Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/jYVWXGHP53sZLwzst1ignWjC2KU.roa
File: jYVWXGHP53sZLwzst1ignWjC2KU.roa (raw, json)
Hash identifier: d5H+axipj5hQShQMFLQfKPHHhicjG7x6PxpR+fKwxDQ=
Subject key identifier: 8D:85:56:5C:61:CF:E7:7B:19:2F:0C:EC:B7:58:A0:9D:68:C2:D8:A5
Certificate issuer: /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial: 018571279CE4E78F6A7FA0E0A8DDBB9FBF04
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/jYVWXGHP53sZLwzst1ignWjC2KU.roa
Signing time: Mon 02 Jan 2023 06:24:59 +0000
ROA not before: Mon 02 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210299
IP address blocks: 46.16.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9c:e4:e7:8f:6a:7f:a0:e0:a8:dd:bb:9f:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Validity
Not Before: Jan 2 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d85565c61cfe77b192f0cecb758a09d68c2d8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:9c:59:f1:3d:96:cd:ab:17:65:ac:e0:68:
60:63:4b:19:a2:7f:ad:4f:6c:0e:c6:6e:f6:35:aa:
86:e0:0d:17:58:22:6a:f2:4b:26:85:83:8b:af:d3:
d6:96:43:c8:4c:27:04:4f:43:c6:89:a6:b9:69:a4:
3b:4c:19:9d:8e:98:b0:66:a3:a9:95:c6:25:4d:e8:
9f:5d:a5:1d:bf:b3:a8:3e:88:ea:cd:f4:41:c6:b1:
0d:78:c1:56:ee:8b:88:b8:d2:1b:54:ad:5e:82:f3:
13:86:2d:20:26:1d:e7:88:5a:45:ae:15:30:06:55:
d8:9c:c1:77:73:93:bc:d5:ef:71:ea:28:a9:a0:ad:
20:ed:bd:1f:1b:f1:3b:73:2b:e2:10:64:8b:ff:61:
67:3d:af:63:ce:72:73:e3:cd:b8:08:20:f9:d8:39:
5a:67:82:f8:8f:64:d3:33:78:2d:d9:75:56:4c:f0:
51:e0:c7:8e:33:03:88:5a:e4:84:b7:a1:04:f6:0a:
89:92:5c:d7:c3:da:87:36:dd:3a:f1:78:75:70:82:
da:11:ca:58:76:3c:a1:75:9d:ad:77:26:ca:ae:53:
31:05:24:17:c5:14:4b:d2:62:0d:9b:2e:18:9c:50:
94:f0:37:d8:d1:fc:12:6f:f2:56:94:ff:84:77:ba:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:56:5C:61:CF:E7:7B:19:2F:0C:EC:B7:58:A0:9D:68:C2:D8:A5
X509v3 Authority Key Identifier:
keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/jYVWXGHP53sZLwzst1ignWjC2KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.199.0/24
Signature Algorithm: sha256WithRSAEncryption
24:19:87:29:40:a6:22:e8:08:2b:ec:20:43:13:3e:5f:f1:74:
4e:c5:80:db:e4:f5:b4:17:bb:72:00:9c:5d:02:45:f5:b4:9f:
bb:e4:90:ff:aa:7e:53:3e:f6:d0:ba:a8:88:ed:8e:a4:5d:e6:
26:d2:4d:38:7c:0f:a8:dc:2c:46:4c:c2:0e:7d:6a:1b:81:52:
e5:68:9b:79:c1:16:1e:05:9f:4b:a7:ab:7b:79:72:06:85:34:
65:95:d5:20:2f:c2:5b:40:69:ce:a2:ed:bb:da:04:b3:62:97:
2e:af:a2:df:a1:20:6a:89:d8:d3:c7:70:e5:c0:e6:30:16:12:
be:ad:f2:6a:b2:84:6d:18:eb:19:6b:78:0b:4f:36:60:92:31:
90:69:5c:22:cb:49:22:5d:30:e3:6d:d2:f5:32:f7:38:fd:d5:
e0:d8:54:46:83:d5:9d:50:0b:ac:ce:8c:7b:cc:d6:cd:e5:8c:
10:41:fc:41:77:7b:05:17:ee:6e:53:13:b3:74:ec:13:48:17:
ef:48:4c:2c:70:fb:24:a3:22:f9:61:ad:94:4f:bc:ad:93:2b:
ef:ac:25:c1:a8:fb:ff:6c:0f:a1:b1:31:a0:d0:41:a3:aa:af:
70:8f:5c:99:b3:c8:a7:d7:36:9c:76:ed:1f:a7:7e:57:08:b6:
d6:b0:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:08 2024 by rpki-client on console-ams.rpki-client.org