Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/7ly0Ny1QjDpgx5BZ5SVm47DSAR4.roa
File: 7ly0Ny1QjDpgx5BZ5SVm47DSAR4.roa (raw, json)
Hash identifier: M2yLbTHNu3n2XFCoSMssd6Qdeb4bjkIX+aM1Xwr1Gmk=
Subject key identifier: EE:5C:B4:37:2D:50:8C:3A:60:C7:90:59:E5:25:66:E3:B0:D2:01:1E
Certificate issuer: /CN=46cfa7079c143a17ed590262bac7868fcbc842ba
Certificate serial: 01849B5A51F55400FC3718ABD1A7DEA92E30
Authority key identifier: 46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/7ly0Ny1QjDpgx5BZ5SVm47DSAR4.roa
Signing time: Mon 21 Nov 2022 18:01:38 +0000
ROA not before: Mon 21 Nov 2022 18:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 212.18.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:5a:51:f5:54:00:fc:37:18:ab:d1:a7:de:a9:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfa7079c143a17ed590262bac7868fcbc842ba
Validity
Not Before: Nov 21 18:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee5cb4372d508c3a60c79059e52566e3b0d2011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:4c:be:6a:97:d3:f2:7a:b6:3a:c0:f9:79:
d9:85:45:f8:e3:0d:a8:2e:d6:1f:d0:0d:9a:36:f0:
a3:53:ee:a2:26:d7:f8:d9:2e:6a:7e:f2:02:d3:9e:
d6:3f:b0:95:0a:6e:dc:17:77:29:8d:90:41:56:c5:
7d:43:29:d6:63:78:ef:1f:a6:ce:09:c2:1b:2a:1a:
ed:58:6d:77:0f:9b:36:d7:45:e7:ed:e9:4d:45:2a:
76:bc:e3:16:52:96:ea:3c:de:0d:b7:0a:3e:f6:64:
15:f0:d4:f2:91:8f:81:87:8b:aa:fa:55:3b:ca:4d:
e1:d9:7e:28:ab:b1:b1:af:65:9f:20:d6:49:c5:da:
6d:ad:31:46:0a:eb:c6:4b:84:21:2d:0f:34:53:7a:
7c:ae:72:d7:b3:1b:48:95:06:9c:4a:65:1a:aa:c7:
1a:7b:30:f3:12:bd:2f:07:9c:61:46:91:34:96:60:
ae:a3:01:3e:41:e3:0d:a9:51:6e:6c:18:c3:ce:3a:
29:db:35:47:3f:f6:c9:c3:4d:b9:17:31:ec:4f:d1:
55:83:35:19:8f:b7:65:1d:ef:fb:bc:c0:54:43:c4:
47:dc:ba:7c:2c:b7:a7:c8:4d:aa:dd:78:0a:1f:e1:
8c:02:bf:d1:b7:e0:a2:40:9a:92:f7:62:50:5d:4c:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:B4:37:2D:50:8C:3A:60:C7:90:59:E5:25:66:E3:B0:D2:01:1E
X509v3 Authority Key Identifier:
keyid:46:CF:A7:07:9C:14:3A:17:ED:59:02:62:BA:C7:86:8F:CB:C8:42:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs-nB5wUOhftWQJiuseGj8vIQro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/7ly0Ny1QjDpgx5BZ5SVm47DSAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/68f428-2f8c-422d-a084-d23708c5f659/1/Rs-nB5wUOhftWQJiuseGj8vIQro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:31:88:1d:ce:84:b3:e0:9c:42:dc:60:78:6a:3e:fb:86:13:
ce:6e:3b:1d:ae:d1:02:18:49:df:dc:36:57:0f:90:09:f8:6b:
fb:28:84:30:9c:59:3e:65:9b:1e:1e:4e:ed:c6:ab:59:0a:6d:
1e:7f:dd:87:02:54:cb:12:fc:06:2d:83:73:31:89:1e:2b:11:
0a:25:0a:d8:ef:20:5a:2e:97:8f:8f:6f:27:56:26:fc:96:d8:
d3:e9:b5:2d:e3:2a:51:d9:6a:1f:0b:88:0e:f3:94:bf:b4:b7:
a8:84:d8:e1:ac:f7:42:57:61:c0:62:9b:24:e0:db:1a:41:29:
25:db:2a:03:8d:e7:8f:4e:9e:93:a1:73:04:15:58:e8:23:37:
9d:1f:56:22:db:11:e3:8c:cc:db:95:e3:72:98:6e:f5:ba:9a:
b8:0b:0f:da:fd:5f:f9:79:aa:ee:59:a4:b2:90:5e:31:fa:f4:
47:68:b9:6d:c2:b0:37:b3:4d:d4:b4:26:e4:46:15:88:2c:4b:
24:2f:50:3a:e9:b1:9c:82:df:6f:bb:95:18:f1:ba:41:63:d2:
f3:1f:6c:62:f1:75:ff:62:b5:57:7c:27:a9:39:c1:22:b2:76:
69:8e:91:43:8b:da:0c:a3:fe:76:fd:dc:c7:6f:2f:ca:a3:05:
90:9f:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:02 2024 by rpki-client on console-ams.rpki-client.org