Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/cMCZXBGFqpjWmqN2EfHtWdY0rO4.roa
File: cMCZXBGFqpjWmqN2EfHtWdY0rO4.roa (raw, json)
Hash identifier: Q5DR2r0a+jcvMnI5EiIUz7lUVxEjNthlJaz4o+YxSWI=
Subject key identifier: 70:C0:99:5C:11:85:AA:98:D6:9A:A3:76:11:F1:ED:59:D6:34:AC:EE
Certificate issuer: /CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Certificate serial: 01867FAB4E9F942B92D5A06BF54EFC9DC7F5
Authority key identifier: 34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/cMCZXBGFqpjWmqN2EfHtWdY0rO4.roa
Signing time: Thu 23 Feb 2023 19:06:18 +0000
ROA not before: Thu 23 Feb 2023 19:06:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 46.31.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:ab:4e:9f:94:2b:92:d5:a0:6b:f5:4e:fc:9d:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Validity
Not Before: Feb 23 19:06:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70c0995c1185aa98d69aa37611f1ed59d634acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:37:54:85:f0:34:58:1c:3b:91:67:0a:3e:
e4:7d:a8:43:3e:3d:fe:ae:57:d4:e6:fa:ef:60:24:
90:2e:8d:60:9e:fa:d9:5e:ea:8a:f5:04:0f:40:03:
c4:d3:80:bc:73:b0:46:17:a5:5d:73:00:2f:8f:0b:
42:62:e0:87:f8:35:9b:28:fd:af:e6:2a:c3:65:5f:
35:47:de:6d:e8:92:52:a4:42:b2:93:38:44:3e:4f:
f1:9a:ac:42:7b:01:6e:0b:a6:c1:4c:01:89:56:0b:
38:00:db:a8:2b:2a:d6:ba:70:88:ae:a8:63:fe:01:
54:13:2e:ed:c2:12:d1:8d:a9:b3:af:11:76:e4:6f:
24:f3:a7:fb:b3:0c:27:05:7d:c2:52:d3:60:41:7a:
65:a2:9a:63:1f:dd:50:47:c0:c9:7a:b8:95:39:57:
8f:5c:66:58:4d:2d:8c:6f:29:c2:76:5c:26:01:c5:
2d:75:c8:4a:2d:40:75:e8:8a:fe:fa:84:ff:62:a3:
c0:87:60:ad:61:4c:85:32:52:fd:bd:0a:fe:14:d3:
88:2d:e3:cb:f4:fb:53:de:54:58:bb:9d:6c:b5:87:
14:5b:47:28:44:96:7c:1c:98:a6:0a:96:01:64:1f:
7b:fc:b8:f0:62:7d:ff:48:f0:cc:9f:d6:7e:6a:b6:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:99:5C:11:85:AA:98:D6:9A:A3:76:11:F1:ED:59:D6:34:AC:EE
X509v3 Authority Key Identifier:
keyid:34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/cMCZXBGFqpjWmqN2EfHtWdY0rO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fd:b7:27:65:4b:ed:ca:f0:af:da:e2:4d:2e:79:46:43:87:
2f:81:c2:5c:23:fb:dd:c3:92:e2:f4:d2:0f:83:a7:24:6c:5b:
84:81:2e:6c:92:65:24:b4:0d:1e:77:56:20:f8:ce:be:70:50:
80:7e:54:85:71:3e:66:3d:2b:de:ae:48:b2:11:c6:d7:70:90:
9e:f9:a6:41:08:8a:b3:bf:b1:0d:86:51:de:73:9f:27:cb:34:
60:3a:76:2b:59:85:b0:52:83:2f:2b:01:21:71:f7:de:67:1e:
1c:95:11:c4:f2:c2:55:81:58:6d:0d:fe:8c:3a:6e:ba:81:08:
76:c9:84:03:bd:b4:0e:e7:d0:7a:7c:e9:44:15:2a:29:90:de:
62:5b:b5:01:ba:51:cf:41:da:57:e7:09:a0:18:d4:21:68:57:
19:0b:d6:3d:48:0a:ac:b3:67:b4:60:42:5b:73:78:46:6c:a7:
f4:e5:33:a6:65:e2:43:79:70:5a:f0:a5:36:93:bf:c3:db:67:
d9:9e:d1:44:52:e3:da:1d:79:66:ce:1b:f3:cb:fe:ec:78:44:
af:52:0e:69:cf:11:97:85:e9:2d:3f:d5:f7:5c:d4:68:8d:c3:
ff:cd:56:e7:5f:f7:53:a6:9e:4d:d9:6a:c8:2a:1f:44:fc:0f:
68:8c:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org