Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa
File: 0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa (raw, json)
Hash identifier: HV4pN38B+9Vt5+Rp5kLf/0Hs32qbFkSpny7V2QD4q1A=
Subject key identifier: D0:28:E2:FC:86:09:BE:67:BA:33:4B:37:65:B1:9E:2A:BA:D7:11:8C
Certificate issuer: /CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Certificate serial: 01856F1D8F481AB1F6701522A4391E69A355
Authority key identifier: A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa
Signing time: Sun 01 Jan 2023 20:54:46 +0000
ROA not before: Sun 01 Jan 2023 20:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134512
IP address blocks: 46.175.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:8f:48:1a:b1:f6:70:15:22:a4:39:1e:69:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Validity
Not Before: Jan 1 20:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d028e2fc8609be67ba334b3765b19e2abad7118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:22:63:c7:b8:3f:3a:22:60:d1:a4:df:7f:
2b:5b:56:56:10:d7:b8:6e:fc:59:18:3b:5a:10:80:
7f:f3:05:0f:da:27:df:98:d1:93:41:69:9d:44:4b:
1d:fc:73:87:a4:61:5e:47:5b:7b:b9:29:ff:98:64:
94:aa:aa:b4:95:a2:4e:21:9b:a0:28:5a:9d:8b:15:
0a:c6:a2:f9:c4:38:29:af:ba:bb:66:7e:ca:f6:15:
f8:23:35:45:f1:03:8e:07:35:70:93:0c:ac:04:d9:
73:22:c0:7c:86:4f:0f:a9:f7:12:a2:74:51:5b:b7:
b8:1b:59:68:70:3b:ee:a3:bc:da:64:8e:8c:47:c8:
76:fd:2a:4c:96:ba:86:a0:22:1a:73:8a:12:45:14:
16:19:26:3c:6f:a1:e2:4b:43:d7:cc:6e:c9:6c:ba:
e7:c2:7a:0d:f1:55:38:0d:a2:0c:a9:c2:51:3e:9b:
a9:79:f1:8b:c0:7c:57:7d:c8:62:8d:f3:52:89:2b:
dd:02:ee:0f:15:04:48:49:c4:1b:ce:70:03:da:f4:
02:be:75:94:39:f2:51:37:b7:6f:89:ea:9b:50:11:
14:08:8b:70:94:09:c7:b1:a9:69:32:df:5e:60:06:
c2:ae:99:e0:92:20:da:93:9a:42:44:ec:78:9d:37:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:E2:FC:86:09:BE:67:BA:33:4B:37:65:B1:9E:2A:BA:D7:11:8C
X509v3 Authority Key Identifier:
keyid:A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:8c:b2:0b:47:53:98:3f:94:c7:e7:b6:19:22:dd:c6:98:
41:8e:75:b5:68:e6:77:de:3d:8a:c5:c8:1e:30:f9:1a:fa:aa:
98:5e:68:46:3b:19:96:71:9c:8a:0c:08:b2:46:38:0d:f1:43:
d4:66:05:bd:26:0e:80:de:47:72:34:ba:bf:e4:e8:9c:9e:10:
e7:c3:63:1c:b0:7d:61:a0:28:6d:a3:8c:0c:a9:72:ee:33:a3:
f8:c7:e7:1d:a7:8f:13:ff:55:c9:93:6a:18:b0:29:c8:83:b0:
d9:80:40:b1:92:a4:3c:fc:f7:17:fc:d5:ba:2a:08:31:dd:7f:
cc:a2:e2:40:26:1b:f9:8b:39:23:cf:bf:66:44:5b:c6:b5:87:
68:c9:70:b0:36:76:6e:28:49:20:85:b1:0b:a0:f7:82:41:1e:
9c:92:83:7a:15:aa:39:63:d4:52:a3:a6:fe:55:1f:32:a8:23:
bc:c1:88:ec:1d:df:76:bc:02:6f:f0:6d:66:f2:98:c7:e8:57:
a8:c7:27:14:3b:c5:71:56:d5:4b:5b:59:54:f2:d7:c7:ef:0b:
b9:80:36:ae:e5:70:36:e3:bf:fc:24:ca:05:60:0b:ee:95:a6:
b5:83:02:e1:39:d1:5e:75:c0:c8:21:58:6b:e7:59:1a:ee:4b:
f6:64:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:34 2024 by rpki-client on console-fra.rpki-client.org