Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/q_zTRvDGr4RBvBhOiveOZaSIIPg.roa
File: q_zTRvDGr4RBvBhOiveOZaSIIPg.roa (raw, json)
Hash identifier: nAe0KqNsS1C68FOQoUiLJFSFdjwsibnUxvcEO2TetxQ=
Subject key identifier: AB:FC:D3:46:F0:C6:AF:84:41:BC:18:4E:8A:F7:8E:65:A4:88:20:F8
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 018475503CE4C740BFB6EEB82A121D39623E
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/q_zTRvDGr4RBvBhOiveOZaSIIPg.roa
Signing time: Mon 14 Nov 2022 08:45:03 +0000
ROA not before: Mon 14 Nov 2022 08:45:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:50:3c:e4:c7:40:bf:b6:ee:b8:2a:12:1d:39:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Nov 14 08:45:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abfcd346f0c6af8441bc184e8af78e65a48820f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:40:36:b9:47:68:f8:1c:6c:de:59:48:27:
50:db:18:d2:ec:f2:a4:90:15:cc:4c:21:05:2f:bb:
a7:66:45:b3:8f:0c:1d:60:16:df:93:13:95:bc:da:
8b:a5:e2:a6:a6:de:ed:40:ec:a9:a2:0b:01:63:d7:
54:dc:69:20:c9:7c:51:76:a1:42:38:a6:8a:2c:ca:
fb:5d:8e:6e:79:08:6f:92:72:ae:6e:d0:d8:c1:ec:
26:cd:45:e6:f0:9a:77:cc:28:b8:67:19:77:36:bf:
3f:1b:c1:ed:21:6f:1a:db:46:dc:1e:2e:65:1d:5c:
9d:f4:8b:58:08:be:32:bc:6d:e2:b3:7b:2e:e6:23:
1c:02:60:06:d8:a6:3d:69:20:0d:50:dd:44:a3:87:
47:dd:4f:36:f1:0a:6d:8a:cb:9a:31:68:c4:4b:02:
b9:56:13:7c:d4:84:25:6e:ae:b4:2e:a6:8e:24:c4:
a1:5e:7a:cc:11:10:c3:9c:06:86:22:4e:bc:f0:58:
02:08:db:64:2b:d7:7b:95:ce:ec:d6:e2:ec:1f:96:
ff:38:c4:12:79:cc:96:67:db:2f:fe:72:cb:f4:46:
00:e3:be:6c:cd:00:81:5c:b3:32:4b:bb:98:7e:9a:
a5:dc:37:3f:8d:43:31:ec:bb:db:08:ce:32:0a:dc:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:D3:46:F0:C6:AF:84:41:BC:18:4E:8A:F7:8E:65:A4:88:20:F8
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/q_zTRvDGr4RBvBhOiveOZaSIIPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:52:6e:af:9b:46:0f:6c:c2:1e:5b:1b:a9:47:70:5f:08:be:
c1:80:b7:5a:3b:2a:40:82:ba:23:e1:57:4b:37:e1:62:56:6b:
c5:bc:ab:f0:71:75:88:0a:66:29:f6:c7:85:35:70:f6:27:d6:
11:7d:8e:c3:8b:86:78:fb:c0:0c:37:6f:89:91:5e:cb:53:00:
3c:25:5f:a4:d0:2a:53:78:01:40:e7:50:af:02:a9:3b:7b:b8:
25:6d:b6:16:90:e7:03:54:3b:3b:36:07:21:e2:02:cc:27:02:
2e:77:8d:5f:bb:f5:6a:45:79:04:13:fd:e3:77:af:cf:31:5c:
96:f4:1f:08:a9:8c:c2:71:99:ef:5a:3c:65:d7:93:db:66:d2:
99:7c:ad:4c:c9:27:7c:92:ca:dd:0b:bc:2f:44:1a:64:3d:bc:
21:a2:70:0a:89:35:27:f2:99:a6:e8:3b:e4:ce:4a:a9:54:8d:
a9:8c:c0:09:48:86:89:d0:d9:0d:0c:4f:9e:55:cb:af:b8:cc:
c5:c4:56:30:4b:e0:d9:f9:d2:21:50:88:e2:52:0f:db:3f:d1:
8f:51:62:5e:1d:e7:a8:d7:5e:1a:a5:6d:17:46:ec:5d:d0:26:
b8:2d:13:3d:69:bf:a7:ff:9f:85:bb:e6:12:31:e6:49:a1:a8:
47:01:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net