Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/_SvF9NFwbvHPrGX88ou_QvdTalw.roa
File: _SvF9NFwbvHPrGX88ou_QvdTalw.roa (raw, json)
Hash identifier: yc3LSCvviL35tXAqYmMcF8ZB3zK+K+3+o8yYvGZ3k0o=
Subject key identifier: FD:2B:C5:F4:D1:70:6E:F1:CF:AC:65:FC:F2:8B:BF:42:F7:53:6A:5C
Certificate issuer: /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial: 018571279C253C0C44E5DFF34493531C458F
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/_SvF9NFwbvHPrGX88ou_QvdTalw.roa
Signing time: Mon 02 Jan 2023 06:24:59 +0000
ROA not before: Mon 02 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202864
IP address blocks: 46.16.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9c:25:3c:0c:44:e5:df:f3:44:93:53:1c:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Validity
Not Before: Jan 2 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2bc5f4d1706ef1cfac65fcf28bbf42f7536a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:32:44:1b:14:94:17:cb:ae:59:40:55:ff:
65:03:1a:1f:1a:57:db:91:bb:08:58:16:33:3f:3f:
20:d8:d1:c7:f5:ea:f3:85:a0:6c:f9:a2:6e:e6:65:
95:d0:8b:34:f2:9b:48:98:9f:f6:1d:77:21:02:91:
4e:95:c5:01:df:f4:db:b2:24:11:66:f5:06:0f:d4:
17:64:7d:07:33:7c:00:3c:85:0b:ce:e0:ec:c2:08:
8c:a6:ef:1a:bf:c9:9f:9b:be:06:30:46:d2:0f:86:
0d:13:13:83:b9:d8:f1:c9:46:8d:9a:b4:ad:ac:60:
e9:f9:ff:37:04:3a:e1:4d:22:a7:63:f4:00:94:2e:
5f:37:6c:96:25:f2:6f:14:92:8f:3f:1b:77:d8:74:
a3:c0:bf:57:5d:4a:e0:99:2c:a4:6e:ea:1b:ba:52:
3c:b4:82:9d:1a:e7:75:8e:b2:13:79:e0:2d:a1:e2:
2f:1d:12:fa:82:ec:e9:75:30:1b:c3:7f:60:f9:3d:
42:70:a1:0c:fb:77:e7:be:91:94:21:19:82:e1:dc:
75:00:0b:44:f0:3b:de:61:fc:40:58:1d:a3:8c:d6:
b6:38:04:fe:3f:52:be:99:a2:a1:40:94:d2:b2:dc:
08:77:73:2a:da:41:b4:d3:1f:78:b1:4b:0e:1c:b6:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2B:C5:F4:D1:70:6E:F1:CF:AC:65:FC:F2:8B:BF:42:F7:53:6A:5C
X509v3 Authority Key Identifier:
keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/_SvF9NFwbvHPrGX88ou_QvdTalw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.197.0/24
Signature Algorithm: sha256WithRSAEncryption
60:32:3d:28:fc:3c:3d:2c:7b:07:de:c3:52:fe:9f:07:f5:fe:
4e:34:a4:c3:ab:56:a1:53:c1:de:64:20:ed:65:2c:51:c9:b4:
f0:cd:84:08:b0:95:a3:f9:28:69:1e:2e:6f:1a:59:f6:bb:14:
5f:c3:9f:5e:fc:b8:01:7d:96:43:32:c2:ee:b6:d3:80:21:45:
f7:6d:02:70:28:55:60:e0:b9:74:4a:4a:17:5f:54:6d:f9:af:
e1:6d:4a:c2:96:db:57:3b:3e:bd:39:8a:72:75:a9:16:c0:5f:
42:d0:22:e0:8b:ae:b9:2c:28:6e:9e:10:92:78:81:11:6f:a4:
16:73:b5:e2:df:91:03:76:60:32:b1:2d:65:4e:6c:3d:86:ae:
09:c4:a4:7c:5e:17:97:d9:3c:80:1b:4a:e6:89:cb:6e:8b:19:
3a:aa:8a:18:d2:3d:ee:30:f0:ee:e8:5a:68:64:b2:af:f5:6a:
27:19:d3:95:87:87:42:c1:b7:9a:dc:3a:90:05:08:26:c1:a2:
4f:42:a6:4c:df:9f:0d:0d:0f:77:cc:39:3c:b6:a8:94:16:8c:
0f:68:4c:e7:d2:bf:d6:b3:4d:89:f2:24:4a:64:d3:b1:ec:6d:
b5:cc:dd:c8:c4:a7:78:c7:0f:0b:86:7d:07:d5:30:54:4b:47:
52:58:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:08 2024 by rpki-client on console-ams.rpki-client.org