Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/KWw4RMdT1GGgoq491sUxpQY1wkU.roa
File: KWw4RMdT1GGgoq491sUxpQY1wkU.roa (raw, json)
Hash identifier: o/cB5M96ZRlzJFlypjjFUst4HJEohN3SR5SMBhFG+/w=
Subject key identifier: 29:6C:38:44:C7:53:D4:61:A0:A2:AE:3D:D6:C5:31:A5:06:35:C2:45
Certificate issuer: /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial: 8087
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/KWw4RMdT1GGgoq491sUxpQY1wkU.roa
Signing time: Fri 04 Mar 2022 00:20:08 +0000
ROA not before: Fri 04 Mar 2022 00:20:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49612
IP address blocks: 212.46.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32903 (0x8087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
Validity
Not Before: Mar 4 00:20:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=296c3844c753d461a0a2ae3dd6c531a50635c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:51:9b:25:6e:08:bd:d9:45:25:75:a5:d8:
1f:db:1a:1d:47:65:f6:d1:40:cb:61:0c:11:bc:6f:
d2:1a:57:3f:38:67:1a:ea:57:02:82:25:fe:54:93:
0f:05:82:19:bc:a6:12:5c:96:71:3c:2b:0e:ac:b2:
06:06:fd:f2:2f:48:6d:df:36:81:74:9a:53:f8:d7:
6f:8c:b8:cd:99:67:40:d8:50:cc:e3:81:a6:10:ce:
de:9c:f7:51:6f:f4:4a:fd:fa:5d:d6:88:f5:9d:ca:
63:9b:1f:a9:dc:44:7a:61:c1:32:8c:23:69:03:e7:
1a:a2:6b:61:a9:6e:f7:16:72:30:30:9b:5f:31:61:
d9:58:6a:9d:cf:41:7c:86:fd:54:8f:e2:f1:c7:db:
e6:ee:15:80:95:32:48:fd:15:ac:77:fc:0f:b5:f8:
b4:fc:f6:c1:38:99:3a:77:e4:23:82:29:8a:5a:2d:
4b:d1:cd:c5:13:e7:82:7a:1c:55:b2:6b:1d:2c:86:
1f:f1:1f:18:21:15:36:ab:ef:b3:c0:f1:ef:a0:20:
d4:9e:52:76:5c:02:95:3c:cc:ca:33:05:24:6c:1d:
8b:26:01:e4:e1:92:90:d4:f0:bd:e7:7a:cb:2c:9a:
c2:c9:c8:e8:94:b2:45:91:74:7e:83:2f:de:e4:dd:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:38:44:C7:53:D4:61:A0:A2:AE:3D:D6:C5:31:A5:06:35:C2:45
X509v3 Authority Key Identifier:
keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/KWw4RMdT1GGgoq491sUxpQY1wkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b7:51:fd:96:af:16:c0:7c:77:2d:0a:7a:62:b0:b6:3e:83:
28:0e:4c:72:67:b3:ec:f8:c5:2f:c4:cb:fb:66:7b:ed:ff:47:
6a:46:ab:7c:50:ef:dd:d5:78:7c:97:e3:32:63:d0:a0:e3:13:
3e:0e:3f:b5:6d:60:75:2a:d7:eb:95:91:88:d8:7e:47:50:2d:
f7:a8:6a:75:be:85:3d:3f:bb:cb:28:3a:1d:a4:a0:57:79:05:
3e:38:52:82:1d:b8:4c:c9:af:7b:8d:b2:90:71:ea:ef:27:eb:
f2:15:30:ae:07:f3:5a:95:f1:36:98:13:e5:a4:9a:3c:5e:18:
f2:97:89:ef:6a:71:64:ff:9d:93:f6:c7:80:6e:39:4b:e5:5e:
2f:79:ae:aa:23:c8:7a:b7:05:8a:75:e9:6a:9e:66:48:00:70:
77:08:6b:b0:79:eb:44:d4:b1:4a:3e:79:bb:56:0a:82:1d:f2:
3c:9c:10:55:ce:7a:07:4f:b3:50:ba:66:ae:78:19:83:a6:89:
58:c3:95:10:b6:47:b3:75:4d:da:1b:84:85:24:f4:86:5e:fb:
1f:56:0d:8f:a0:5d:33:23:64:8e:8c:37:3d:bd:9e:9c:32:b9:
38:2e:10:ad:98:20:97:7b:ff:7c:ed:eb:54:e3:c5:1a:d8:54:
37:30:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:22 2024 by rpki-client on console-ams.rpki-client.org