Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/3EkOXECKKO5dDlIEPEqqxLV00ZI.roa
File: 3EkOXECKKO5dDlIEPEqqxLV00ZI.roa (raw, json)
Hash identifier: UfvjxAmKdkKcFRoyM+eAnvKIFALtAR5T6aUI7dKGUH8=
Subject key identifier: DC:49:0E:5C:40:8A:28:EE:5D:0E:52:04:3C:4A:AA:C4:B5:74:D1:92
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 01856ED4B0564E750D552F8BA4A23498FC82
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/3EkOXECKKO5dDlIEPEqqxLV00ZI.roa
Signing time: Sun 01 Jan 2023 19:35:10 +0000
ROA not before: Sun 01 Jan 2023 19:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b0:56:4e:75:0d:55:2f:8b:a4:a2:34:98:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Jan 1 19:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc490e5c408a28ee5d0e52043c4aaac4b574d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:9a:61:f7:b4:2d:6e:cf:65:fb:c2:36:ea:
d9:4a:b9:b6:f6:89:55:90:15:73:83:0c:03:b3:ff:
99:61:31:df:1d:8a:00:2b:43:5c:e0:05:e8:ee:61:
05:08:43:4e:47:07:a2:ea:1d:09:d0:f0:18:82:f5:
3f:b6:e9:0e:01:b3:6d:84:a6:79:e0:2d:eb:15:e2:
77:08:51:dd:e5:60:f1:64:50:15:d9:6c:76:58:34:
bc:f6:32:f9:07:56:2d:a3:e1:b0:b7:00:64:59:f1:
92:a8:f5:e9:68:5b:5f:b9:5c:d7:64:42:13:0b:95:
15:4a:3e:97:80:70:7d:a1:60:23:38:c1:59:b6:3e:
64:b8:08:a1:ce:fb:ad:d2:31:8a:2f:ec:c3:3e:75:
17:2c:b5:2e:5f:e1:f3:64:12:c1:45:dd:76:3b:98:
ac:64:ad:05:e2:cc:0d:ef:78:50:af:04:b0:01:c3:
2a:5c:30:a2:e2:6b:67:5f:b4:6e:7d:c7:2b:85:3e:
ea:2f:cc:69:21:08:83:2a:f5:f3:55:26:0f:0e:41:
b0:fa:2e:a8:4f:8d:95:ed:8a:e3:62:a9:ee:0a:7e:
7a:54:72:f6:1d:42:92:39:93:70:69:f4:a8:1f:4e:
a2:e8:66:81:50:60:35:31:e1:66:c9:24:86:16:d0:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:0E:5C:40:8A:28:EE:5D:0E:52:04:3C:4A:AA:C4:B5:74:D1:92
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/3EkOXECKKO5dDlIEPEqqxLV00ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ea:c7:18:81:fe:58:c8:2f:93:f3:d3:a8:4e:0c:17:12:5f:
f0:89:2e:7b:a6:95:77:59:46:6f:5a:7d:09:17:5b:b6:ce:52:
4d:2b:f6:70:ec:02:29:ae:23:2d:55:57:18:2e:21:63:d5:8a:
e1:c3:de:cb:22:f5:7a:3d:f0:ed:d7:df:68:c3:a4:64:b1:ae:
ea:21:fe:b8:11:eb:f5:f4:f4:7a:33:c5:ba:77:e0:83:fd:c6:
45:df:2f:cc:67:71:e2:6e:5d:b5:45:c7:4c:26:5b:31:5a:92:
95:b7:c2:bd:f2:90:5f:2a:0d:40:c8:aa:c2:c2:df:7f:e9:28:
62:9f:06:e4:e1:3b:4a:94:d8:64:27:79:05:5b:d8:39:67:05:
1c:01:1c:65:04:7c:1b:d8:85:8a:32:4b:0d:e0:6c:d0:04:43:
08:00:6f:fc:a8:b0:c6:d4:b9:10:70:2e:4d:7b:c9:7d:71:cc:
47:82:48:04:12:51:92:92:e4:47:4d:a3:df:1f:35:20:e0:49:
0a:21:f6:36:03:7d:ef:82:3c:91:88:88:ed:6a:37:d0:c6:5e:
7b:40:0e:fc:5f:6e:1e:9c:94:69:92:45:a3:a0:df:ce:da:29:
3e:c0:c8:ed:b8:5c:c0:52:ba:33:81:f1:7b:58:8f:c5:50:cb:
b3:9d:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:44 2025 by rpki-client