Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/DSPAOTkQrQgLlj6nqoeLei8zHB8.roa
File: DSPAOTkQrQgLlj6nqoeLei8zHB8.roa (raw, json)
Hash identifier: uZTWUG2wuBdwaVHP0Non3boJL71g8p1RpZAsrD6AQlA=
Subject key identifier: 0D:23:C0:39:39:10:AD:08:0B:96:3E:A7:AA:87:8B:7A:2F:33:1C:1F
Certificate issuer: /CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Certificate serial: 0189D06FDA615DD9C7D87D97F016BE74AD15
Authority key identifier: 46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/DSPAOTkQrQgLlj6nqoeLei8zHB8.roa
Signing time: Mon 07 Aug 2023 14:38:58 +0000
ROA not before: Mon 07 Aug 2023 14:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50926
IP address blocks: 212.34.128.0/19 maxlen: 24
212.34.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:6f:da:61:5d:d9:c7:d8:7d:97:f0:16:be:74:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Validity
Not Before: Aug 7 14:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d23c0393910ad080b963ea7aa878b7a2f331c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:eb:ac:05:c5:2c:ee:60:56:f7:43:84:82:
58:51:17:61:12:68:87:23:15:02:27:87:cc:2b:f5:
1c:6f:5b:65:7a:84:29:62:4f:f3:dc:de:d6:d6:e9:
09:61:5c:18:cb:8b:6f:74:aa:77:25:5b:ad:52:3e:
17:a1:fb:b6:e8:d2:ad:4b:bd:7c:63:01:45:f9:46:
91:76:2e:69:ab:11:a9:64:4d:ab:f4:fa:a1:9c:38:
01:11:20:3f:4d:bd:96:7c:7c:06:17:a9:3a:df:df:
ef:a6:52:01:97:31:14:1e:a1:4b:f8:61:43:98:45:
56:54:a3:01:e4:dc:b6:57:50:6a:e1:0b:32:3b:cc:
5d:d9:24:bf:7f:10:98:68:32:46:ca:8e:e6:8b:81:
ec:93:00:67:a7:d0:db:d0:b9:cd:c0:3f:f3:b7:a3:
36:24:84:03:11:54:ed:15:88:11:7a:36:09:c6:7b:
bb:dd:b4:35:99:5a:59:9a:36:01:d9:58:a8:cb:b8:
6f:e8:d4:ce:1e:49:a3:93:92:a0:c9:29:81:a3:5a:
49:00:b2:67:62:72:f9:31:26:55:f2:c7:99:e5:16:
02:e3:76:a5:8f:40:1c:d6:7c:b0:27:ee:be:4f:8e:
e5:b1:d1:da:31:93:9b:91:20:8d:3d:ed:2c:d6:cf:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:C0:39:39:10:AD:08:0B:96:3E:A7:AA:87:8B:7A:2F:33:1C:1F
X509v3 Authority Key Identifier:
keyid:46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/DSPAOTkQrQgLlj6nqoeLei8zHB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.34.128.0/19
Signature Algorithm: sha256WithRSAEncryption
69:ce:b3:2e:57:08:c7:5e:7c:02:7a:b4:3b:c2:5c:3b:b2:c5:
2e:25:83:7d:06:db:2a:65:fa:c6:81:f0:17:79:a4:35:0f:eb:
3a:6c:01:11:ef:af:07:78:23:dd:71:fa:52:ba:cb:ae:9a:d2:
13:c6:0b:da:ea:32:31:6a:37:17:cc:65:fb:34:df:a6:4a:2b:
63:20:ba:c6:69:34:0f:f5:10:a6:e2:f2:70:85:f6:41:c9:20:
1b:72:9d:7d:a2:39:e5:59:98:9d:36:fa:38:93:b6:53:aa:05:
ce:94:13:a9:fe:ea:3b:78:c7:fc:a4:40:ad:00:88:f4:98:ac:
4c:13:b5:3b:18:49:31:ad:29:15:93:24:0c:c1:c4:9e:69:09:
d7:25:da:47:e2:8d:cc:83:d0:96:e7:b6:a0:58:0e:39:4f:da:
df:38:0b:e4:e1:43:fe:5a:d7:b3:66:b9:cc:5e:6d:05:10:2c:
77:a2:ae:38:0d:0d:b2:30:c2:04:91:42:f6:59:91:cd:ea:62:
9c:7f:15:e4:69:88:50:18:eb:8b:b5:62:4d:11:4b:26:d6:8f:
8e:24:83:5e:5d:41:74:f7:0d:c4:cf:21:13:dc:36:46:75:0f:
e7:3e:f1:51:8d:54:4e:ce:7c:85:be:72:ee:9c:e6:ab:4e:a8:
ec:cb:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:15 2025 by rpki-client