Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/4WcSdHz8u2yl39C1qK3BGm798mM.roa
File: 4WcSdHz8u2yl39C1qK3BGm798mM.roa (raw, json)
Hash identifier: GIBURtD4oDRLBMocdMC0FJ1Ln1DlAhuxDuuYPOkKwrU=
Subject key identifier: E1:67:12:74:7C:FC:BB:6C:A5:DF:D0:B5:A8:AD:C1:1A:6E:FD:F2:63
Certificate issuer: /CN=6581dd2a05392973d28b2479fd5dd09808619d9b
Certificate serial: 018CC7276A67DEECF03F5D4126FF9135E699
Authority key identifier: 65:81:DD:2A:05:39:29:73:D2:8B:24:79:FD:5D:D0:98:08:61:9D:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/4WcSdHz8u2yl39C1qK3BGm798mM.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57878
IP address blocks: 212.46.59.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6a:67:de:ec:f0:3f:5d:41:26:ff:91:35:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6581dd2a05392973d28b2479fd5dd09808619d9b
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e16712747cfcbb6ca5dfd0b5a8adc11a6efdf263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:f1:b9:f0:62:6e:6c:af:ef:5b:ae:fa:d7:
59:e3:40:28:93:a8:f6:15:ce:2d:5d:a8:9f:0d:1b:
a9:9f:59:02:50:08:40:b3:5c:1e:95:51:2f:37:b0:
3d:a0:a1:d5:7a:c6:2e:cc:06:a8:03:39:5f:08:64:
41:15:c6:a6:8a:2d:3c:73:da:47:12:b9:ad:10:a4:
f2:df:fb:86:d0:f5:06:e6:69:9c:e3:fa:b8:fe:cf:
ad:4b:5c:2c:b7:f2:19:b4:c3:e6:d8:9b:3d:38:d0:
9f:fe:fc:f0:51:4a:67:3f:94:15:8f:2f:4b:74:cd:
6e:51:1c:71:82:20:d9:37:f2:53:74:e8:53:a1:2e:
0e:44:82:67:69:5a:1f:8e:44:4c:f5:fb:09:2d:47:
99:e1:6a:ba:56:d5:05:94:bf:9c:37:83:55:db:83:
f8:b1:00:a3:bd:ba:99:32:4d:9d:59:34:d9:af:35:
28:61:9d:fd:43:ac:7a:a7:1c:a2:df:f0:9f:b5:43:
6f:ed:87:10:95:d9:89:8e:6a:64:8b:af:35:58:c1:
e6:c1:b0:e4:84:3c:e1:d5:cd:9d:dc:08:86:42:91:
53:f6:82:02:90:0d:0f:12:9e:f2:dc:bd:4e:9f:35:
eb:c5:05:0f:b7:cb:d5:11:9f:ca:d0:3b:9a:7d:30:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:12:74:7C:FC:BB:6C:A5:DF:D0:B5:A8:AD:C1:1A:6E:FD:F2:63
X509v3 Authority Key Identifier:
keyid:65:81:DD:2A:05:39:29:73:D2:8B:24:79:FD:5D:D0:98:08:61:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/4WcSdHz8u2yl39C1qK3BGm798mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b2:25:00:5a:dc:00:0a:38:e5:48:e2:65:85:a2:34:c9:11:
3f:06:43:ab:68:83:7c:58:40:1e:e2:d9:9d:8a:2a:6b:92:95:
90:28:48:0c:47:f2:37:a7:49:33:3a:35:51:12:2d:6b:77:fc:
a7:0f:1d:80:c2:8a:b6:a0:9a:fb:28:02:c8:46:4f:47:37:7f:
42:a6:5b:ae:2c:9e:37:06:4a:65:10:36:0f:f4:71:e3:40:de:
0a:86:2a:83:ab:fe:04:96:5c:3f:fb:3d:89:00:8a:32:83:3f:
75:bd:6d:49:bb:35:93:e9:19:7e:a0:9d:b6:cb:d5:fa:cf:3b:
b4:b4:39:d0:89:f8:f5:34:77:5f:31:5c:74:a8:7f:d7:ed:81:
a4:99:ce:a5:76:89:65:0b:e2:b6:00:3b:97:dd:fc:08:0e:e9:
48:0a:76:42:47:d9:f7:73:f4:85:8e:ea:47:fe:a5:f4:a6:5b:
63:88:1f:ed:ff:98:31:e8:9b:07:b0:02:c3:ab:fe:b8:7a:14:
7b:0b:ae:e2:d0:f3:10:97:d1:da:ba:6c:d6:9b:38:22:c8:bd:
33:fe:e6:d6:be:50:da:a9:b1:4e:3c:c2:5c:c6:bc:d3:1d:0e:
be:ee:79:63:df:e6:c3:9d:41:9d:e9:68:70:73:3e:d7:37:05:
35:a0:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org