Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/DXeGDE4YqHzmhlgXh78yU96Tsmg.roa
File: DXeGDE4YqHzmhlgXh78yU96Tsmg.roa (raw, json)
Hash identifier: Zsh1h41GYiWkAwcS5V4XGLTbYpniRHa8U8kF2ZsOY0s=
Subject key identifier: 0D:77:86:0C:4E:18:A8:7C:E6:86:58:17:87:BF:32:53:DE:93:B2:68
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 0186EBC6EAAFC09E288E593BA00223D348FC
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/DXeGDE4YqHzmhlgXh78yU96Tsmg.roa
Signing time: Thu 16 Mar 2023 18:55:27 +0000
ROA not before: Thu 16 Mar 2023 18:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:c6:ea:af:c0:9e:28:8e:59:3b:a0:02:23:d3:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Mar 16 18:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d77860c4e18a87ce686581787bf3253de93b268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:7d:09:37:19:d6:2c:b4:b5:12:3f:6a:8a:
a6:77:c8:70:ec:7a:aa:b9:36:0c:4c:87:82:b0:f2:
df:80:b3:d5:0f:6f:44:65:e9:11:12:45:64:14:86:
4c:e7:b7:d8:22:2e:b3:d9:dd:bc:b0:48:3b:88:d2:
27:67:59:28:5f:d1:56:fd:85:ad:43:13:e2:8f:56:
ff:b4:cd:eb:df:e5:fe:ba:71:ba:35:3a:c5:77:52:
3c:c3:e2:3b:ec:98:71:74:73:e3:64:6b:db:96:ab:
cb:26:24:42:38:5c:b7:f7:2a:c0:e8:55:6d:e4:cd:
6a:2a:5f:e7:2b:55:b3:33:35:61:4b:d4:c0:9c:cd:
21:91:49:b8:74:4a:31:c2:35:70:41:18:fa:36:46:
01:5c:5a:4e:25:fd:4b:d0:cc:f8:82:e4:8b:1b:8b:
e6:50:da:09:f1:ce:27:87:cb:6b:3f:c3:5b:cb:8f:
1c:e3:cb:19:bf:57:25:1c:2c:5e:05:3b:c0:85:71:
11:4e:6a:a3:83:ed:e2:d5:ed:3e:55:f9:a1:3e:aa:
fd:af:e4:4a:d2:30:0e:d3:d1:ca:db:1c:79:28:9b:
13:8c:31:b8:bd:d1:7d:ba:4d:d2:b0:ed:50:59:ef:
af:52:20:e0:ea:5f:67:02:c8:56:d9:50:f8:38:c9:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:86:0C:4E:18:A8:7C:E6:86:58:17:87:BF:32:53:DE:93:B2:68
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/DXeGDE4YqHzmhlgXh78yU96Tsmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4e:22:b2:a6:2e:5e:81:a9:10:95:74:fa:ac:8f:e8:4f:15:
08:b7:62:a1:8d:cf:b6:bf:4c:b4:22:88:0a:33:fe:63:c7:94:
b6:1b:92:4a:38:2d:6f:05:df:93:3d:fb:49:58:27:72:c1:d5:
19:f0:1f:90:fb:f6:33:a5:7b:fd:dd:56:c8:5d:1e:7a:44:30:
35:ba:78:25:cc:91:04:6b:c3:3e:ad:17:eb:2d:16:3b:0e:e4:
5d:82:12:f8:66:d9:91:17:0c:62:5e:14:d9:e6:2e:f4:2b:7f:
08:77:5e:69:97:b1:bf:af:15:92:7e:d9:c4:6c:6e:6b:80:5e:
db:61:eb:fb:b8:da:be:1a:72:e3:1c:d5:bd:67:8e:09:88:e3:
98:7e:63:83:d9:1b:76:c5:89:eb:91:ef:fa:02:61:78:f5:da:
b7:34:37:1c:75:87:e8:e6:97:c0:12:e5:00:72:ca:f1:56:ce:
95:d1:d5:b5:67:67:52:83:ca:ec:6c:59:ce:02:e1:6f:93:5a:
b9:f0:fa:1e:e0:3d:5b:e9:65:f8:50:62:23:dd:c9:54:e5:bf:
24:cc:e7:6c:31:ad:10:2c:bb:4f:48:b8:72:10:48:df:a1:f4:
15:a3:38:a6:7c:44:5f:93:fe:63:fa:98:6f:74:a4:fb:98:38:
27:a3:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net