Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VUtkkwGNOntaEg0_eoedJGTlnA0.roa
File: VUtkkwGNOntaEg0_eoedJGTlnA0.roa (raw, json)
Hash identifier: Ihm6jXF/nNf6OhST7k/pZMlaodBc5y5J5tGrK5Vf49U=
Subject key identifier: 55:4B:64:93:01:8D:3A:7B:5A:12:0D:3F:7A:87:9D:24:64:E5:9C:0D
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB93EEE9B1AACE402875C1309882C4
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VUtkkwGNOntaEg0_eoedJGTlnA0.roa
Signing time: Sun 01 Jan 2023 19:25:13 +0000
ROA not before: Sun 01 Jan 2023 19:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:93:ee:e9:b1:aa:ce:40:28:75:c1:30:98:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554b6493018d3a7b5a120d3f7a879d2464e59c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:74:40:9a:66:b1:d1:12:56:14:49:4c:dd:
6f:cc:2b:95:8a:8d:22:97:76:df:f4:4b:6e:a8:b7:
11:9e:6d:ac:a9:87:ca:57:c8:71:a7:64:a4:13:f3:
13:55:3b:0c:3f:bc:37:c2:67:3c:7d:1d:30:4c:3d:
16:eb:f7:37:99:1f:cf:3d:8f:c1:f1:b9:a2:f6:c2:
f8:67:7a:7a:dc:42:48:c6:af:4a:21:b2:d0:da:df:
6a:6c:9c:86:0b:fe:a8:4a:1b:d7:2c:50:b3:4d:6b:
8c:30:3d:53:80:d6:f2:bf:a0:7b:87:02:ac:2d:04:
8e:61:b6:a5:c0:8e:67:e9:0d:aa:bd:f9:93:bc:0b:
cc:89:2e:32:18:dd:04:22:e4:7c:ba:5b:14:7d:b8:
b7:aa:29:5c:e2:13:78:2e:7f:05:6a:2c:1b:35:35:
38:10:b3:c4:8d:7a:e7:cc:61:35:e6:3e:e4:f8:9b:
ec:0e:3c:8c:d8:4b:69:d8:af:8b:6f:24:43:79:5d:
d5:19:d4:ba:8c:de:e4:fe:c0:7c:4e:b8:9d:60:19:
28:de:c3:01:3a:92:ad:a4:c0:cb:09:91:04:81:8e:
4e:05:ab:35:47:b0:48:dd:51:27:e5:51:ac:15:92:
40:95:5e:cb:f9:91:10:f1:3e:9a:71:05:ea:56:55:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4B:64:93:01:8D:3A:7B:5A:12:0D:3F:7A:87:9D:24:64:E5:9C:0D
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VUtkkwGNOntaEg0_eoedJGTlnA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3d:b3:28:b4:4b:c5:b6:c1:09:23:c6:df:3b:ea:7c:10:f6:
86:2f:1f:63:61:c7:2d:3c:c1:49:38:75:4a:83:b9:2b:75:8f:
6d:60:40:aa:b4:f1:db:30:54:f8:bf:9c:7e:c6:0f:ad:70:4e:
32:9f:36:68:9a:bf:c5:02:42:a8:96:54:71:73:bf:3d:b0:eb:
fd:81:89:f4:b9:ac:30:dc:af:51:36:fd:27:53:f1:d6:65:a5:
b2:ae:31:aa:8f:1f:95:f5:31:38:31:54:7c:1d:91:c3:b4:96:
58:98:39:34:91:79:47:5a:06:22:ac:e1:1c:05:0f:ec:7a:be:
9b:47:a6:77:69:eb:f7:32:2f:9d:27:11:0a:3d:08:b6:43:50:
5d:25:9a:9e:9a:37:fc:68:8d:be:ce:35:e7:3e:f7:61:92:ee:
28:0b:24:11:24:3a:83:ff:e0:f8:b7:4e:0c:a5:ef:91:2f:80:
c6:fc:c5:d7:b9:6a:4b:74:d1:42:8b:10:16:6a:c7:09:64:51:
d7:ad:d5:46:e3:b2:0b:00:be:18:1f:d3:5c:81:03:74:65:ff:
9a:a9:a6:95:fd:32:fc:82:0a:a5:5d:99:83:fb:89:41:e3:f6:
85:68:d2:c4:ed:a6:d1:ae:61:89:48:6c:e9:e7:de:e1:e5:71:
6d:67:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org