Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/H7aK3952MGCFgflC357Zyu9DfXQ.roa
File: H7aK3952MGCFgflC357Zyu9DfXQ.roa (raw, json)
Hash identifier: Y7dy7bsZviv9zR/Uk5MAp2zHC4907tRL/Zta5pf5uu8=
Subject key identifier: 1F:B6:8A:DF:DE:76:30:60:85:81:F9:42:DF:9E:D9:CA:EF:43:7D:74
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 8707B9
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/H7aK3952MGCFgflC357Zyu9DfXQ.roa
Signing time: Sat 01 Jan 2022 02:54:09 +0000
ROA not before: Sat 01 Jan 2022 02:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8849337 (0x8707b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Jan 1 02:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fb68adfde7630608581f942df9ed9caef437d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:cd:4c:f4:28:9a:66:0b:1b:4e:08:ae:bc:
38:e9:05:de:44:4f:77:72:08:7e:b7:ca:e1:c4:8a:
ee:8a:4d:89:ed:46:5a:7b:0b:5f:82:f1:fb:3c:23:
83:d5:bf:9d:07:a7:1c:16:c7:dd:91:de:79:80:e3:
58:1c:2e:09:37:0e:0c:00:38:89:11:4a:74:b1:6a:
12:d6:24:d5:b0:62:02:ec:6d:49:06:23:94:46:1f:
59:7c:6e:71:71:ed:08:85:57:a5:a5:7d:f6:7d:3d:
ba:0f:50:86:14:da:0b:38:40:40:87:86:8a:b6:2e:
51:c7:7f:27:63:eb:67:74:2e:75:48:b1:c7:12:02:
e2:be:2f:00:80:29:e0:d0:0b:ad:6b:33:87:01:a7:
3d:8a:67:9b:48:2d:b5:18:73:66:1a:cf:0d:86:a3:
91:ed:83:2a:3b:ac:28:39:30:fe:b8:36:9d:d2:23:
72:74:0b:a4:f0:89:78:34:28:78:00:e8:c4:dd:d5:
1f:02:c8:3f:7a:5b:cb:3b:bc:cc:de:33:6b:df:da:
55:52:45:d2:23:f3:8d:36:1c:bb:c1:ec:0f:44:81:
dd:b5:7f:fb:64:9e:03:cc:cc:24:90:d1:a7:3e:2a:
90:b7:26:f2:78:8c:cb:f4:00:e8:fb:a5:1b:15:0b:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:8A:DF:DE:76:30:60:85:81:F9:42:DF:9E:D9:CA:EF:43:7D:74
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/H7aK3952MGCFgflC357Zyu9DfXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ad:26:54:fd:30:6a:9b:d4:04:a6:ec:3a:1b:6d:b4:0b:55:
fe:b3:cf:86:e3:69:e8:5e:45:3f:cf:5e:6b:9a:dd:75:cb:1e:
8a:28:70:48:76:7b:82:26:38:59:47:2c:cd:53:a6:9b:d3:a6:
d7:fe:4b:ee:2d:c2:1c:2c:d3:4a:c2:80:9e:30:e5:39:11:0d:
94:77:8b:1f:5a:53:34:70:f6:9e:f3:2a:7a:25:f2:0e:48:71:
33:6d:6a:af:fb:9c:91:cd:4e:a9:30:a3:28:2e:23:ed:cb:5b:
9a:50:52:51:c3:4e:1c:82:71:73:71:8d:74:5c:af:bf:83:01:
a4:23:33:6b:c7:99:a0:11:04:14:b4:b8:30:e5:0f:2f:84:fc:
55:16:a8:d8:e7:ca:60:16:b0:5d:d2:8a:cc:f0:dc:72:2e:f4:
6d:f4:4f:44:62:39:96:25:96:d2:2e:0d:98:4a:8f:f2:84:a5:
64:8d:e9:92:b5:45:19:a9:e4:c3:b8:79:f8:11:6f:4b:96:a8:
29:ae:28:17:4e:e1:68:c7:23:eb:90:f4:b6:65:48:a2:a6:7c:
8f:d2:b2:b1:18:90:67:7f:80:80:69:71:18:66:83:7e:f0:f3:
68:46:56:39:2e:3a:3a:cc:5c:06:cb:2e:99:1f:21:b8:dd:16:
c8:97:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net