Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/c9uQ7k3O9tWNF3kCTXNMQG4hoIk.roa
File: c9uQ7k3O9tWNF3kCTXNMQG4hoIk.roa (raw, json)
Hash identifier: m1bTmsl24npKdwKCbi3DJNQbJkSzfPcHVwEFFOAn220=
Subject key identifier: 73:DB:90:EE:4D:CE:F6:D5:8D:17:79:02:4D:73:4C:40:6E:21:A0:89
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 01857169BB30D8857E9A5248242B47B2CA80
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/c9uQ7k3O9tWNF3kCTXNMQG4hoIk.roa
Signing time: Mon 02 Jan 2023 07:37:12 +0000
ROA not before: Mon 02 Jan 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bb:30:d8:85:7e:9a:52:48:24:2b:47:b2:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 2 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73db90ee4dcef6d58d1779024d734c406e21a089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:3a:f1:dc:bf:30:1e:7b:61:34:03:03:87:
50:15:0f:9b:b5:0a:91:7f:48:95:c8:ab:c7:31:13:
4c:33:a3:d8:44:b8:45:c7:e4:37:58:97:b4:4d:7a:
8a:6d:e6:c4:d8:cd:62:80:28:59:d1:26:90:68:fc:
3a:d1:86:6f:ca:13:73:c8:b1:1f:18:fc:c9:ae:cd:
3f:fb:41:ce:cd:00:15:aa:4a:5b:7e:e3:a2:82:80:
b1:71:f8:36:5c:b5:4c:10:e0:3b:af:8a:57:7b:5f:
68:49:6d:3a:05:ba:fc:f8:2e:dd:27:23:b9:d9:a1:
97:df:be:4b:78:d1:52:d1:4c:53:af:f6:5d:ac:75:
eb:0a:42:e5:3c:bd:02:3e:3b:c2:c7:3f:75:83:0a:
da:d6:cc:ad:bd:e7:42:ea:12:b0:8e:bc:c6:b0:29:
7f:01:8f:0b:8a:42:6d:aa:f2:11:0b:f0:40:73:ab:
33:a8:b7:e0:94:f6:f4:3f:36:dc:9b:00:e7:f7:99:
4f:69:47:0f:16:d7:27:11:51:1a:c6:32:99:49:5d:
aa:2d:81:50:42:d6:76:f2:d2:05:bc:13:32:be:4e:
aa:6f:43:cb:76:23:95:75:8a:c1:3e:ef:4b:66:55:
22:dd:9b:67:c9:3c:7b:3c:2e:02:a1:53:05:cd:da:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:90:EE:4D:CE:F6:D5:8D:17:79:02:4D:73:4C:40:6E:21:A0:89
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/c9uQ7k3O9tWNF3kCTXNMQG4hoIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ed:f6:77:46:40:b6:46:cb:79:9e:06:73:7d:fd:e1:7b:c7:
33:fa:15:be:68:7f:ae:9e:f3:4d:08:6c:c8:42:81:16:13:2c:
16:22:cf:17:da:90:d1:5f:6c:d2:02:2a:b7:04:f9:98:0b:a4:
09:a4:33:53:e5:65:8e:e1:ad:0d:bc:9a:52:49:81:f5:b8:6b:
44:66:86:5e:4e:95:de:ce:97:1b:3e:e2:84:94:56:04:22:0c:
0e:39:a8:81:12:55:a2:dc:37:99:54:66:70:42:32:97:6d:66:
01:ef:f6:50:09:24:4b:f0:9e:88:03:12:0b:c5:4f:18:90:57:
b9:42:54:7b:5a:41:dd:68:5c:4a:9c:ee:dd:ce:b1:67:b6:53:
dd:78:c3:51:f9:fc:56:8a:90:b2:99:6f:c1:1e:97:f6:a1:5e:
a2:11:2d:bb:7a:f1:08:47:4a:d2:d5:a8:fe:d7:26:a0:c7:ba:
69:fa:e6:8b:c6:76:49:4f:66:67:50:64:cf:20:81:cb:ca:87:
f3:b8:45:e8:c2:6c:e7:ff:53:33:6e:ed:d9:07:4c:47:6c:fb:
4c:fa:ba:8b:44:87:9d:b8:ef:36:36:3c:1d:c5:7e:b8:ca:48:
43:b9:4f:b0:1d:8a:b4:1a:f2:6f:c6:ae:6c:93:4e:d7:7e:95:
74:6a:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org