Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/IukcK1yRsBywRNrnKl0dLTWvP2Q.roa
File: IukcK1yRsBywRNrnKl0dLTWvP2Q.roa (raw, json)
Hash identifier: b/dSYf5E2sFcf+iCRiSIs+2paWYFN6iE5ZxXVqHLclA=
Subject key identifier: 22:E9:1C:2B:5C:91:B0:1C:B0:44:DA:E7:2A:5D:1D:2D:35:AF:3F:64
Certificate issuer: /CN=12972dc485a9e596dad40da4e10131d89cd6ef45
Certificate serial: 0189654A8FD7911F2AF9DCBD9EBBC4FE5B30
Authority key identifier: 12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/IukcK1yRsBywRNrnKl0dLTWvP2Q.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 84.246.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8f:d7:91:1f:2a:f9:dc:bd:9e:bb:c4:fe:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12972dc485a9e596dad40da4e10131d89cd6ef45
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e91c2b5c91b01cb044dae72a5d1d2d35af3f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:e6:e6:69:15:24:df:01:63:3f:ac:d5:a4:
4d:8e:fa:ef:62:96:b0:49:1a:4a:01:b2:14:82:11:
3f:5f:e8:70:69:99:17:52:a0:69:59:d8:e0:7e:b2:
8f:e8:1d:3b:1a:1c:6d:83:75:ee:cd:5f:ef:e6:71:
e5:0c:f5:1b:94:2d:93:8a:5c:a2:56:1f:e5:2a:fa:
8a:6b:ed:f5:d4:f6:c9:ba:d3:40:73:84:41:90:26:
50:ba:a0:e5:a5:d5:5b:fb:1c:bd:10:a5:73:55:45:
39:f5:d5:c7:67:40:89:70:5d:5b:1e:98:de:8a:71:
ed:05:50:c4:97:5f:77:29:7a:43:77:2d:72:73:22:
9f:62:c0:4f:a9:bb:08:89:dd:f8:a0:64:70:0f:06:
b4:78:dc:97:01:91:69:85:a6:4e:20:ce:14:c8:cd:
b9:91:08:be:b1:b5:58:38:d8:62:e4:d3:40:e7:fb:
44:3d:d1:09:e8:84:28:4f:1f:3d:15:a5:18:c4:b0:
54:c1:52:59:46:29:ed:a8:d1:07:2f:b1:9c:54:ea:
cd:7e:27:4a:9d:0e:45:a7:e0:d0:23:34:5b:90:89:
43:76:bd:f6:8b:17:4d:14:ba:a6:95:17:8b:d4:0d:
d1:13:b9:b8:47:b7:f6:ec:d9:a6:4a:46:df:0c:96:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:1C:2B:5C:91:B0:1C:B0:44:DA:E7:2A:5D:1D:2D:35:AF:3F:64
X509v3 Authority Key Identifier:
keyid:12:97:2D:C4:85:A9:E5:96:DA:D4:0D:A4:E1:01:31:D8:9C:D6:EF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpctxIWp5Zba1A2k4QEx2JzW70U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/IukcK1yRsBywRNrnKl0dLTWvP2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/01e4f9-219c-4c8b-8faa-3543a74cd376/1/EpctxIWp5Zba1A2k4QEx2JzW70U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
75:73:25:ae:84:23:77:c5:f4:94:05:92:33:12:c9:d6:19:c6:
48:8d:a9:5f:48:eb:3b:5f:be:bd:57:29:f0:ce:a9:14:82:39:
57:2e:a9:ff:e8:92:73:8f:71:d2:87:6d:47:11:24:dc:a1:f5:
b3:b3:b7:64:46:22:70:52:3d:5b:1a:3b:4b:65:15:85:02:76:
e7:f0:95:3f:7b:f2:1a:ff:cc:2b:e8:4c:86:e7:a8:6a:da:bb:
f5:52:56:36:76:b3:16:a7:4d:d9:82:ac:49:b9:35:d6:b2:45:
0f:53:f5:f0:ce:16:7d:6a:60:fc:df:d1:1d:14:18:d5:27:88:
63:1c:0e:6b:b9:ae:b3:91:7a:9e:cd:f3:16:36:0d:fd:d8:76:
6d:98:14:f9:e2:a6:03:43:64:82:19:55:be:8b:b2:32:4c:9b:
cf:18:b5:3b:24:70:75:e6:50:8f:bb:24:da:f6:f4:77:d9:47:
0f:3c:89:ef:25:8f:5f:e4:a1:d9:5f:43:20:7d:72:2a:35:5b:
1c:99:63:98:c7:23:4f:fd:20:91:11:cc:ae:20:38:2d:3f:59:
eb:9f:48:6b:db:3a:42:b4:7f:45:f0:da:ec:61:3b:0f:28:da:
8c:5f:0b:b6:c3:07:09:86:e1:5b:5c:58:9c:c6:b2:aa:9a:89:
c5:68:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:31 2025 by rpki-client