Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/08pzSJ0yRlbLocjU9RaEBkXr-YI.roa
File: 08pzSJ0yRlbLocjU9RaEBkXr-YI.roa (raw, json)
Hash identifier: kIBjdTS0Jvo8aVyJyZV5PArzx8XIBQzbJREsncVK428=
Subject key identifier: D3:CA:73:48:9D:32:46:56:CB:A1:C8:D4:F5:16:84:06:45:EB:F9:82
Certificate issuer: /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial: 018571279B5F1078B7AFE7014722D718A0E4
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/08pzSJ0yRlbLocjU9RaEBkXr-YI.roa
Signing time: Mon 02 Jan 2023 06:24:59 +0000
ROA not before: Mon 02 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59746
IP address blocks: 46.16.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9b:5f:10:78:b7:af:e7:01:47:22:d7:18:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Validity
Not Before: Jan 2 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ca73489d324656cba1c8d4f516840645ebf982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:06:f1:d4:f9:9c:01:29:0c:fe:49:33:3c:
20:89:35:0c:2e:32:f9:7c:d5:3f:11:a2:00:e4:85:
34:48:1a:da:81:d7:3a:64:94:ea:af:af:6e:f2:3f:
38:ef:3c:fe:11:e9:a2:1b:d4:8c:67:cd:6b:dc:d3:
be:70:80:c7:d4:2f:b0:a0:4a:07:c0:8a:15:8e:42:
88:8e:d9:55:ca:f8:3e:93:48:f5:4d:c1:58:e9:98:
93:17:f0:9d:26:76:0a:dd:27:eb:1c:d5:b0:20:ea:
a8:d0:e7:03:a9:27:4c:1c:3f:dc:55:2e:47:43:61:
2c:14:92:1c:70:20:39:b5:23:db:42:ca:d7:c5:bd:
7d:d6:98:37:1f:b5:a6:26:7c:6b:3f:63:d1:e7:83:
58:89:ee:54:82:af:a5:01:bc:df:e8:c7:12:e5:81:
07:17:ac:1f:8c:3a:de:ba:4f:51:ea:90:fb:c4:ff:
41:87:8b:ec:84:f6:5a:52:bf:a9:35:b9:4e:80:68:
47:77:98:24:b1:fe:ad:19:a2:9f:54:57:90:f9:50:
7d:fc:a5:44:11:07:de:92:a0:60:ae:22:3e:b0:b5:
f9:eb:44:0d:c1:28:54:30:62:bb:17:9b:77:e1:d8:
fe:e6:c6:89:b3:13:b7:24:26:de:c3:da:4c:44:16:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:73:48:9D:32:46:56:CB:A1:C8:D4:F5:16:84:06:45:EB:F9:82
X509v3 Authority Key Identifier:
keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/08pzSJ0yRlbLocjU9RaEBkXr-YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6f:ac:73:5d:ee:e1:b2:04:e8:c6:93:ac:3c:f8:05:4b:cd:
11:2f:5f:e4:6c:37:fc:43:a2:16:7e:cf:2c:e8:ef:9b:dc:a4:
20:5b:9b:84:8f:76:fd:99:87:f5:96:7c:6c:99:44:7a:b5:42:
0e:bc:50:2c:8a:38:57:97:68:47:4f:5a:c2:fd:ea:0a:bc:6c:
84:8f:0f:88:ad:64:9a:52:a4:c6:eb:b4:76:09:c6:5d:31:64:
3e:8d:6c:64:d1:30:32:28:13:ce:97:53:d2:c6:b9:4a:2a:7a:
b7:cb:f6:5e:fd:4f:81:2c:03:f5:af:c2:9d:ed:ce:e0:3f:a4:
76:c5:0f:32:3b:cb:c6:d8:25:70:83:64:68:1d:85:74:3f:58:
bf:ae:48:5a:64:5e:d5:19:0e:5d:3b:8a:2e:3b:1a:27:20:8a:
89:51:22:d3:94:ce:d2:39:7a:08:0e:b7:5d:cc:d8:3b:03:8f:
7f:8c:20:ff:3c:6f:12:69:c1:23:2d:41:5a:3a:d4:78:b5:6a:
56:2c:bb:db:ab:75:bb:01:96:01:23:bf:b0:0f:77:1a:f7:e7:
11:9b:4a:e6:89:7e:87:33:b7:46:eb:f2:d5:b3:74:09:c4:73:
31:6d:47:71:33:44:24:3f:09:15:9e:47:41:9b:21:3a:bd:8c:
e3:7d:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org