Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/hQCP0jtWv29xoUSkEKPjz7f1b1U.roa
File: hQCP0jtWv29xoUSkEKPjz7f1b1U.roa (raw, json)
Hash identifier: 5eGmImxiU3tJehYh/6ZiaH/GlHCCCvPYFqRYJHB7Zuc=
Subject key identifier: 85:00:8F:D2:3B:56:BF:6F:71:A1:44:A4:10:A3:E3:CF:B7:F5:6F:55
Certificate issuer: /CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Certificate serial: 0185E41CD5FA375D9CE4260E2411EBBC2B0C
Authority key identifier: DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/hQCP0jtWv29xoUSkEKPjz7f1b1U.roa
Signing time: Tue 24 Jan 2023 14:09:33 +0000
ROA not before: Tue 24 Jan 2023 14:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 46.253.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:1c:d5:fa:37:5d:9c:e4:26:0e:24:11:eb:bc:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Validity
Not Before: Jan 24 14:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85008fd23b56bf6f71a144a410a3e3cfb7f56f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:8d:ed:6c:2a:1e:42:d3:f0:6d:9f:6c:0d:
5c:8d:23:f4:8f:bd:1f:57:95:ca:3f:f5:2a:f9:f7:
64:58:0c:7c:a4:3f:e7:56:e9:f3:d7:b2:56:cd:10:
83:47:da:79:f8:8c:38:f3:7a:3e:06:45:88:e4:f8:
a5:bb:e7:3e:cc:6c:66:4a:b7:c5:c7:6c:bb:b5:d7:
36:6b:66:90:3c:37:1c:41:c9:81:04:5b:76:2e:72:
1e:e2:cd:c6:91:01:d3:97:98:0f:ab:ec:bc:22:ee:
70:06:9e:ca:af:61:1d:ef:0c:06:24:5c:46:fb:0b:
fe:f5:89:a0:d9:73:ff:87:2c:11:65:00:42:2e:83:
73:93:01:e3:a7:eb:2c:61:d9:b2:c2:1a:f0:9a:d2:
b9:89:e5:3e:c3:dc:9b:9f:bc:2e:12:6f:a4:e9:33:
d2:da:b7:d8:fa:00:58:78:f0:2c:60:50:3f:e4:39:
bf:ad:18:99:8b:bb:b5:56:3e:ce:29:cf:70:b4:bb:
ec:dc:59:73:44:90:ea:88:0d:c5:9a:e8:fd:1c:5d:
6a:95:a6:4c:0b:95:fa:6f:5d:74:e7:54:a1:a9:9a:
94:1a:0d:4c:65:c8:a0:ff:fc:18:1e:a7:0c:ab:ed:
81:4a:98:97:a4:a8:2c:e4:df:66:a3:56:e4:c5:ce:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:8F:D2:3B:56:BF:6F:71:A1:44:A4:10:A3:E3:CF:B7:F5:6F:55
X509v3 Authority Key Identifier:
keyid:DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/hQCP0jtWv29xoUSkEKPjz7f1b1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:db:8e:6e:71:dd:e2:af:af:50:e9:78:2c:bf:ad:73:54:7c:
88:b4:b0:7b:ee:7a:94:53:e5:37:80:21:87:2d:0c:07:05:d6:
b8:04:74:e1:f4:44:4e:5d:e8:85:80:de:aa:12:1a:be:d1:f6:
1a:e0:4a:c3:16:30:78:b3:49:f0:9d:2c:56:ae:d7:54:a1:94:
9d:5b:a7:d6:ef:51:3f:0e:e9:f8:93:cd:e0:08:25:47:45:4f:
44:2e:80:70:06:e5:d1:fb:28:bf:b4:da:22:dd:72:de:4b:11:
de:26:b9:41:ec:ea:b2:f3:49:a8:39:87:de:5f:7d:53:1c:54:
ce:f2:22:47:4d:aa:6e:c1:8f:93:88:7d:ae:35:39:d9:90:30:
5a:47:7c:a9:a9:92:78:12:ad:83:ca:39:b2:6a:66:65:7c:71:
6d:1a:0b:a4:78:89:6e:13:0a:b4:39:96:cf:a0:8b:15:60:d2:
bd:80:f8:69:8d:4d:21:36:28:07:a8:c1:92:58:37:32:17:8a:
a1:5b:bd:70:35:9e:5c:f4:50:60:cb:15:92:19:a8:57:93:bd:
c1:13:0a:58:a0:ae:6b:17:d6:46:54:e3:49:8a:87:54:d0:61:
f5:6f:1d:53:92:f5:80:b7:d6:d2:91:15:f2:42:d3:67:df:09:
43:1c:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:45 2024 by rpki-client on console-fra.rpki-client.org