Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/2yM5SsfSMnxUp8u1_R3wv43ETrk.roa
File: 2yM5SsfSMnxUp8u1_R3wv43ETrk.roa (raw, json)
Hash identifier: szJJGAU8ivURRfKMyrYUHYc8H/p1KBxliyNeQ9pqBc0=
Subject key identifier: DB:23:39:4A:C7:D2:32:7C:54:A7:CB:B5:FD:1D:F0:BF:8D:C4:4E:B9
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 01856BA5752A0B2B665DBD590D08EE944B38
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/2yM5SsfSMnxUp8u1_R3wv43ETrk.roa
Signing time: Sun 01 Jan 2023 04:44:43 +0000
ROA not before: Sun 01 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:75:2a:0b:2b:66:5d:bd:59:0d:08:ee:94:4b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Jan 1 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db23394ac7d2327c54a7cbb5fd1df0bf8dc44eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:14:30:a4:f5:11:ef:9f:09:32:62:ca:68:
b6:f3:83:ec:ba:1e:69:fb:77:65:5d:0f:ad:30:82:
02:6b:ee:8e:97:9a:44:2f:0e:5e:fd:32:39:d8:43:
62:ae:56:1c:61:aa:60:01:a3:0e:62:39:ab:69:59:
e2:bd:45:62:88:ba:38:28:54:02:9b:75:33:66:c1:
3e:a0:5b:f2:f4:40:b1:60:98:79:0e:7a:65:31:96:
d9:60:a2:f6:13:0c:0a:5f:d9:58:27:2c:f4:0a:e9:
6c:50:59:29:67:4a:da:a8:d7:b6:0b:9b:e0:57:c8:
95:02:36:fa:2f:59:df:47:46:fd:ec:81:9d:eb:bf:
b8:53:bb:80:41:e2:91:cd:38:72:0f:b0:19:ba:ce:
28:40:b7:9c:79:f2:1d:5b:71:6c:01:07:67:34:26:
08:ef:aa:6a:ad:65:3b:80:96:a3:a8:97:d4:4c:5d:
00:06:2d:37:0b:3c:71:6d:89:43:59:c3:e8:71:d4:
d2:d8:76:1a:b2:7a:bd:80:db:0c:d6:ba:ce:ad:8f:
8f:b6:26:da:3f:85:69:f3:f8:01:e7:24:1b:81:41:
b9:e3:3f:bb:63:1f:a4:22:e9:75:94:dd:2c:12:0c:
30:38:46:cb:ee:f6:20:4d:86:79:63:d9:51:e9:3c:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:39:4A:C7:D2:32:7C:54:A7:CB:B5:FD:1D:F0:BF:8D:C4:4E:B9
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/2yM5SsfSMnxUp8u1_R3wv43ETrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
62:78:4b:ca:ce:b2:a3:e7:b4:8d:62:3f:0f:bb:a0:c1:c1:b1:
ed:0f:ea:13:60:9a:aa:96:42:cf:34:66:75:61:8f:15:a1:4c:
06:a9:47:e9:53:89:26:26:5d:83:5b:d5:b2:3b:20:90:1d:12:
40:bb:46:25:87:e4:5a:c8:9b:40:b1:d9:33:d0:59:c7:e5:91:
3a:66:f2:de:bf:9d:ab:67:0a:16:6a:e0:45:3c:bf:2b:c8:a3:
b8:57:44:6e:47:fa:32:e9:d5:f6:3e:3b:fa:cc:e5:42:eb:5c:
e1:fc:f3:89:e1:34:3f:93:f8:5d:0b:c5:58:9e:78:48:51:5d:
23:5d:18:14:f9:6c:2b:7a:10:66:e8:44:4a:35:91:8d:82:13:
4f:0e:4f:57:f4:b3:e6:bf:75:e6:3e:0b:82:18:88:b5:ca:6a:
41:89:5b:a5:e9:3d:a8:14:60:8d:7e:f9:65:7a:02:2f:17:bb:
0f:37:7a:ab:79:7f:ce:a2:ec:35:f0:80:89:10:5d:74:10:8e:
1a:57:f1:b7:17:2d:4e:a8:dc:52:ae:77:5a:80:56:e4:01:10:
c1:eb:29:dc:7a:b2:4b:e6:78:5b:de:80:03:6b:94:2c:9b:d4:
9b:74:bb:ea:6d:05:4f:b0:bd:f5:59:4b:20:1a:65:14:4d:1b:
fa:19:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:32 2024 by rpki-client on console-fra.rpki-client.org