Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/Ff7RQwPztxqbFh6oISmMTIQ4xtI.roa
File: Ff7RQwPztxqbFh6oISmMTIQ4xtI.roa (raw, json)
Hash identifier: Ubx5blVonWY4sJc/wfjJdWjK9SQL/3KaVSbyiR2BuC0=
Subject key identifier: 15:FE:D1:43:03:F3:B7:1A:9B:16:1E:A8:21:29:8C:4C:84:38:C6:D2
Certificate issuer: /CN=12972dc485a9e596dad40da4e10131d89cd6ef45
Certificate serial: 0189654A907C62B3A498D8B7F0E85E45EBB9
Authority key identifier: 12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/Ff7RQwPztxqbFh6oISmMTIQ4xtI.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 84.246.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:90:7c:62:b3:a4:98:d8:b7:f0:e8:5e:45:eb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12972dc485a9e596dad40da4e10131d89cd6ef45
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15fed14303f3b71a9b161ea821298c4c8438c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:54:8b:b0:9b:dc:06:e7:e1:b6:02:d6:6d:
92:3e:49:ca:c5:70:0c:52:bb:45:ef:a4:5b:56:95:
a8:f2:dd:bf:86:f5:bf:ad:90:62:99:83:62:4c:51:
ba:76:23:eb:b6:49:f6:55:c0:ae:da:24:9f:3a:00:
1d:37:19:f7:45:e1:da:dd:51:f8:9a:3e:30:b2:6f:
cd:32:e5:13:0e:61:6a:cd:1f:fb:52:90:2d:fb:ae:
c8:73:d6:08:a8:19:01:12:d1:90:f7:ea:dd:94:fb:
ca:a6:68:86:ff:7e:12:e5:1d:ea:a5:b5:a6:43:92:
29:f2:ee:c3:41:71:2a:c1:d6:72:c2:5d:91:9b:67:
ff:02:48:e2:b1:30:da:1c:05:bf:24:5b:18:06:bf:
78:08:dc:8f:f9:e5:1f:a2:94:cc:04:5d:a5:2e:68:
5f:05:4e:72:b6:fd:81:74:35:fd:36:28:17:8e:38:
c5:d8:68:6a:67:3e:c3:e0:13:bf:e4:4d:c1:cf:11:
d0:11:39:7b:b8:ab:56:b9:d3:1a:8b:68:f9:0a:73:
70:02:cd:4f:9c:91:75:bb:50:7c:91:d5:db:94:81:
b5:89:9b:6d:d9:45:7a:b3:45:3a:1b:a8:00:10:21:
bc:56:a2:e1:cd:b8:64:55:a3:1c:40:68:23:ae:13:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:D1:43:03:F3:B7:1A:9B:16:1E:A8:21:29:8C:4C:84:38:C6:D2
X509v3 Authority Key Identifier:
keyid:12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/Ff7RQwPztxqbFh6oISmMTIQ4xtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ae:45:ea:28:17:25:e9:38:89:e0:de:94:7a:35:fc:27:47:
32:aa:22:70:bc:fd:75:8b:5c:7a:ab:4a:ed:be:03:f4:09:d9:
4e:71:5d:56:10:71:86:2e:21:cb:9f:05:c0:a9:22:45:23:70:
0c:10:d9:52:c7:ea:1c:34:b1:90:08:56:27:4d:38:74:7b:6d:
d0:63:09:70:2a:bc:4c:ac:88:57:8e:36:95:4e:57:59:b7:cc:
47:34:ca:18:6a:44:11:4f:6a:ec:9a:fa:77:3d:68:64:fc:9f:
98:9c:f2:47:75:95:aa:d3:6d:dd:ac:3d:5b:d2:de:bf:dc:c8:
43:53:47:0f:eb:45:70:48:66:01:9a:bd:82:02:9f:53:e7:8d:
96:ad:66:ce:ed:f1:e9:ec:10:e2:51:83:39:51:4a:23:ed:77:
a1:59:0f:4a:c4:fd:11:f6:e9:54:d4:f8:8a:86:6e:d5:8f:02:
50:e1:66:20:71:90:d6:4a:f2:d2:dd:7a:8f:0f:57:7b:9e:27:
01:3a:0b:7c:f6:99:13:79:91:c2:5c:9d:58:cc:52:c6:99:6f:
1a:28:f5:3f:89:15:79:e9:8d:b9:5f:9e:0c:d8:c3:ff:a2:b6:
a3:56:26:56:1f:3c:dc:9c:f6:37:0c:76:20:23:1b:c3:28:be:
a8:6f:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 07:53:13 2023 by rpki-client on console-ams.rpki-client.org