Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/vpwbRis3wZO8Ic6fLLVEUn0dY-E.roa
File: vpwbRis3wZO8Ic6fLLVEUn0dY-E.roa (raw, json)
Hash identifier: COateVG9Fpod6McGQ5D3yH000V5iASafhN/jxVy4H88=
Subject key identifier: BE:9C:1B:46:2B:37:C1:93:BC:21:CE:9F:2C:B5:44:52:7D:1D:63:E1
Certificate issuer: /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial: 018CC56EBB17FF5435480B5D08400195D38F
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/vpwbRis3wZO8Ic6fLLVEUn0dY-E.roa
Signing time: Mon 01 Jan 2024 14:30:17 +0000
ROA not before: Mon 01 Jan 2024 14:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50267
IP address blocks: 212.46.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:bb:17:ff:54:35:48:0b:5d:08:40:01:95:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9c1b462b37c193bc21ce9f2cb544527d1d63e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:57:ea:6b:8d:aa:77:55:4a:bc:79:38:9e:
d3:ae:ba:98:2f:a9:91:b3:b3:3d:42:da:07:a6:51:
80:31:80:6e:d1:50:71:b8:4c:77:68:98:67:69:41:
c4:1d:88:72:55:31:e2:d7:4f:6c:fc:d8:4a:b9:fe:
f7:db:56:ef:13:d8:92:a2:81:4e:32:cc:2d:ae:e8:
ed:25:eb:65:f0:c4:8e:fc:56:84:11:08:dc:0b:a8:
7a:c5:5a:05:78:f8:91:c2:29:b3:89:c9:ed:54:de:
dc:41:2a:8c:90:05:49:db:86:2b:10:b6:78:40:c2:
8c:3c:f8:94:75:22:52:91:f4:57:55:6b:73:f2:20:
43:9b:35:78:23:e3:eb:4c:e3:d1:61:4f:f2:42:c0:
5e:45:91:f8:ff:7d:e9:de:cd:fc:63:72:f2:fa:87:
7f:e5:4f:d0:5e:61:94:3f:0e:9b:5c:b7:1e:8c:ad:
53:db:c0:ed:98:a3:77:93:d5:3d:93:f0:7f:8d:67:
04:20:d5:7f:4b:ed:05:6d:77:95:bd:9a:aa:e5:76:
75:17:9a:d0:2d:b2:6d:66:a9:5d:b0:c1:e7:34:77:
06:21:b9:71:c7:d4:76:03:ea:a8:53:6d:6d:77:f5:
32:de:bf:f9:b8:c2:29:5e:fe:e8:b3:aa:12:e9:b3:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:1B:46:2B:37:C1:93:BC:21:CE:9F:2C:B5:44:52:7D:1D:63:E1
X509v3 Authority Key Identifier:
keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/vpwbRis3wZO8Ic6fLLVEUn0dY-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a1:1f:01:4c:13:48:74:f8:a1:fb:cc:3e:46:ff:21:0c:c9:
44:d6:dc:a9:fd:94:ad:20:7e:47:3b:77:db:99:c9:ec:3e:72:
67:f6:fb:0f:d3:0a:f0:2b:e6:d4:ef:be:c3:93:f3:66:7e:04:
28:ec:de:e1:10:c2:9f:7d:f9:c2:b4:3c:c8:5d:33:71:d7:a6:
d3:ed:1b:b9:ad:83:f4:5e:45:e8:22:af:49:11:f2:97:79:89:
df:f5:50:c0:16:a4:d8:01:89:63:cf:cc:cf:21:77:7b:27:62:
e2:fe:18:a0:22:54:2c:6b:67:1c:45:1e:4a:aa:9d:8c:fe:c2:
83:51:30:68:43:6e:5e:b8:bc:b6:09:ff:08:da:d8:0f:69:75:
89:9b:6a:48:9e:8a:4a:5c:9e:dd:d1:0f:5b:19:da:80:af:cd:
66:ad:ff:c1:0d:8b:74:72:84:f8:2a:0f:4d:92:72:68:32:73:
78:cf:bf:ef:99:46:14:f7:ad:0d:a3:90:70:63:63:f2:cc:5e:
24:d3:66:1a:27:90:cc:9f:fd:d1:20:07:07:5d:68:82:a7:9f:
06:43:02:ba:8c:70:0f:57:36:7c:56:75:7c:b4:f6:ca:58:12:
79:60:10:f2:f3:eb:45:ad:f2:2e:3c:c1:64:f1:35:5e:c8:94:
78:a4:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:22 2024 by rpki-client on console-ams.rpki-client.org