Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/Y3jWT8E5xg3qGRLH9bbwnjzpfEs.roa
File: Y3jWT8E5xg3qGRLH9bbwnjzpfEs.roa (raw, json)
Hash identifier: mqgEB1S5zVfvDINaIoiH29eL5UpgWacQHuyWuMZ4HVo=
Subject key identifier: 63:78:D6:4F:C1:39:C6:0D:EA:19:12:C7:F5:B6:F0:9E:3C:E9:7C:4B
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: E14536
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/Y3jWT8E5xg3qGRLH9bbwnjzpfEs.roa
Signing time: Mon 07 Feb 2022 09:39:28 +0000
ROA not before: Mon 07 Feb 2022 09:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14763318 (0xe14536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Feb 7 09:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6378d64fc139c60dea1912c7f5b6f09e3ce97c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:36:bd:94:19:34:9e:66:c2:8d:99:3e:f5:
d0:69:fd:10:53:35:30:56:7e:53:ac:58:aa:7b:08:
ca:4f:b0:8e:61:80:c7:88:a9:ae:32:c7:b0:79:28:
3b:04:e0:55:9c:0e:b1:6a:6c:87:7d:2b:d0:71:78:
60:ee:df:13:61:92:3f:50:44:f1:22:f8:5c:6c:c2:
d4:6c:e4:1c:4c:28:51:04:53:df:47:55:e7:5c:34:
97:e4:77:69:5b:11:95:0c:95:bd:50:43:84:6d:67:
32:23:4e:5e:a2:07:7d:98:86:cf:03:48:da:ce:7f:
e9:f7:92:8c:34:88:dc:e4:ab:0d:f5:1f:fe:f8:a2:
af:aa:d0:1a:78:47:6d:9f:17:61:f9:82:68:27:c4:
97:7b:5d:35:94:ce:9b:8e:6c:16:6b:bc:2a:9f:28:
69:0f:ca:cc:f2:3b:4f:6e:5d:d6:c7:3e:a9:5b:da:
23:36:7f:7f:a0:30:d8:6c:1f:25:9d:e3:fc:5b:df:
7e:dd:37:87:4a:38:c4:5d:3e:21:75:46:78:87:fd:
0d:09:f3:9f:a0:24:81:19:ea:8e:e2:43:13:13:ed:
f4:4c:44:cd:7f:a4:8f:12:a7:6e:fa:20:d1:df:ee:
fe:f7:4f:01:20:b4:1e:f7:3c:96:fe:e3:d7:3c:1d:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:D6:4F:C1:39:C6:0D:EA:19:12:C7:F5:B6:F0:9E:3C:E9:7C:4B
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/Y3jWT8E5xg3qGRLH9bbwnjzpfEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d8:1e:12:d8:26:ba:b1:1b:b8:69:51:2f:b5:8e:7f:69:bc:
58:8c:d6:67:ce:bb:f1:0d:86:de:10:10:df:14:fa:71:4a:f6:
f3:c9:45:2d:18:53:e2:fc:f9:c7:d3:6a:c3:a0:4f:93:8f:f6:
3d:5b:b1:d2:ef:be:c3:0c:8f:cd:f0:f8:94:43:ed:ac:b0:4f:
11:4d:dc:1a:e6:6d:c3:3f:b1:79:e6:b6:ca:c9:d4:b7:66:28:
c6:36:46:d0:d5:ad:24:79:27:69:21:aa:3f:3d:6e:84:f1:d8:
a2:a0:b1:aa:22:32:6a:c6:61:2b:6b:f2:a1:f8:c6:6a:b6:fd:
c2:15:f7:77:26:be:65:0c:a8:a7:9e:25:b4:9f:70:98:95:ee:
a7:7c:96:f6:98:07:05:26:b4:ce:7a:3d:91:09:9c:c3:c9:78:
15:9c:13:d1:db:79:3e:07:db:e0:96:5d:35:8f:88:a6:16:6f:
c8:db:23:a3:12:3b:ba:e5:29:90:e8:a6:18:6a:38:f7:3d:ad:
7b:a8:85:45:3f:bf:94:fe:34:34:f5:82:c2:ee:e7:09:5a:1a:
57:f0:f4:31:f1:f5:b9:a4:57:21:af:33:97:0a:89:19:8e:96:
5a:b0:65:dc:29:48:06:1c:97:ef:13:74:40:88:b0:a7:84:90:
11:c5:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net