Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/_MGShYsKQw20elTXQoXh5dBXOxY.roa
File: _MGShYsKQw20elTXQoXh5dBXOxY.roa (raw, json)
Hash identifier: rlKocmnlsuIBQmshILjHgruudlXbrnqJL+GpIjv/oBE=
Subject key identifier: FC:C1:92:85:8B:0A:43:0D:B4:7A:54:D7:42:85:E1:E5:D0:57:3B:16
Certificate issuer: /CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Certificate serial: 018572C358425AEF7DF82D607C9FE526C9CA
Authority key identifier: 34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/_MGShYsKQw20elTXQoXh5dBXOxY.roa
Signing time: Mon 02 Jan 2023 13:54:42 +0000
ROA not before: Mon 02 Jan 2023 13:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.31.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:58:42:5a:ef:7d:f8:2d:60:7c:9f:e5:26:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Validity
Not Before: Jan 2 13:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcc192858b0a430db47a54d74285e1e5d0573b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:db:cf:00:01:ad:33:a5:39:b4:4e:3c:fa:
2c:62:53:5e:5a:48:a2:b9:d5:ee:2f:75:b3:68:ce:
1a:60:67:50:3e:6d:af:58:24:56:31:d8:a8:0b:ee:
d8:76:fa:cb:e0:75:e1:6b:ed:1c:c4:1d:a5:1c:97:
2a:56:08:f6:3f:fa:7d:24:70:4b:db:a0:e4:a2:ef:
8b:57:00:b4:b2:3e:63:0e:76:4d:01:42:bc:b1:a2:
75:78:0f:7c:c9:fe:8f:ea:a9:95:f7:b0:8b:6f:38:
a5:a5:22:21:6c:8a:5a:a3:bc:d3:0c:cf:52:d4:c1:
a9:6f:ed:8f:2e:3d:7c:2d:9f:67:40:db:0b:d7:d0:
0c:01:9b:9e:8d:c0:47:b5:33:bb:ab:d2:a8:6b:e5:
3c:20:70:1e:5b:12:e6:3d:49:97:5e:9d:1e:68:10:
48:81:7d:af:c7:90:48:f4:47:08:78:79:bb:f6:99:
d4:b7:5b:c4:41:1b:e8:5c:03:1b:09:47:73:b5:b0:
94:e9:7b:35:ba:91:84:da:c5:6f:c3:db:6f:5f:c7:
c5:23:91:64:fd:6a:cf:6b:84:f3:d4:42:a8:e9:3e:
60:9c:f2:08:ae:5f:3c:e0:e9:7a:4f:df:0f:c8:b8:
6f:73:b5:a9:03:37:e9:27:52:0b:7d:c3:eb:43:a8:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:92:85:8B:0A:43:0D:B4:7A:54:D7:42:85:E1:E5:D0:57:3B:16
X509v3 Authority Key Identifier:
keyid:34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/_MGShYsKQw20elTXQoXh5dBXOxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.66.0/24
Signature Algorithm: sha256WithRSAEncryption
76:97:a7:b1:4e:b2:f0:c9:44:b0:fe:ba:5e:aa:ec:32:3f:43:
ae:fe:02:0c:ca:15:47:0d:d5:69:28:ed:45:bd:b4:65:61:8d:
67:8f:6f:0c:af:13:95:9c:89:5f:42:df:10:0b:06:fa:04:87:
e0:6e:fd:f0:93:56:41:6d:7c:d7:b5:a3:61:7f:bb:ee:73:e0:
a0:54:16:f6:d0:55:31:c0:4a:cd:37:bf:83:86:be:dd:c4:fc:
31:99:ba:f0:5f:af:a9:90:1d:f5:2d:f7:33:b5:d5:af:14:16:
8e:59:f1:da:0c:56:c1:33:8d:7e:00:42:33:8c:07:5d:ee:25:
16:e1:5a:49:0f:6c:eb:ab:18:e4:0f:eb:5f:bc:9a:4b:f8:45:
a7:60:f9:49:1a:04:91:22:56:1c:ff:e7:14:8b:89:62:52:ee:
22:f2:c9:85:0b:af:97:8f:25:35:58:d6:cf:5e:bb:43:9d:81:
ed:ff:4d:ab:44:f5:b4:20:c2:08:ae:e5:d9:93:bd:70:e4:5b:
1e:3a:25:9d:7a:13:c2:cc:07:1d:c6:0e:94:68:a8:25:6c:ce:
a5:b5:56:3c:f7:48:b8:88:f2:f9:13:4d:c0:1e:a3:a1:e6:bd:
6b:6d:87:bb:70:f1:02:99:b9:e9:ac:a7:55:e2:46:a1:60:eb:
9f:d2:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org