Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lQ2AruBusbNXPlnlXY_0hxHZsGU.roa
File: lQ2AruBusbNXPlnlXY_0hxHZsGU.roa (raw, json)
Hash identifier: WgrVEWvJ6QaLQlEvO0KbDJZYK/JP/OWp2tuaLQXDBAI=
Subject key identifier: 95:0D:80:AE:E0:6E:B1:B3:57:3E:59:E5:5D:8F:F4:87:11:D9:B0:65
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018A87CD8E5A0AB06D49A950169E8DDA314F
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lQ2AruBusbNXPlnlXY_0hxHZsGU.roa
Signing time: Tue 12 Sep 2023 05:11:50 +0000
ROA not before: Tue 12 Sep 2023 05:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:cd:8e:5a:0a:b0:6d:49:a9:50:16:9e:8d:da:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Sep 12 05:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=950d80aee06eb1b3573e59e55d8ff48711d9b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:73:82:62:b1:f4:fe:27:e6:c2:87:53:67:
c4:b9:59:7f:6c:0c:37:3c:81:e8:34:9e:7e:a3:e0:
93:65:ba:81:df:9b:41:71:55:70:a5:ea:1f:34:67:
e9:9c:d6:51:dd:5f:5f:b3:9c:cd:76:23:46:da:32:
e4:ba:ed:e7:f2:ea:54:e2:13:55:ae:ef:a8:95:b0:
ab:09:d9:3f:30:fc:ad:7b:45:81:b3:05:c4:34:95:
ae:c7:49:99:ae:5f:ac:88:37:dc:79:8c:24:c3:a8:
ee:18:aa:ca:e6:aa:74:33:c9:92:bb:91:59:e1:4c:
6e:5f:1d:90:53:f5:fc:0f:2d:ce:63:02:59:bc:53:
73:1f:d1:78:7c:2b:8b:5c:45:2e:fa:c2:a1:6b:50:
db:39:cc:11:bd:6e:3b:36:99:84:a0:14:cd:f1:c4:
9f:05:03:e5:ac:68:ca:31:07:4d:ce:f4:60:b8:d1:
6c:c0:66:f1:2f:3b:1d:51:9f:6c:49:02:6d:40:d6:
9a:d4:58:cc:03:e1:17:9d:97:75:92:03:79:04:7c:
7e:5a:65:84:f5:26:24:57:af:3b:a2:35:8f:ca:b6:
ad:80:a7:91:d8:59:51:22:5d:7f:c3:8c:82:e3:9e:
6d:b9:c8:61:a1:bb:5d:13:05:c8:4d:7d:82:4f:a3:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:80:AE:E0:6E:B1:B3:57:3E:59:E5:5D:8F:F4:87:11:D9:B0:65
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/lQ2AruBusbNXPlnlXY_0hxHZsGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1f:20:a6:de:01:94:e9:18:da:c2:5d:ee:96:da:fa:2a:18:
9a:f9:f2:14:4a:07:ed:cb:69:7d:22:03:a5:78:7a:b4:85:03:
53:a4:c3:98:73:a4:bc:a4:8d:33:27:a4:96:a6:4e:60:df:61:
3f:9c:69:ee:6c:44:91:c4:92:2b:dd:12:1e:e1:07:74:69:bf:
d6:3f:33:03:f2:27:41:0f:34:8c:27:6b:42:48:08:e9:2b:5c:
6f:4a:86:69:c9:47:63:85:cb:ba:4e:a6:96:3d:09:f8:be:ff:
5e:dd:78:88:b1:1f:33:9b:a4:a2:5b:66:3c:3e:92:ec:3c:dd:
bb:ce:1e:7a:4f:ac:41:ba:47:f5:53:a4:44:e1:78:b2:20:70:
87:54:c2:41:75:44:4d:4b:ea:cf:49:27:ff:a7:37:ea:0d:e3:
85:66:1a:85:48:68:35:13:d6:07:b8:a6:a4:bb:22:c6:1a:3a:
62:5f:10:e6:b1:08:54:21:de:11:38:58:65:8c:04:42:59:ec:
d4:3e:78:fb:5b:40:39:12:47:30:b3:0b:31:91:53:ec:c6:fb:
9a:bf:a9:1a:0c:68:8b:c2:42:52:cc:46:f1:1c:a3:77:28:5d:
cb:d1:48:ad:14:ee:24:29:ad:f9:44:95:f0:1d:91:10:58:72:
2f:eb:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:25 2025 by rpki-client