Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/7EcHI3864m2PFAk7Cvegj5saD0s.roa
File: 7EcHI3864m2PFAk7Cvegj5saD0s.roa (raw, json)
Hash identifier: a6cNBo0EB1t+qxc0+TpXx4qnL4c68pUxg2B+kEKKQCc=
Subject key identifier: EC:47:07:23:7F:3A:E2:6D:8F:14:09:3B:0A:F7:A0:8F:9B:1A:0F:4B
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 877303
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/7EcHI3864m2PFAk7Cvegj5saD0s.roa
Signing time: Sat 01 Jan 2022 02:54:09 +0000
ROA not before: Sat 01 Jan 2022 02:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8876803 (0x877303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Jan 1 02:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec4707237f3ae26d8f14093b0af7a08f9b1a0f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:4b:dd:97:fb:51:b7:5b:53:bc:0d:40:0f:
f0:82:61:94:bd:86:1f:60:b5:48:16:89:4e:c0:97:
2b:e3:31:c1:e1:4f:8b:09:0c:f8:2a:f3:09:1e:3a:
f6:67:53:73:b7:23:61:30:09:4c:4d:97:13:ad:02:
39:0f:8f:81:a6:d8:b8:d9:33:fc:b2:8b:33:b2:1d:
52:8b:dc:f7:eb:5b:2a:6e:91:cf:02:1d:de:92:f4:
df:2a:71:93:8a:9c:44:7b:8c:ea:e9:30:96:c0:fc:
8f:6b:2e:51:07:96:df:11:b0:67:59:09:1c:ec:31:
68:a2:fa:f5:e5:af:d4:c6:97:b4:36:14:0e:9f:18:
6e:84:6b:54:a4:8b:fe:6d:52:c7:f1:f7:52:42:d4:
e6:0d:fe:f6:66:a0:90:60:49:cb:2c:a1:42:6c:3a:
7d:4a:20:08:dc:7e:f3:5a:5e:f6:17:bd:4b:f0:b4:
44:5f:6e:d0:d1:d9:5e:af:ab:b3:ea:3e:ea:1e:73:
b6:51:30:f8:f4:4b:f6:b1:96:a4:fd:18:c0:08:81:
b9:59:99:66:3d:25:49:ee:5a:13:ca:6b:b5:0c:00:
15:bc:26:43:66:cc:ea:cc:24:6d:0b:b6:01:58:7f:
c8:e2:cb:31:87:4f:43:9d:da:5c:94:3f:6e:44:fe:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:47:07:23:7F:3A:E2:6D:8F:14:09:3B:0A:F7:A0:8F:9B:1A:0F:4B
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/7EcHI3864m2PFAk7Cvegj5saD0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:69:4e:9a:bb:e4:be:a3:37:1e:d7:13:8a:18:d6:59:fa:d1:
f9:69:93:c2:16:53:c0:2e:72:ab:e2:be:64:59:03:10:31:62:
ab:d9:1d:48:76:1a:31:29:0e:a2:3a:ea:c9:eb:49:2b:2f:98:
6a:92:de:aa:0b:fe:37:3e:a1:fe:c6:95:56:e7:76:ba:87:7b:
75:c0:36:25:0a:ee:7b:d9:ec:90:60:ea:f2:78:aa:0f:2b:62:
4f:88:28:80:5d:6f:3f:37:2a:0b:81:1a:4d:c3:83:d3:88:07:
8a:60:71:00:0e:78:fc:03:97:7e:8f:4a:12:17:ac:0c:e3:14:
f8:0a:97:25:da:5b:f9:a5:93:4f:b5:d7:21:84:ab:24:97:6a:
b1:88:0b:47:67:10:07:87:0d:36:95:0c:fc:af:4e:e2:db:ac:
33:f3:00:c6:b9:e9:e3:e1:9a:35:24:08:ba:8e:9f:2d:93:eb:
78:9a:1d:19:b7:ab:b3:9a:ed:01:c1:6f:f5:5a:5e:aa:fd:ff:
1e:7b:a7:12:ec:74:00:3e:6a:06:23:4f:9e:3b:60:35:77:6c:
08:49:c4:c0:97:d4:83:64:8d:11:4c:3b:6e:81:3e:f2:b2:ba:
3f:68:86:77:13:e3:0b:c8:b8:cc:2f:c7:e9:c9:7c:ab:86:10:
1e:03:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net