Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/rhC-P6nm-L147aapw1Pkm0Q-Aq4.roa
File: rhC-P6nm-L147aapw1Pkm0Q-Aq4.roa (raw, json)
Hash identifier: LLzixcfs5nFfb4rz6p49Y0HJ5huKTBvO8pJgxVfwZTM=
Subject key identifier: AE:10:BE:3F:A9:E6:F8:BD:78:ED:A6:A9:C3:53:E4:9B:44:3E:02:AE
Certificate issuer: /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial: 0181CECA8868AA237E6BC4EA54CD4755EC52
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/rhC-P6nm-L147aapw1Pkm0Q-Aq4.roa
Signing time: Tue 05 Jul 2022 14:36:28 +0000
ROA not before: Tue 05 Jul 2022 14:36:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43278
IP address blocks: 212.46.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:ca:88:68:aa:23:7e:6b:c4:ea:54:cd:47:55:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
Validity
Not Before: Jul 5 14:36:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae10be3fa9e6f8bd78eda6a9c353e49b443e02ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:69:77:37:bd:71:be:d5:62:5e:13:b0:df:
00:6d:c2:a7:6e:4e:60:69:c7:5f:03:37:94:29:39:
f6:ce:1f:cd:32:4d:9c:90:89:29:b5:15:1b:0b:b6:
26:ef:ad:5a:30:c0:e7:a5:9b:01:b8:49:75:19:69:
cc:b7:2c:e5:1e:f8:59:b5:49:2a:19:fb:78:39:33:
c1:2b:dc:fe:b8:d8:09:8f:65:c8:58:b3:ce:2d:0c:
8c:b0:fc:03:bf:b9:b3:45:08:b8:c7:ef:03:34:ad:
7c:15:fe:a0:38:a8:45:51:6c:67:4a:c2:f4:37:1c:
1e:f5:cc:46:16:ca:c7:4c:fc:f8:f7:96:25:80:00:
23:6a:f0:83:ec:b7:88:e5:6c:a6:de:c2:e0:39:74:
40:94:b2:d8:be:a9:21:22:fb:2a:51:66:72:14:20:
5e:15:93:6e:86:c6:38:8c:fe:df:d5:be:23:0e:31:
bc:48:5e:3d:24:35:c2:99:ff:72:76:0c:3c:56:ca:
7e:40:6e:b7:27:be:2c:53:07:64:58:8f:9d:31:46:
17:14:8d:ef:66:73:28:4d:93:06:dd:db:d7:89:7b:
40:b1:fb:79:d8:0b:ce:c3:76:51:7b:13:ea:e1:41:
fd:e2:b2:f8:fa:d6:4a:d1:dd:6a:38:50:5a:81:8b:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:BE:3F:A9:E6:F8:BD:78:ED:A6:A9:C3:53:E4:9B:44:3E:02:AE
X509v3 Authority Key Identifier:
keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/rhC-P6nm-L147aapw1Pkm0Q-Aq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
25:da:0c:e3:f3:3e:45:96:84:5a:dc:29:de:3d:4f:5f:42:2e:
d0:e7:7c:27:25:de:34:31:6e:7d:3e:c7:fb:cc:6e:64:b8:47:
27:b2:04:96:6b:de:05:3a:ba:fd:98:2f:fd:35:27:66:fc:07:
8e:82:6c:ab:0b:fb:cf:6c:c5:3a:ec:d0:9a:79:ca:2d:cd:39:
86:cf:67:44:95:02:3c:c8:52:e4:b0:92:af:8b:4f:55:72:4e:
f9:7e:58:78:cf:c4:10:ba:6e:85:86:48:33:ed:39:b6:f7:7c:
bb:45:8c:c0:58:7e:3f:00:b9:59:59:ac:f0:a2:b8:62:c0:dc:
d4:5d:47:d2:4c:6b:1c:4b:75:70:22:6e:ef:3e:37:45:c1:2b:
12:6a:09:e4:77:a0:f5:8c:86:41:3e:d8:4e:09:7a:6b:22:96:
69:d1:f8:2c:04:63:ca:4b:97:bb:a3:1b:d3:95:6a:05:a7:e0:
17:6b:ad:ab:28:7e:41:1a:28:64:9c:be:ce:0b:1b:75:45:f8:
3d:bc:15:89:d8:c3:c3:20:e5:f2:3b:c8:ad:4a:9a:a9:d3:31:
5e:e3:68:f1:61:78:2e:14:13:bb:0e:5d:4d:97:e8:9b:d5:7d:
b9:63:95:83:b1:61:e1:0d:a5:16:12:c0:ee:fe:4d:70:fb:90:
48:87:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:45 2024 by rpki-client on console-fra.rpki-client.org