Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/GDNBcWXZVpeC4pSYeKAx5Z50rys.roa
File: GDNBcWXZVpeC4pSYeKAx5Z50rys.roa (raw, json)
Hash identifier: XgIL6ZJo+mdphQzknfFQ2sIhOrdnBtfuwi2xtfgSUcE=
Subject key identifier: 18:33:41:71:65:D9:56:97:82:E2:94:98:78:A0:31:E5:9E:74:AF:2B
Certificate issuer: /CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Certificate serial: 0187222B4EAC770A4CE422A764408E1B74EA
Authority key identifier: C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/GDNBcWXZVpeC4pSYeKAx5Z50rys.roa
Signing time: Mon 27 Mar 2023 08:24:36 +0000
ROA not before: Mon 27 Mar 2023 08:24:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 46.254.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2b:4e:ac:77:0a:4c:e4:22:a7:64:40:8e:1b:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Validity
Not Before: Mar 27 08:24:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1833417165d9569782e2949878a031e59e74af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:06:c4:57:e5:10:e3:00:7e:b3:e5:84:58:
26:b9:a5:35:fb:4c:6d:41:0f:d2:00:03:9c:b0:d6:
b6:37:9b:a6:d8:24:02:b6:66:84:46:84:c5:3f:69:
20:5b:d3:8e:62:ea:fd:8e:bb:22:02:77:5d:9b:e8:
0b:5e:99:93:41:01:e9:f5:ee:9c:37:85:9b:a7:fc:
2a:68:b2:e3:59:e7:65:9a:81:b5:9c:89:3b:de:58:
af:bf:16:a5:83:1b:ed:fd:44:b8:67:ac:bb:d9:cb:
99:75:2b:3d:ef:68:ef:96:44:2e:5f:41:c7:8b:d4:
96:bb:e6:c4:38:de:fb:f6:de:cf:f9:1d:a6:96:04:
ad:74:a5:42:16:18:d2:82:99:da:ed:93:47:5a:43:
b7:0d:82:3b:ef:12:c1:f2:82:cc:00:19:bc:3b:cb:
a1:fe:de:5e:13:25:1e:39:ec:fc:7b:c8:48:3d:4e:
60:77:23:f0:e9:95:38:1f:6c:3f:b8:28:35:a6:75:
ec:7a:9c:a9:53:9b:6e:ac:24:71:6b:4c:33:92:0c:
77:2a:03:75:a4:18:a9:dc:76:04:7b:75:b2:da:c3:
d3:8d:a2:45:37:aa:8d:a9:4f:6a:c1:49:09:b3:68:
55:c4:f0:7d:82:18:32:4e:74:93:04:5f:5c:94:c5:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:41:71:65:D9:56:97:82:E2:94:98:78:A0:31:E5:9E:74:AF:2B
X509v3 Authority Key Identifier:
keyid:C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/GDNBcWXZVpeC4pSYeKAx5Z50rys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/xCMr1SONxAENHFKSnd6k8jwEJXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:51:61:45:75:c6:e2:26:ce:19:7d:1c:f4:38:75:87:49:80:
24:90:e2:0a:c3:63:6f:ca:26:5a:68:03:8e:da:01:0e:eb:71:
6a:ae:3c:02:71:74:b0:87:fd:b0:6c:3b:d5:3f:b9:17:8e:2e:
78:35:6d:fa:c6:4f:e8:87:80:9f:7a:3e:8b:d9:74:a2:f9:a4:
4d:a7:b9:1a:8f:0e:9e:9c:bc:42:9f:54:c3:60:b2:8d:99:ea:
82:79:9a:37:8f:8d:b2:1f:71:35:f8:82:82:ad:5f:a2:c2:3f:
17:4b:3a:09:85:9e:f3:e9:69:9c:50:1e:04:7b:42:ab:33:bc:
63:2e:62:22:05:22:32:a4:f7:d6:25:66:bc:52:3d:cd:9a:81:
b8:c5:5c:86:4b:ba:6c:78:5c:f3:ae:b3:c7:31:2b:52:1a:23:
24:04:bb:c4:12:bc:f2:d1:39:ab:cf:bb:df:d5:83:37:a2:9e:
1e:d9:c7:f6:ef:9d:5d:f0:75:a0:db:9f:49:eb:34:39:ce:48:
87:7c:f0:fe:3a:0c:e2:20:b0:cb:c9:4c:fa:a8:2c:9c:14:db:
50:1d:2c:ce:bb:97:98:87:f5:94:d6:40:81:c9:e0:ab:de:2a:
40:71:67:83:69:c8:b3:74:66:66:8e:1c:50:cd:1b:83:fd:18:
2e:60:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:52 2024 by rpki-client on console-ams.rpki-client.org