Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/H25W3_h-YMT-l6LEyuk0397TH-c.roa
File: H25W3_h-YMT-l6LEyuk0397TH-c.roa (raw, json)
Hash identifier: v+C5qjCsNLbcg3EuKqmUP54vWmxjts3TkdKHQRmsQaI=
Subject key identifier: 1F:6E:56:DF:F8:7E:60:C4:FE:97:A2:C4:CA:E9:34:DF:DE:D3:1F:E7
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 6AA540
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/H25W3_h-YMT-l6LEyuk0397TH-c.roa
Signing time: Fri 15 Apr 2022 16:18:44 +0000
ROA not before: Fri 15 Apr 2022 16:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6989120 (0x6aa540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Apr 15 16:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f6e56dff87e60c4fe97a2c4cae934dfded31fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:a5:8a:62:2c:0c:26:23:e5:bf:56:a1:14:
fd:8c:2c:19:a8:16:3c:46:ee:ad:d2:3e:cc:6b:fe:
54:69:ac:6f:fd:62:f7:93:ee:42:40:ec:46:4d:93:
66:12:95:c0:75:18:fb:c0:13:87:2d:53:b4:30:1e:
94:89:fa:63:7c:5f:9e:c3:75:14:da:e6:00:8c:0a:
b3:3d:24:8d:e8:00:c8:35:59:9e:82:f8:83:07:fa:
6b:c6:fa:7e:28:b2:e6:05:52:21:e0:54:76:c1:ca:
a9:23:8c:75:43:8a:b5:8f:06:ce:7b:e4:cb:91:36:
b0:fd:c1:c8:eb:a1:f3:ef:1d:22:1f:5d:2c:73:b2:
7e:54:7f:f8:83:7d:ae:4b:71:d0:65:b4:d1:6d:0e:
e5:4c:49:05:9a:e6:05:17:b9:cb:cb:04:cc:16:b0:
2e:a4:a9:65:c6:99:16:d3:91:c3:f1:c8:47:c5:93:
34:9b:94:79:d0:28:e7:38:e2:db:a4:0c:80:ef:8c:
d8:4f:0e:24:a0:13:6d:f4:2d:fd:17:d7:f7:76:91:
23:d7:95:8f:75:75:ff:38:a1:ef:78:63:74:09:ff:
bd:27:a7:84:f4:0c:65:c8:c7:a8:4e:f9:b4:35:35:
84:85:6e:f1:9e:73:7f:90:cd:c6:18:72:d9:96:e5:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:56:DF:F8:7E:60:C4:FE:97:A2:C4:CA:E9:34:DF:DE:D3:1F:E7
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/H25W3_h-YMT-l6LEyuk0397TH-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:85:92:1b:5d:e0:4b:71:41:d4:7b:59:d7:3f:05:fc:f7:ef:
49:bd:5f:67:82:37:1c:d8:79:79:e1:ab:8c:93:07:27:8e:70:
11:41:20:48:1e:df:85:7a:38:06:a4:a3:fe:95:7a:be:69:fd:
2a:5a:2e:67:b1:79:7c:21:cf:1d:72:47:63:c4:76:be:b2:85:
e3:1b:20:45:68:d5:39:71:a0:ee:45:53:ae:c5:e3:11:67:9a:
09:ce:62:29:03:be:8a:78:ff:6f:32:d6:e8:a1:34:3a:f7:cf:
bf:cc:84:27:a6:ba:70:f9:65:ae:e2:a6:2a:8a:fb:67:2b:ed:
b8:70:76:d0:f8:82:74:dd:d7:e7:1f:93:e7:6c:7e:a5:90:04:
4a:f0:c4:6b:69:fe:77:b6:6c:03:07:9b:e2:3c:04:60:f7:7f:
f0:d4:ef:ba:61:c3:62:fc:d4:78:a6:81:88:22:1a:4a:3e:1c:
ea:b3:c5:0e:1e:aa:55:50:1f:b8:64:89:de:94:3f:2d:d0:a0:
17:56:80:a2:af:08:8c:e6:fa:56:cc:10:ad:00:5d:1f:ae:40:
6d:91:05:00:b0:60:e3:fc:d0:a2:74:f9:97:25:c4:ca:89:7e:
bd:86:b4:32:d7:d6:69:4f:ac:50:4f:3b:8f:05:36:17:37:b6:
f8:0a:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org