Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/dka57ORSkXRo04-0JGz3DPFct30.roa
File: dka57ORSkXRo04-0JGz3DPFct30.roa (raw, json)
Hash identifier: K8LCQNyP9WsjD+lPjWStI98zyMLBmMq+AwMO0ywD/lA=
Subject key identifier: 76:46:B9:EC:E4:52:91:74:68:D3:8F:B4:24:6C:F7:0C:F1:5C:B7:7D
Certificate issuer: /CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Certificate serial: 018723A0DA320E0DD230A2DDB13A6DFE564E
Authority key identifier: 34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/dka57ORSkXRo04-0JGz3DPFct30.roa
Signing time: Mon 27 Mar 2023 15:12:36 +0000
ROA not before: Mon 27 Mar 2023 15:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 46.31.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:a0:da:32:0e:0d:d2:30:a2:dd:b1:3a:6d:fe:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Validity
Not Before: Mar 27 15:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7646b9ece452917468d38fb4246cf70cf15cb77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:aa:66:a6:81:31:ca:b0:e8:df:1f:73:4e:
ce:aa:5d:7f:f2:62:89:97:c2:4d:20:3a:ee:16:46:
b1:3f:6d:3d:87:66:a1:48:f1:6f:f6:f6:89:8d:dd:
2e:81:c2:d1:fa:97:21:4e:d2:6d:f8:98:27:ff:04:
d8:44:63:75:ad:97:e7:e7:27:8a:61:b5:f5:1c:7d:
ee:66:e3:a6:80:65:2d:ef:5d:df:c8:eb:35:81:21:
70:0e:fc:27:48:1b:39:f7:30:29:0e:13:4d:a4:31:
23:76:5b:4b:25:d1:05:fb:ae:8a:71:69:74:c1:73:
05:01:40:2b:8d:14:56:58:ac:f4:d2:00:87:a4:c5:
cf:0d:b8:91:2f:50:f8:85:75:ba:8a:e2:ab:49:e7:
00:24:42:5d:d5:bc:12:ed:86:ec:3f:63:02:71:3a:
e3:86:ba:72:47:24:64:6e:69:59:ab:a9:1e:4b:77:
3d:b0:3e:70:ab:6f:35:69:1f:ed:41:07:af:ba:3d:
7e:a4:56:3a:c9:2f:91:20:ac:f2:ff:4d:ce:72:95:
c2:7a:ba:52:a1:e5:00:c3:05:1a:2d:a6:90:20:77:
0a:07:6a:da:99:ec:56:85:21:a9:06:90:2a:c3:6f:
46:7a:d3:f4:72:a6:93:7a:12:fd:10:48:e5:de:ee:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:B9:EC:E4:52:91:74:68:D3:8F:B4:24:6C:F7:0C:F1:5C:B7:7D
X509v3 Authority Key Identifier:
keyid:34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/dka57ORSkXRo04-0JGz3DPFct30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.66.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6e:74:db:a3:c2:f1:59:d9:8b:25:46:37:a2:c3:71:e2:97:
41:e5:a3:86:10:5c:8c:ef:23:44:85:f0:58:8d:ab:c5:11:93:
95:b0:c8:5b:54:fb:4b:46:59:a9:dc:c0:64:56:77:9b:ff:56:
5f:0e:73:62:e7:97:e2:1c:11:0a:43:ac:3a:7e:44:0a:d4:24:
c4:e6:bf:30:e4:25:51:b5:d9:27:63:af:ef:ba:cb:73:ed:61:
88:a2:94:1d:96:1f:98:08:ec:b9:04:7c:ce:34:7f:b8:58:69:
bf:b5:50:86:c7:d1:c6:c9:ab:f9:79:00:40:4b:f3:a3:85:49:
90:16:bc:7a:94:40:78:97:0c:ae:18:1c:23:62:92:b0:75:d6:
87:ba:54:84:e7:06:90:1d:aa:9c:fa:9d:31:63:6b:a8:1c:fe:
f1:11:c3:c1:7d:de:96:e2:64:3d:99:d8:6e:d1:6f:45:f6:43:
51:78:ea:93:fd:51:82:5a:08:1d:df:2e:3c:90:de:3c:22:f0:
3e:11:cf:1d:a9:5f:ba:6d:31:75:cd:70:34:a6:f5:22:ee:2a:
e4:06:4f:74:9b:08:ca:e0:73:b6:e8:08:13:73:b7:7b:7b:17:
70:bc:91:bf:6e:cc:95:6d:6d:43:ed:53:34:ff:1f:23:23:af:
8e:60:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:12 2024 by rpki-client on console-ams.rpki-client.org