Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/tsVKA0S--uoKLyQStmhEUTv3MUo.roa
File: tsVKA0S--uoKLyQStmhEUTv3MUo.roa (raw, json)
Hash identifier: rd036jnNgIw1diGye/V172ABuJ+hByTMdshKNByuOjs=
Subject key identifier: B6:C5:4A:03:44:BE:FA:EA:0A:2F:24:12:B6:68:44:51:3B:F7:31:4A
Certificate issuer: /CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
Certificate serial: 01896478ECE036FCDCB5F53BF08D329A1630
Authority key identifier: 8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/tsVKA0S--uoKLyQStmhEUTv3MUo.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 84.246.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ec:e0:36:fc:dc:b5:f5:3b:f0:8d:32:9a:16:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6c54a0344befaea0a2f2412b66844513bf7314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9c:05:a9:ce:8f:99:61:00:7b:ce:20:d7:af:
16:fa:8a:b1:23:3a:d0:be:df:b5:24:49:6d:7a:c1:
bd:a8:a5:2f:25:49:8c:05:93:b5:e2:8c:0d:64:9c:
bf:97:3f:d1:f6:06:8d:b0:a3:96:80:b5:76:3e:36:
e3:fe:23:b4:b4:4e:9f:d9:3e:e0:76:b5:da:25:14:
83:35:2a:27:94:da:0b:bf:9b:40:e7:05:25:49:fa:
33:e0:6c:03:9b:86:23:9a:76:5f:f0:63:5c:09:6e:
3c:36:c7:65:eb:88:87:e6:95:18:df:23:2c:89:c5:
b2:92:f5:96:4b:e2:1b:4b:ee:39:25:5b:cf:6d:4d:
91:32:7f:ff:d8:fb:c1:58:07:f5:b2:57:37:02:6f:
d2:5f:62:bf:dd:24:a5:20:66:c4:02:4b:0b:b6:bd:
ed:66:ae:95:5e:65:97:40:e1:e3:98:98:46:e4:a8:
ac:0c:91:c5:92:95:88:a5:e3:ef:a2:02:f0:e2:91:
22:b1:d3:69:4e:df:00:ec:aa:03:6a:b7:b5:bd:f5:
c7:88:fa:99:55:f0:e4:ad:09:96:c1:52:ef:25:df:
6b:4f:79:14:ce:06:77:c2:64:85:45:e0:72:3b:f3:
2a:22:92:92:98:eb:73:11:4f:0d:9f:fa:36:9d:b3:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C5:4A:03:44:BE:FA:EA:0A:2F:24:12:B6:68:44:51:3B:F7:31:4A
X509v3 Authority Key Identifier:
keyid:8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/tsVKA0S--uoKLyQStmhEUTv3MUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.106.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2e:70:c7:52:90:18:1c:95:47:bf:79:86:4e:a6:54:29:1e:
48:cc:dd:56:53:3f:6c:ab:3c:bc:1c:ea:a4:79:0e:c0:f9:bc:
80:78:07:a2:ad:69:f2:02:ea:46:69:89:09:4d:84:ae:ac:f2:
fc:a4:34:ac:04:43:88:cd:f0:79:75:a1:5f:9b:78:a1:80:7c:
26:2b:2f:11:49:be:4b:7c:a2:8e:f4:8e:cb:67:e2:91:dd:1d:
73:70:eb:12:fe:a1:99:b4:d8:0f:c9:e7:71:47:2f:b9:8f:d6:
12:d7:90:c6:22:ea:27:f2:ab:9f:9e:b7:8f:ce:65:3e:a8:34:
74:04:ae:0c:69:4f:3f:d2:5a:50:7a:72:d3:09:0e:de:99:12:
26:a7:0e:58:59:1b:54:45:75:9c:e6:a1:5f:bd:74:71:aa:42:
a5:b3:81:e1:58:ca:b1:58:3e:2a:8e:67:d7:b7:cf:55:05:c2:
d9:31:2b:8e:f6:34:89:37:d3:f4:d9:91:94:dd:72:d0:a4:ac:
47:99:5b:59:f4:aa:da:17:53:08:5a:82:d7:f6:00:9f:d7:56:
4b:f9:a2:75:a2:b6:4b:c2:df:68:37:73:aa:53:d3:56:90:51:
ba:1d:65:60:dd:b1:dc:56:ee:80:d7:30:33:93:25:be:c9:30:
59:23:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:47 2025 by rpki-client