Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/46An0648TTdk_GaAttohxiJ3elc.roa
File: 46An0648TTdk_GaAttohxiJ3elc.roa (raw, json)
Hash identifier: egL3z//4Cc3X31Lmyq1uO5//YZIIGom2suVkGFAW6+Q=
Subject key identifier: E3:A0:27:D3:AE:3C:4D:37:64:FC:66:80:B6:DA:21:C6:22:77:7A:57
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887164D051550ACAF820D257A877D9D57A
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/46An0648TTdk_GaAttohxiJ3elc.roa
Signing time: Wed 31 May 2023 10:40:12 +0000
ROA not before: Wed 31 May 2023 10:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:64:d0:51:55:0a:ca:f8:20:d2:57:a8:77:d9:d5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a027d3ae3c4d3764fc6680b6da21c622777a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:5f:17:d3:a6:0a:01:14:23:ad:ec:17:db:
e5:b8:43:83:cd:2a:7d:3e:48:ce:8b:ad:a5:1c:bc:
fc:84:c4:32:04:6f:0f:cd:cf:e8:6b:55:9e:e5:02:
fa:97:ac:59:d5:88:2a:cb:86:ff:52:35:f2:45:02:
a3:07:7b:d3:09:0f:bd:66:dd:18:f7:54:c0:39:36:
cf:8f:84:6c:29:0c:41:08:c5:95:89:7b:31:54:9b:
40:d7:d4:95:ab:39:02:95:9f:ed:04:ae:8a:22:91:
a2:ff:e2:26:32:59:a7:12:38:4d:f1:fd:95:95:48:
3b:a6:a5:cf:75:04:4a:5f:60:92:cd:bd:50:ad:6d:
e0:79:40:60:5e:90:12:53:31:9a:d8:0e:37:15:ff:
19:5e:82:26:0b:c7:08:97:24:c5:94:01:b2:38:6b:
69:84:5b:df:2b:44:d1:5b:91:a9:b7:ea:c2:89:bf:
e8:3b:37:11:5e:9f:0c:82:d9:37:b1:8b:d2:11:c4:
f9:e3:67:d0:7f:88:3b:07:a4:9d:85:de:90:4b:89:
b9:70:29:c6:8d:0d:44:29:5c:6a:15:70:88:de:f4:
d1:54:ea:82:0b:2e:b7:ac:08:d1:42:d3:71:1b:9f:
ea:88:05:2c:e9:39:31:24:95:69:6e:f1:aa:d5:e5:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:27:D3:AE:3C:4D:37:64:FC:66:80:B6:DA:21:C6:22:77:7A:57
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/46An0648TTdk_GaAttohxiJ3elc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:25:70:00:1e:a3:0f:84:a9:37:ab:1a:80:23:65:cd:1b:2f:
0c:a1:ea:31:c8:8f:85:da:6b:47:2f:82:31:41:7d:77:24:db:
0f:26:d1:01:94:78:fa:e6:6b:de:3f:aa:a4:ea:5c:f5:09:c0:
03:34:0b:4e:e9:dc:30:84:59:0b:c8:7e:08:72:35:67:82:56:
77:3d:50:25:5a:45:74:80:3d:f8:27:c1:98:dc:c6:24:01:ff:
22:cb:ac:b6:3f:ab:44:df:6c:b0:65:4b:72:f9:99:47:45:f0:
08:b5:07:ce:ea:db:ab:c1:26:cb:2e:c1:6b:4c:4f:08:25:ad:
33:4d:02:4e:04:84:8c:51:ca:21:5c:c3:c9:8d:7a:ce:2d:0a:
aa:5f:96:04:5b:fe:15:7c:ae:58:65:44:b4:00:59:ee:f6:35:
60:3c:a0:89:13:c3:03:3f:1e:92:12:a0:ed:4e:a4:38:17:6b:
34:43:ff:71:74:92:7e:80:52:d9:05:50:04:f9:f8:df:f9:7c:
a9:b7:1f:e6:c6:69:6e:f7:e1:2a:22:64:79:87:73:e5:cf:de:
f9:fa:46:3b:98:c5:b1:b3:5c:a5:c9:27:8b:6f:c6:07:00:75:
ee:ee:3e:e9:a1:ea:b7:9c:db:ed:11:e1:e6:c1:2f:fd:04:36:
8c:dd:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org