Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/tvfsinJTxvMjv2SA203sGrFke0E.roa
File: tvfsinJTxvMjv2SA203sGrFke0E.roa (raw, json)
Hash identifier: g7PZJy+U/RR6YlNhQ8ypV3yo7ti36Y/sVv/uaBGEtYg=
Subject key identifier: B6:F7:EC:8A:72:53:C6:F3:23:BF:64:80:DB:4D:EC:1A:B1:64:7B:41
Certificate issuer: /CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Certificate serial: 018570E75EB71952FCF12A0445208E83D0F0
Authority key identifier: DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/tvfsinJTxvMjv2SA203sGrFke0E.roa
Signing time: Mon 02 Jan 2023 05:14:49 +0000
ROA not before: Mon 02 Jan 2023 05:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 79.110.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5e:b7:19:52:fc:f1:2a:04:45:20:8e:83:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Validity
Not Before: Jan 2 05:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f7ec8a7253c6f323bf6480db4dec1ab1647b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:c4:2e:06:6f:29:08:37:e4:5f:74:3f:18:
dc:a7:c2:e2:22:74:53:48:f8:32:b0:94:9b:75:7f:
ea:50:f7:d1:2c:d7:af:0f:21:12:32:8a:b2:e8:b2:
e6:7a:93:f5:ab:93:ef:be:96:03:59:2f:bb:3d:d9:
3f:30:0e:f9:75:ea:82:cb:ec:03:53:aa:52:bc:ff:
f6:db:f3:8f:e9:35:8d:ed:f2:4e:b4:90:be:10:38:
15:87:53:ac:42:7d:f5:4c:14:03:bd:8e:2c:a5:7d:
35:b8:cd:ff:9e:7a:f4:17:25:ae:4e:18:a1:ba:df:
ab:4a:fa:f4:f5:56:bd:bd:f7:1f:48:ef:c6:61:5c:
dd:af:54:b0:71:09:43:90:70:8b:79:b0:b5:ce:9e:
cc:6e:73:0d:67:7f:5b:91:bd:ea:9a:65:a4:30:18:
59:37:1a:f3:03:e9:d8:04:19:4a:4b:be:6a:fa:9b:
f7:26:2d:f0:8c:88:0a:a5:e5:05:9d:f7:98:8d:e5:
d1:81:ec:09:9a:14:fd:7f:02:c2:56:67:2a:cd:41:
88:3d:0e:c8:45:3d:ca:07:32:ff:8d:e8:f9:88:de:
73:ba:12:f6:be:b5:bb:54:41:ba:91:57:07:62:a2:
03:02:ab:22:48:a2:77:af:16:ae:e3:32:67:c3:59:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:EC:8A:72:53:C6:F3:23:BF:64:80:DB:4D:EC:1A:B1:64:7B:41
X509v3 Authority Key Identifier:
keyid:DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/tvfsinJTxvMjv2SA203sGrFke0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.234.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9b:77:88:9a:7b:08:2d:a8:62:0a:1d:1d:60:f1:91:92:70:
53:be:93:f9:f2:96:39:18:f2:df:44:a6:b8:37:72:88:86:8a:
95:31:54:ce:be:46:8f:ea:83:0b:e9:d1:5a:15:67:b1:8c:b1:
11:47:67:b5:88:eb:4a:2d:7c:9b:b9:63:43:64:52:3b:37:fe:
f9:6c:d4:48:14:a9:ae:8f:56:dc:5d:35:51:1e:0f:38:14:16:
0b:4c:95:eb:9d:23:40:a7:00:0a:7a:67:3e:fe:0d:f6:fa:9c:
c5:f4:23:63:78:86:0e:5b:c5:37:49:d5:af:f2:13:dc:f5:5a:
d3:7b:4b:c8:4d:3c:3e:2f:b3:91:b2:8f:39:9e:3a:af:c9:03:
d5:6a:0b:67:32:94:c3:b0:eb:45:30:d9:a9:9c:56:9a:7a:d7:
96:92:e1:fc:9b:43:70:35:00:8b:c6:cf:fb:27:7e:de:d2:7f:
45:0b:1b:ea:54:7b:62:7e:c0:96:d2:2a:d9:14:9e:64:b5:c9:
1d:3a:6c:7e:a9:4b:52:26:ab:f4:1e:92:50:38:1e:d7:39:16:
6a:d2:9e:f6:f9:87:21:df:ae:63:21:f0:7a:93:9d:4c:f6:dc:
86:8e:13:c8:1e:41:29:be:52:38:c7:d5:61:66:b6:de:f0:21:
4e:4f:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:43 2024 by rpki-client on console-ams.rpki-client.org