a3:52:d7:63:7b:57:d2:ed:60:35:33:9b:0a:ac:b9:24:
c4:a6:55:16:e5:56:b7:07:2e:a8:a6:0b:da:d4:93:79:fc:dd:
c4:8f:e1:b6:da:65:17:5b:c2:c8:7a:e1:5e:28:de:e3:7e:a5:
41:0e:3b:8b:b9:f7:e5:50:38:94:63:04:eb:9a:84:b8:5f:f8:
9e:97:8e:37:0a:56:4b:60:37:ec:6c:b4:62:65:28:6b:39:55:
d0:50:fd:6f:19:84:e2:82:24:24:59:e3:d4:09:5b:72:26:8c:
44:b9:6b:d5:df:b2:79:a3:9a:a4:6a:8c:c3:12:a1:a9:d5:32:
f2:63:e1:52:c7:e0:41:2c:81:3d:23:ce:12:1f:5f:1e:00:8f:
f9:1e:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org