Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/SvFoy-BbEVYzZ2aCPuCPI8hEhbQ.roa
File: SvFoy-BbEVYzZ2aCPuCPI8hEhbQ.roa (raw, json)
Hash identifier: zk14B+8C+3p1D8yefqt8++n8wqaayGxKuwdxCFnsAoM=
Subject key identifier: 4A:F1:68:CB:E0:5B:11:56:33:67:66:82:3E:E0:8F:23:C8:44:85:B4
Certificate issuer: /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial: 0185701ED2581A101475C6ED5BCA3EF7DC89
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/SvFoy-BbEVYzZ2aCPuCPI8hEhbQ.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.46.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d2:58:1a:10:14:75:c6:ed:5b:ca:3e:f7:dc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4af168cbe05b1156336766823ee08f23c84485b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:56:03:c3:9b:4f:23:5e:7d:95:dd:cb:0f:
44:c9:76:e5:2f:9b:59:e9:67:cc:3e:26:c7:81:98:
e3:37:dc:51:b1:42:f2:88:a2:78:03:1d:16:35:8d:
e5:11:ee:4e:05:af:f7:76:ea:d5:c3:4f:d9:f9:16:
d3:50:2d:ce:e9:3c:7e:c7:87:4e:8b:e4:1c:e8:d1:
47:43:d7:05:ba:7a:8f:3a:02:eb:9e:1a:27:7d:21:
62:f5:92:76:6a:0c:43:0a:7b:ed:e5:b9:1a:14:aa:
6d:03:c5:97:d6:16:33:04:b0:ce:98:65:a4:45:e1:
1a:07:5e:65:7f:ac:ea:ff:bd:f1:df:86:64:3a:e2:
46:9d:da:ac:29:f0:ed:70:fd:ff:93:22:d6:c7:43:
7b:d1:5d:be:db:b5:99:32:5c:0b:5b:a8:37:55:f3:
f6:c8:0e:bd:02:29:6a:de:e6:cd:4d:d9:62:43:b0:
12:e1:ef:0c:8a:bc:b4:70:4e:e9:75:3a:a5:23:7a:
33:e4:32:b2:71:08:e6:fa:74:33:cc:4c:f8:84:00:
1a:63:77:a0:e5:0b:b2:34:16:69:84:60:bb:d5:61:
e4:b0:3f:d9:c7:8e:a7:9f:af:e9:16:30:fc:5b:55:
67:ca:d2:16:d1:78:a5:72:3d:34:87:8f:f9:6c:08:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:68:CB:E0:5B:11:56:33:67:66:82:3E:E0:8F:23:C8:44:85:B4
X509v3 Authority Key Identifier:
keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/SvFoy-BbEVYzZ2aCPuCPI8hEhbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
55:67:6f:75:55:8c:3a:3d:0a:44:dc:fa:cb:51:6a:ff:ed:00:
03:77:12:c1:02:0f:c4:ba:d8:75:be:eb:d4:75:98:cb:4a:ab:
21:04:cf:f1:80:84:11:6a:63:64:60:9c:40:34:57:c5:bd:f9:
d8:ff:c8:3e:ff:ba:71:2b:a0:e8:e6:8e:45:65:57:9b:76:57:
cb:65:4c:ac:bd:37:dc:62:1e:bd:fc:c8:b9:f1:af:00:69:48:
e7:9d:78:f7:b0:ec:e7:a2:09:f9:c6:14:a9:2e:80:f0:a1:c7:
40:c4:f8:df:28:64:52:ea:a0:df:6b:3b:85:4a:b5:4c:a3:85:
b6:ad:7f:01:43:89:9a:b3:27:84:12:44:04:c5:1f:e3:4f:a5:
dc:31:be:41:09:c4:07:77:89:18:6a:4b:52:38:ae:8f:a7:e0:
ef:14:41:b1:eb:bc:5d:96:ca:8b:a3:5e:57:b8:03:d7:79:72:
38:c7:0f:82:5f:4b:d1:73:2b:08:17:d6:e4:48:d4:88:af:73:
20:0a:17:4a:9c:06:ef:22:9c:f2:9a:35:ca:b2:59:13:b0:08:
cb:7e:e3:60:38:f8:bf:a7:2c:3f:73:09:5e:f3:24:ba:c4:db:
6d:6d:7d:5e:c7:28:0c:d3:18:53:c9:1a:59:b6:b2:e7:b6:21:
97:1e:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:13 2025 by rpki-client