Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/mGAProF0IA2D7CSgq840ez34dY4.roa
File: mGAProF0IA2D7CSgq840ez34dY4.roa (raw, json)
Hash identifier: QDUh/PWW4jELgr2xwf1cfOf7f5UukejPYB1s9jbGPoE=
Subject key identifier: 98:60:0F:AE:81:74:20:0D:83:EC:24:A0:AB:CE:34:7B:3D:F8:75:8E
Certificate issuer: /CN=409ab9c0e3282134bb825d100495d142223e95ec
Certificate serial: 01856C6ED93BA24D7F920AA7ABDB70C33F45
Authority key identifier: 40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/mGAProF0IA2D7CSgq840ez34dY4.roa
Signing time: Sun 01 Jan 2023 08:24:41 +0000
ROA not before: Sun 01 Jan 2023 08:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 46.253.143.0/24 maxlen: 24
2a13:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:d9:3b:a2:4d:7f:92:0a:a7:ab:db:70:c3:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409ab9c0e3282134bb825d100495d142223e95ec
Validity
Not Before: Jan 1 08:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98600fae8174200d83ec24a0abce347b3df8758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:41:1d:4c:35:b8:4e:84:fb:17:30:82:10:
20:ce:a9:38:97:dc:7c:a2:db:d7:ce:1d:7f:5c:55:
16:e6:7a:55:1b:e8:d8:cd:f3:90:a3:ac:5a:dc:88:
74:f9:3b:30:8b:10:be:57:1b:a6:e6:b3:1b:ab:40:
9f:45:29:df:8c:58:99:8d:02:ea:c0:e4:82:73:ee:
45:07:70:cd:6f:2e:b1:74:80:f6:ef:99:10:8d:29:
05:e6:68:4b:a5:a5:17:ce:17:fc:7a:4d:fa:34:5a:
4a:17:ee:c3:6b:b7:73:35:79:fb:74:bd:28:85:50:
0e:5d:78:33:f4:b2:09:32:9e:d8:50:ac:bf:30:23:
3c:c4:76:5e:82:ae:eb:b5:c9:ef:16:ee:52:4f:48:
65:c4:96:6b:d1:34:41:3a:86:ac:0b:91:71:e2:56:
05:dd:83:06:19:cc:8f:a0:a4:ba:f3:b3:0b:98:51:
17:6a:24:4c:86:35:2e:32:c0:5b:b4:e1:7f:f1:01:
2b:c7:8c:cc:fe:31:80:25:1d:8f:74:30:dd:51:05:
52:10:fe:e5:0a:bc:8e:9d:29:d8:ce:9d:73:27:14:
97:d6:b9:cc:b7:7a:c3:be:ea:62:83:d2:29:83:4d:
70:11:9c:93:89:55:f5:e9:eb:cc:93:be:5d:b0:b8:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:0F:AE:81:74:20:0D:83:EC:24:A0:AB:CE:34:7B:3D:F8:75:8E
X509v3 Authority Key Identifier:
keyid:40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/mGAProF0IA2D7CSgq840ez34dY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
IPv6:
2a13:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:8b:19:b2:d0:0d:12:bd:c1:a7:d2:a8:82:53:b8:f6:41:d3:
2b:da:fc:af:d3:42:c6:7a:ec:09:db:f7:45:b0:a7:f0:ea:68:
4d:28:71:0a:30:c0:27:17:0c:a4:74:64:8d:4a:59:37:a3:29:
75:88:41:81:1e:d5:cb:10:2d:82:78:7e:09:31:ef:4d:b6:38:
4a:32:15:2d:66:d6:8f:37:9d:e0:7a:28:f3:ce:b3:f4:22:a6:
6c:68:b4:95:7b:7a:83:88:74:21:62:f8:b5:ba:8e:06:8c:18:
b1:1a:1e:2f:c0:5d:03:f4:eb:20:1c:b7:bc:09:59:d1:8d:ca:
f6:da:eb:cf:47:fb:de:fb:20:e3:47:72:4a:64:14:bb:8e:9f:
4c:e1:b5:48:69:83:df:30:37:ee:86:dc:7f:8c:d4:fb:2e:b6:
42:e8:a7:a6:6d:b0:d5:c7:d6:8c:d7:80:32:3b:df:65:90:f6:
7c:58:64:c6:09:28:8a:70:7f:04:f7:b1:99:e9:1b:36:9d:7c:
15:98:1c:0e:a0:fa:b7:0f:41:8a:e5:cd:6f:19:7a:72:c5:69:
25:1c:81:95:e0:09:8a:6d:4f:92:1c:98:6d:0d:53:f9:55:ad:
7e:03:c5:15:a1:cd:07:d3:b7:e0:90:1a:f0:5e:06:b3:58:3f:
28:8e:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:53 2024 by rpki-client on console-ams.rpki-client.org