Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ukCAJ6gg1TDVH2plurXlj4KjpHg.roa
File: ukCAJ6gg1TDVH2plurXlj4KjpHg.roa (raw, json)
Hash identifier: Z2qujrgS2it5AeYpOz3iR80enuykNCscRuM1OFY77R8=
Subject key identifier: BA:40:80:27:A8:20:D5:30:D5:1F:6A:65:BA:B5:E5:8F:82:A3:A4:78
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 018CC2DB55E187253F114AF54C73A5B6549F
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ukCAJ6gg1TDVH2plurXlj4KjpHg.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:55:e1:87:25:3f:11:4a:f5:4c:73:a5:b6:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba408027a820d530d51f6a65bab5e58f82a3a478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:38:19:33:88:c7:e5:ab:00:ed:7a:f8:b3:
63:83:fa:d1:1c:1f:71:cc:22:15:60:65:92:d6:ba:
c9:67:84:a7:73:f2:f1:65:14:8e:c7:ea:0f:05:6f:
34:9f:bc:25:bf:47:9f:10:52:7a:04:10:30:6d:24:
e6:77:be:df:5d:09:c0:77:13:e3:5c:f9:08:27:d4:
cd:02:5e:6c:91:9c:32:0b:72:6e:ac:9f:c8:84:f4:
7c:9f:18:7d:c1:4d:8d:03:24:13:b5:26:ae:20:04:
3e:54:fc:3b:bf:fc:9e:3e:bd:e8:fa:bb:52:49:e6:
77:ca:a8:8e:9b:73:53:5f:3e:4a:23:a2:c7:e4:2c:
05:6d:2c:ca:8f:74:1a:e9:a2:fd:99:78:44:78:96:
56:af:88:73:28:4b:ab:1e:0f:80:7b:e5:6f:ca:6e:
9c:0d:5a:f9:d5:9b:3e:49:4c:8b:8d:18:68:3d:e9:
2a:b3:69:ac:41:bd:43:70:76:5f:18:32:80:fa:b8:
59:4c:62:04:99:2d:cb:26:c5:2c:c5:42:91:6b:8f:
89:ef:b2:4c:45:96:41:16:1a:c7:76:03:8b:cd:65:
5d:66:3d:52:6e:95:01:d5:e6:0e:cc:76:7e:0f:9e:
b8:dc:86:a1:c2:1e:9d:bd:43:66:d3:5c:0b:5d:0b:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:80:27:A8:20:D5:30:D5:1F:6A:65:BA:B5:E5:8F:82:A3:A4:78
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ukCAJ6gg1TDVH2plurXlj4KjpHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:31:06:5a:2c:22:a1:ab:24:e6:82:54:bf:f9:61:33:ac:9e:
e0:87:13:69:07:4f:7e:6e:96:af:2d:c2:27:7d:ff:01:cc:75:
e9:0f:76:8f:1c:9c:8e:cd:8b:88:f0:8f:a6:16:2e:85:a6:63:
a3:9d:bc:bb:fd:f7:f6:59:76:25:47:ef:1c:92:76:dc:91:31:
e6:cb:8c:0a:80:4e:73:8a:49:a0:28:3e:ca:23:8b:24:57:cf:
60:76:56:44:b9:60:61:ff:7a:a8:b5:f5:53:f1:89:29:ef:c3:
b8:48:1a:f0:5c:97:77:61:76:da:b4:31:15:f1:48:38:40:e4:
eb:53:24:90:17:8b:89:03:8a:59:f4:e1:80:72:b1:20:bb:47:
59:a0:07:5c:fc:c5:43:5d:6f:eb:b9:eb:0c:d8:22:08:e8:64:
21:38:ba:e8:1e:97:b6:07:71:4b:28:1f:e6:3b:ea:28:e5:f9:
bf:c2:49:64:e6:ae:92:4f:0f:0f:6b:ce:78:ef:e0:d0:b5:7e:
71:7a:4d:88:8d:c3:4a:9e:69:b9:f2:ec:94:b4:48:4a:25:8c:
66:89:ac:7f:c1:22:13:fb:f0:a3:39:70:a3:81:29:22:09:b7:
f6:c3:8e:78:cd:84:f4:c6:9d:8b:36:e6:ae:b8:bf:6e:8a:de:
7d:89:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:32 2024 by rpki-client on console-fra.rpki-client.org