Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/BSaYXcSa62RuJd4EDgQqdggNeOg.roa
File: BSaYXcSa62RuJd4EDgQqdggNeOg.roa (raw, json)
Hash identifier: efE7jdAofeCDr84HmDkJQ8ehR3NGyof/MSZiYpW2bMY=
Subject key identifier: 05:26:98:5D:C4:9A:EB:64:6E:25:DE:04:0E:04:2A:76:08:0D:78:E8
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018D30D96B9E0A0E80DBA622FB53332626E1
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/BSaYXcSa62RuJd4EDgQqdggNeOg.roa
Signing time: Mon 22 Jan 2024 11:06:11 +0000
ROA not before: Mon 22 Jan 2024 11:06:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:d9:6b:9e:0a:0e:80:db:a6:22:fb:53:33:26:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Jan 22 11:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0526985dc49aeb646e25de040e042a76080d78e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:ca:7a:af:b0:3b:d6:48:79:99:31:f8:a3:
5c:f3:ee:28:70:60:ee:b8:68:fc:7a:91:4b:9a:8e:
88:bc:81:24:93:6b:23:38:21:dd:06:99:5d:1c:0c:
13:46:4f:c7:70:25:b3:22:48:7a:a8:eb:ba:ba:d6:
29:2e:c6:a6:75:55:ea:17:4b:78:ba:cb:9c:51:f9:
6e:0b:f4:44:46:a2:1b:60:07:30:b3:d0:e2:13:39:
b1:04:04:4a:fd:6e:44:b9:a1:6b:ed:c8:b6:00:d2:
a8:bb:df:d3:0d:e2:31:cc:70:95:6c:4a:02:cd:27:
dd:12:0e:ee:5c:9b:69:82:cb:9f:4f:df:f1:ac:33:
29:fd:1b:19:34:8d:f1:36:47:71:d7:e2:38:dc:53:
f6:8e:45:44:cc:29:47:a3:dc:71:a8:0d:cf:97:21:
9f:31:dd:fa:35:6c:f3:e5:10:2b:8a:58:e7:17:ef:
4f:e6:cf:c2:70:05:32:0f:a4:02:d4:6a:45:58:a3:
56:5d:45:42:78:95:96:e8:ca:c9:e3:ee:a1:d5:f8:
56:14:44:83:a0:cf:52:57:70:c7:58:34:e9:0b:2a:
96:02:55:aa:df:43:10:0b:46:38:77:e5:7e:e1:62:
af:96:15:f1:01:9c:02:e3:c4:aa:91:df:22:4a:9e:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:98:5D:C4:9A:EB:64:6E:25:DE:04:0E:04:2A:76:08:0D:78:E8
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/BSaYXcSa62RuJd4EDgQqdggNeOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:20:e7:bc:56:b9:d9:99:42:fa:39:36:dd:cd:0e:a0:9c:ff:
b2:35:0f:dd:0f:e8:e1:81:8f:e8:20:0d:06:72:26:2c:06:58:
18:24:f9:ea:4d:65:f7:84:a2:15:c8:3c:74:59:5d:fe:65:ef:
cd:20:3d:9e:c1:78:e9:2d:a2:f5:4a:25:7d:b6:1e:ca:9b:03:
4b:0b:b2:61:73:f8:2f:59:bb:23:07:bf:c7:f9:b0:6e:56:83:
9b:3b:e3:32:8f:7d:58:ac:2c:76:af:fe:9d:1b:d1:95:72:ab:
19:4b:01:89:e4:96:7a:27:38:ed:8b:7a:d2:0c:44:28:10:4f:
17:ef:ed:8d:a3:4d:ef:41:f3:31:3d:8c:de:06:5a:e3:15:f1:
24:b0:37:e7:41:d5:92:5d:f6:1d:7a:63:e9:ef:81:43:0e:58:
3b:06:5d:5e:fd:f2:ff:fa:a9:14:a7:c3:b6:ee:42:5a:c8:0a:
b5:0b:fe:32:a4:04:d7:b6:ce:32:71:2e:86:81:11:04:9b:8c:
57:d8:b0:e1:5d:64:c5:97:a1:cf:ba:c3:63:dc:9f:66:2d:2a:
fe:6b:a8:ad:7c:f1:c4:d1:d8:42:8a:84:f9:c5:fe:67:a2:c9:
26:78:96:63:24:fd:85:b2:fd:9a:93:bf:c8:c5:8f:e0:2e:cd:
82:c9:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:14:13 2024 by rpki-client on console-fra.rpki-client.org