Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/21D0Nhw6lRIFoMSuDCoHQdQG5ms.roa
File: 21D0Nhw6lRIFoMSuDCoHQdQG5ms.roa (raw, json)
Hash identifier: BZKzolrWWxAWwoYXz82PV3AJYFjohJMV+jUruAjr8s4=
Subject key identifier: DB:50:F4:36:1C:3A:95:12:05:A0:C4:AE:0C:2A:07:41:D4:06:E6:6B
Certificate issuer: /CN=6d635fe0c0896d584c4ccc1994be7f6a519a8a73
Certificate serial: 01884E91D30D0FD483C067715229E37F2251
Authority key identifier: 6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWNf4MCJbVhMTMwZlL5_alGainM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/21D0Nhw6lRIFoMSuDCoHQdQG5ms.roa
Signing time: Wed 24 May 2023 16:22:39 +0000
ROA not before: Wed 24 May 2023 16:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 46.253.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:91:d3:0d:0f:d4:83:c0:67:71:52:29:e3:7f:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d635fe0c0896d584c4ccc1994be7f6a519a8a73
Validity
Not Before: May 24 16:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db50f4361c3a951205a0c4ae0c2a0741d406e66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:04:46:80:57:e9:b3:6b:26:84:8e:02:fc:
84:25:74:85:e5:3a:b4:c6:a2:ac:59:5c:a9:a6:4f:
92:e3:e0:5f:ff:b4:79:30:0d:65:f3:52:ff:c5:dc:
16:e1:c4:19:a1:62:59:18:1e:02:53:e7:48:34:48:
9d:fc:d3:f5:3a:5d:d1:72:b8:09:bc:ff:0b:c4:8c:
4d:3f:f0:96:04:32:5a:a0:4e:5a:3c:16:d3:a4:51:
53:c1:45:2b:1b:93:b6:47:72:32:07:fa:b2:77:3e:
1c:5b:79:fa:9a:d8:c6:4e:df:7c:92:6a:09:ec:40:
6c:5e:55:94:fe:2f:8c:65:f7:a0:54:83:29:30:ee:
85:e0:12:b0:3f:8c:9b:88:e9:8d:50:47:f5:f2:51:
10:9d:f9:40:d8:3f:97:a7:0f:d0:58:53:72:c3:bb:
c5:89:9f:1e:cf:9e:d4:09:7e:35:47:74:92:1b:3b:
1c:fb:27:5c:57:98:ea:66:22:81:37:74:bf:d4:fb:
f3:b2:26:c5:76:b9:70:b0:2a:4d:d4:fe:19:15:6f:
5b:b2:d5:8c:8c:d0:c9:13:c4:f0:7f:65:e9:02:b8:
47:eb:44:b7:be:43:1a:b0:b7:e2:ad:e7:ab:8b:e1:
18:0c:60:4d:82:eb:8e:44:35:cf:10:a3:42:be:55:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:F4:36:1C:3A:95:12:05:A0:C4:AE:0C:2A:07:41:D4:06:E6:6B
X509v3 Authority Key Identifier:
keyid:6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWNf4MCJbVhMTMwZlL5_alGainM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/21D0Nhw6lRIFoMSuDCoHQdQG5ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.139.0/24
Signature Algorithm: sha256WithRSAEncryption
98:37:ac:c5:98:b4:00:b2:53:34:61:20:76:8c:7f:36:8f:e5:
11:58:fd:34:6e:69:ce:7c:04:ce:58:02:1c:a0:57:c1:79:1b:
22:25:0a:c3:b3:29:73:3d:e0:e8:e6:96:b2:ea:65:71:ce:0c:
6d:6e:10:39:48:5f:f4:49:2c:73:35:f4:59:57:5c:30:0d:6a:
2c:6a:c8:31:26:c9:be:c2:61:89:b7:91:0e:0f:e2:01:8f:db:
60:68:f6:0c:28:07:32:5e:9b:85:d4:74:86:25:c6:bf:ff:ca:
79:a6:56:17:1d:33:f4:39:5f:80:0f:cb:5a:c8:3c:fd:75:dd:
23:47:ad:b1:89:50:cb:0d:6f:74:31:99:bd:9b:91:ac:99:b0:
19:ea:94:50:a2:df:ae:d9:49:31:44:3d:88:3b:e6:68:f4:11:
e9:95:d1:11:2c:64:d1:29:5d:c0:e3:fc:7b:da:e2:d7:98:07:
7b:51:8a:f6:2b:04:c0:eb:8a:44:ee:9a:d3:17:2f:ae:73:3f:
b9:11:89:a1:1a:c5:48:03:4d:5b:66:be:bd:fd:3e:94:81:88:
fb:a1:c4:77:6b:c0:25:95:31:2e:b6:47:3c:27:7b:b4:0e:b3:
22:0f:c1:44:d2:a4:8a:90:e1:2c:ca:07:84:92:30:04:6d:6d:
d7:41:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org