Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/aNRjmD03GQJlvuTVQK83PORzjdI.roa
File: aNRjmD03GQJlvuTVQK83PORzjdI.roa (raw, json)
Hash identifier: +vXbq8fkOxR6NJuneBbjxViEYjzx9d6VpAC27esHsqQ=
Subject key identifier: 68:D4:63:98:3D:37:19:02:65:BE:E4:D5:40:AF:37:3C:E4:73:8D:D2
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 018313800F9EF9916D96E78BA744A40F07A1
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/aNRjmD03GQJlvuTVQK83PORzjdI.roa
Signing time: Tue 06 Sep 2022 15:51:43 +0000
ROA not before: Tue 06 Sep 2022 15:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:80:0f:9e:f9:91:6d:96:e7:8b:a7:44:a4:0f:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Sep 6 15:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d463983d37190265bee4d540af373ce4738dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:76:27:fd:d9:ba:89:62:1b:0b:da:60:72:
91:b4:83:94:ee:8a:dd:67:19:55:bb:ca:c1:7c:09:
43:0d:81:a8:4c:8b:31:e5:44:a9:d7:c8:96:34:69:
6b:c5:6d:8e:de:e1:9b:06:ed:e1:c3:5f:b8:0b:4f:
81:b9:36:72:98:63:4b:7a:54:61:42:8b:96:a8:15:
78:8f:f9:e6:c3:d8:69:cf:80:df:e3:44:a8:4c:e4:
8d:b8:78:13:92:69:ac:19:fa:d5:8a:bc:ec:a0:a8:
23:d1:ce:e7:0f:9f:8b:5c:10:76:19:2b:80:da:fe:
66:d1:9f:ef:e4:a0:97:02:7e:5d:84:f8:e1:11:22:
68:d3:32:6c:39:41:65:4d:34:97:b5:34:37:57:3c:
07:00:28:6c:c4:fe:4d:c0:a6:72:d1:f1:c7:a2:35:
56:0b:ea:f4:e8:8b:26:47:0c:0f:cf:6f:69:13:f8:
bb:ec:ba:33:a3:38:91:4a:8a:df:1b:90:c2:2c:6e:
d7:d5:0a:e7:60:c3:3a:ef:fd:18:d2:01:16:27:5c:
86:85:de:72:61:92:d4:d6:70:d3:00:91:21:81:d4:
ac:ca:7c:53:f6:e4:a4:3a:6b:2c:c6:5b:3d:e7:90:
03:1f:3f:8f:e3:9e:b7:2a:dd:96:e1:3a:e0:5b:34:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:63:98:3D:37:19:02:65:BE:E4:D5:40:AF:37:3C:E4:73:8D:D2
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/aNRjmD03GQJlvuTVQK83PORzjdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ef:3c:bb:c4:7b:5e:82:fd:75:63:80:61:cd:89:53:59:4f:
1c:65:ac:00:72:a4:4a:b0:00:70:f3:e2:62:3f:1c:29:63:16:
47:75:77:c6:78:00:e9:24:96:8a:d1:56:81:03:4a:4d:db:60:
36:8c:1a:48:81:f2:c1:71:77:83:71:38:87:ca:3c:3b:87:5d:
aa:f8:28:c4:06:e0:ce:92:9e:55:d0:73:44:c0:80:22:61:37:
c7:05:7a:f1:68:34:0f:0e:c3:70:47:e8:55:ed:72:fb:76:53:
42:26:94:79:c0:14:4e:dd:6a:c3:55:eb:6f:8d:62:a1:90:bd:
4e:81:6d:0a:63:4b:24:97:69:57:cc:a4:88:02:68:3b:0f:34:
21:91:3d:00:f7:3c:14:7f:1d:36:c8:9c:f2:e6:43:4d:95:9d:
01:04:ce:d3:9f:b9:de:b9:1c:01:b4:38:2e:18:53:31:05:71:
92:a4:9e:21:2a:01:1c:ba:23:6c:86:20:d4:2e:38:6d:07:ba:
9a:98:e7:f7:4c:50:b3:fe:72:e9:6c:49:95:db:9f:29:50:51:
98:90:b9:23:e2:6f:22:b6:43:5c:d0:f7:47:bc:01:8d:1e:53:
25:d1:3d:bd:fa:e5:c3:85:26:72:08:79:48:69:c7:ff:e4:5a:
54:bc:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net