Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/DD8tn1w0sY3neh6RxH2jOsrFo_s.roa
File: DD8tn1w0sY3neh6RxH2jOsrFo_s.roa (raw, json)
Hash identifier: avVmKpkR+QVZ01bDTv3hrZ5Ehl0GRWj/IR/jcjTk1kM=
Subject key identifier: 0C:3F:2D:9F:5C:34:B1:8D:E7:7A:1E:91:C4:7D:A3:3A:CA:C5:A3:FB
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 01856ED4AF05A27B7DD97FE0CFC1388AEAA0
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/DD8tn1w0sY3neh6RxH2jOsrFo_s.roa
Signing time: Sun 01 Jan 2023 19:35:10 +0000
ROA not before: Sun 01 Jan 2023 19:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:af:05:a2:7b:7d:d9:7f:e0:cf:c1:38:8a:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Jan 1 19:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c3f2d9f5c34b18de77a1e91c47da33acac5a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:e1:0b:77:9b:6f:60:1a:e1:be:39:c8:98:
13:0f:02:e0:0e:3c:e0:80:e5:65:6d:30:7a:10:d6:
3c:98:70:d4:3a:48:a9:8b:ae:da:39:6d:ff:ba:13:
9c:53:11:29:f1:8c:6b:68:6e:27:3c:e1:3f:c3:75:
65:a5:00:0a:01:cd:c2:64:e9:eb:1f:f2:0f:c9:3b:
b5:61:1d:e9:cb:d7:77:02:a2:11:e4:ba:9f:27:55:
52:9c:6a:cf:47:6d:fc:de:33:dc:ed:9f:49:47:de:
d0:ef:72:ef:c1:07:18:b2:fe:e7:34:54:a0:33:0f:
1c:61:5f:a0:3b:6e:f2:6f:2d:b6:0d:5e:74:04:69:
7d:18:13:1c:5c:d6:2e:ac:65:64:43:55:6c:ce:62:
ae:d5:5a:09:35:80:18:99:89:ad:7b:69:65:b2:f5:
99:a4:87:90:ec:b1:ef:9a:17:7f:60:29:77:a0:06:
5e:1a:e7:85:9c:34:c2:6d:5f:8a:9d:f5:a6:98:90:
3a:ea:0c:e0:22:48:ca:c4:ab:cc:22:d4:96:48:eb:
28:06:5b:98:8d:5c:c7:cb:63:a1:cb:b9:07:67:c9:
d9:1d:52:cc:96:93:25:f4:80:d7:e4:8f:34:25:48:
0d:e6:57:77:8d:ac:29:d5:b9:b1:29:61:72:f2:80:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3F:2D:9F:5C:34:B1:8D:E7:7A:1E:91:C4:7D:A3:3A:CA:C5:A3:FB
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/DD8tn1w0sY3neh6RxH2jOsrFo_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:75:f4:79:88:f7:99:3c:9f:64:df:1a:f0:42:57:c3:96:89:
20:60:b9:26:fd:42:b0:cd:02:e7:41:b4:83:b7:a4:3a:c3:7b:
1f:7a:a9:3c:49:1a:eb:8d:72:43:21:1c:31:b0:1a:84:6c:1b:
6b:77:10:64:7e:1d:ab:7a:c2:a3:5f:ff:0c:7d:08:94:84:93:
e9:ff:ff:b7:9e:71:6c:b3:5c:77:00:0f:5e:66:2e:35:1d:db:
d7:1d:76:89:68:0d:35:6b:b7:9f:e8:ed:a5:25:63:4b:75:12:
46:68:01:5e:b5:99:71:c1:fd:7e:e0:3d:24:4c:54:e2:c6:b5:
a5:40:0d:dd:ff:65:13:29:4c:03:a0:7f:18:27:fd:5d:da:d2:
08:22:2a:bc:39:6e:0e:5e:50:b5:d6:13:57:13:28:b2:40:67:
b5:6e:33:2f:89:c8:a7:29:6b:a7:1d:55:6f:15:5c:3c:47:93:
22:d3:7d:58:e3:b4:80:33:6b:b7:41:67:2b:9e:39:8a:29:ac:
05:b8:28:2f:ff:24:93:53:81:0a:02:20:40:73:8c:b4:cf:ca:
03:27:35:f5:7f:47:a3:23:c7:d1:44:ed:40:ac:c4:10:8f:78:
b3:8a:39:c7:61:42:5d:c2:58:fc:00:db:b2:05:cb:10:36:3d:
66:0f:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:56 2025 by rpki-client