Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/IzOST6NOcHNR6MzCpT389Y3J0nY.roa
File: IzOST6NOcHNR6MzCpT389Y3J0nY.roa (raw, json)
Hash identifier: f6diT6FmCw2hSzkJg3FTUuk57c46VRwDswhHNuj8zvU=
Subject key identifier: 23:33:92:4F:A3:4E:70:73:51:E8:CC:C2:A5:3D:FC:F5:8D:C9:D2:76
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018CC56DE4284F84C7E36A9B97A968721A45
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/IzOST6NOcHNR6MzCpT389Y3J0nY.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:28:4f:84:c7:e3:6a:9b:97:a9:68:72:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2333924fa34e707351e8ccc2a53dfcf58dc9d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:f7:e8:9c:f1:e8:97:12:34:1f:1a:7b:1e:
39:77:de:0a:18:fd:83:c9:80:8d:3f:b5:6b:1f:98:
bc:ae:23:d1:ce:f9:1c:7d:d9:e8:df:17:81:3a:0e:
8b:dc:bd:d6:2a:f4:ac:7e:b9:5d:41:6c:2d:84:93:
c7:ce:60:98:7e:9d:dd:e0:1f:ea:3f:48:b0:b4:af:
6a:2b:81:b0:12:ab:9b:11:55:43:bc:db:bb:7f:06:
59:4a:50:d5:e0:4c:11:39:a0:ba:2a:64:fe:22:bb:
20:57:02:ca:14:5d:76:76:5a:02:3a:c2:19:ff:0a:
cc:b8:7f:90:29:ee:15:de:4d:7d:14:17:24:e7:21:
9c:27:8c:99:e4:fb:5e:ec:1c:43:55:de:a1:db:ab:
7a:12:18:fe:8d:e4:bf:79:e7:2f:6a:df:74:5a:3d:
27:b0:56:53:69:6e:03:60:60:58:2d:1e:9a:79:c3:
1f:c0:5a:0b:9a:6d:5d:15:52:9a:8c:10:9a:72:00:
fc:26:48:cf:2a:e8:4a:a5:4e:9f:08:a4:b9:4c:8c:
35:3e:1b:13:8a:dc:5a:ba:bf:de:89:86:24:64:46:
9b:c2:9b:ca:da:c7:77:f2:76:3c:77:10:c2:d0:be:
f0:5c:f5:77:2f:36:75:74:53:58:51:b3:c1:2b:09:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:92:4F:A3:4E:70:73:51:E8:CC:C2:A5:3D:FC:F5:8D:C9:D2:76
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/IzOST6NOcHNR6MzCpT389Y3J0nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ad:33:fe:3c:07:1d:a8:be:80:87:56:f9:53:08:50:de:78:
ae:87:d0:9e:e4:2f:e7:e5:5b:7d:a3:70:96:9c:14:ff:54:aa:
32:9e:75:82:4e:85:74:f1:95:c1:de:dd:b9:e0:54:37:c5:00:
78:a0:a0:2f:c1:30:9d:e0:48:27:50:96:2c:1c:2d:da:25:cc:
48:f6:8a:55:15:ec:41:8e:59:38:56:52:59:42:be:33:58:5e:
04:47:b9:9f:c2:69:47:dd:0e:68:7d:c6:8c:30:2b:f9:3b:18:
ab:bd:ac:97:7b:12:3e:fd:95:92:5d:af:84:97:89:ad:0b:ff:
b7:bd:20:9b:40:ca:54:9e:78:d9:59:60:84:5d:d3:e7:d7:5d:
d8:fb:98:60:f9:e4:21:bb:04:a8:c8:06:e5:73:3c:e5:0e:bf:
39:c9:d5:fd:3f:b6:22:5d:bd:5a:53:48:2a:3c:01:cf:fb:ac:
6d:2b:30:74:c6:1c:0a:70:ce:89:7d:e9:59:70:7b:a1:fd:73:
38:c6:27:7b:f3:bf:17:96:f7:20:b2:34:be:76:af:02:ee:15:
4b:0f:ff:e2:cf:7b:cb:1b:4c:5a:21:9a:43:a4:53:5a:f3:e8:
11:a6:6c:02:8c:01:be:1f:74:33:ff:6d:11:d6:83:8f:5d:88:
b0:cb:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:00 2025 by rpki-client