Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/vzhXmkmga2wi6X2_xRUy8Wdx_6E.roa
File: vzhXmkmga2wi6X2_xRUy8Wdx_6E.roa (raw, json)
Hash identifier: nqkCWTn5uLqlXZslaMc9FRTl8iC3d7CSkafYqSIffag=
Subject key identifier: BF:38:57:9A:49:A0:6B:6C:22:E9:7D:BF:C5:15:32:F1:67:71:FF:A1
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 018CC2DB5579F1FC306F37ACA65AF0EEE462
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/vzhXmkmga2wi6X2_xRUy8Wdx_6E.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:55:79:f1:fc:30:6f:37:ac:a6:5a:f0:ee:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf38579a49a06b6c22e97dbfc51532f16771ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:47:9b:7a:c5:38:ce:16:fb:d4:4a:e9:ea:
c5:92:8c:24:00:36:e2:93:3a:33:13:95:a1:ba:4d:
0e:96:49:07:48:bd:a3:6a:57:d6:94:a3:6b:7c:b8:
ee:1c:3c:6b:1d:7a:5b:b0:3e:dd:f3:51:c5:e0:0e:
6b:a3:2b:e5:e9:ae:cf:55:3b:11:af:61:24:8c:d1:
d4:21:89:19:df:d8:e1:87:47:6b:5a:00:82:75:74:
e0:ae:81:19:84:f0:4e:73:7b:22:d2:00:a7:89:ef:
31:d2:67:7e:ce:9d:d5:47:f8:c4:07:4b:50:93:be:
b1:62:9c:2e:cf:05:62:46:76:1a:d8:d1:0f:d2:95:
07:81:b1:ad:e6:d9:87:e8:25:9c:77:f5:00:7b:c0:
aa:bf:ad:4e:47:46:ee:b3:89:1a:8c:87:a8:40:2e:
87:33:f6:88:ea:1e:40:a0:3c:ce:87:55:d7:e5:cb:
3f:8d:ae:bd:93:da:18:74:2e:51:a9:f2:51:75:25:
d6:bf:ae:1f:3b:74:ee:88:6b:a5:3e:ed:a6:7a:f4:
52:0c:f7:48:7b:1e:bc:3c:04:4b:12:7c:4f:78:cf:
33:07:2e:db:e3:88:89:ff:53:64:8a:c8:89:a6:a1:
bf:45:a7:78:4b:95:97:e2:92:dc:0c:dc:71:e8:99:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:57:9A:49:A0:6B:6C:22:E9:7D:BF:C5:15:32:F1:67:71:FF:A1
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/vzhXmkmga2wi6X2_xRUy8Wdx_6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
28:46:be:6d:f9:fa:90:00:4b:6d:73:4e:6c:a5:b3:97:c2:af:
26:2e:33:02:82:ae:2a:f1:b0:57:f4:ee:b6:62:01:07:cc:7a:
a8:65:8c:17:21:6c:9d:a2:a8:ca:ce:68:20:06:90:98:99:89:
65:28:b1:2d:37:a3:c7:e2:6c:97:e8:21:34:97:17:24:62:28:
db:cc:28:75:58:d7:b8:a3:65:3a:63:0c:a7:f8:72:56:d7:f0:
f4:7e:74:50:b7:8e:d9:18:86:22:d3:0f:37:96:a9:6f:4e:5f:
b5:74:18:d5:ab:b3:c4:7d:9e:c5:91:63:b8:3d:c4:e4:21:0e:
63:b9:82:e7:19:b7:ea:81:0f:a9:60:50:4a:c2:43:8c:22:ea:
11:24:10:e8:32:ed:97:e9:5d:48:e8:61:77:98:5a:17:3d:5e:
da:6f:82:0d:f0:4c:de:56:6b:3b:46:56:43:0c:69:d6:ae:a6:
5d:85:ef:84:6d:6c:21:bc:e7:11:b6:b2:12:88:b5:7c:e1:2a:
53:9d:90:13:61:8d:23:41:c0:3e:de:1b:69:fd:0f:82:09:96:
65:50:38:58:42:25:ef:27:95:20:2e:a6:58:c2:0a:4e:d3:00:
30:2e:62:2c:64:05:33:71:e1:24:eb:6e:ec:c0:44:55:e9:a2:
76:c2:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:32 2024 by rpki-client on console-fra.rpki-client.org