Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/S9pvD30FqGZIJ2tIJPqQnk1S8Ug.roa
File: S9pvD30FqGZIJ2tIJPqQnk1S8Ug.roa (raw, json)
Hash identifier: hsx31GgtcPQvRA2OU3BhrEmFMJ9oUAv8bCIUKpvBqvM=
Subject key identifier: 4B:DA:6F:0F:7D:05:A8:66:48:27:6B:48:24:FA:90:9E:4D:52:F1:48
Certificate issuer: /CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Certificate serial: 018570E766DE17EAC01784EE683299D83A90
Authority key identifier: 6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/S9pvD30FqGZIJ2tIJPqQnk1S8Ug.roa
Signing time: Mon 02 Jan 2023 05:14:51 +0000
ROA not before: Mon 02 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5524
IP address blocks: 46.231.40.0/21 maxlen: 21
2a03:8100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:66:de:17:ea:c0:17:84:ee:68:32:99:d8:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Validity
Not Before: Jan 2 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bda6f0f7d05a86648276b4824fa909e4d52f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:99:13:e5:3a:4c:d4:18:9b:4b:27:34:38:
af:1f:2d:f3:7f:a2:38:da:f5:88:3f:8c:83:2b:83:
ea:7c:04:07:6d:98:96:99:a5:53:c8:d5:95:39:46:
9c:58:91:51:92:9b:c2:e3:d2:1d:54:fd:29:ce:d0:
01:ed:7f:3d:b7:b2:82:74:b3:83:3d:64:de:83:fe:
a1:01:af:2d:1c:fa:fb:59:f8:8a:d1:49:d4:24:9c:
18:d8:4a:b8:a6:77:06:b1:0f:62:f5:30:2e:c5:21:
17:75:16:0b:f0:de:7d:19:93:0f:26:d3:cf:93:c7:
06:68:fe:b8:f5:2c:84:28:63:b8:37:b1:91:8a:bc:
d3:29:0b:44:3e:28:c3:6a:ee:37:a7:c4:48:61:71:
e9:8c:96:84:de:eb:13:02:80:6a:7d:b3:a1:79:28:
d8:95:0b:93:67:b4:41:1b:d0:a1:92:8c:0a:f0:66:
e5:bb:44:7f:3e:14:9a:82:b8:c0:36:0e:f0:8d:62:
b0:35:f9:4e:67:30:8d:d0:3e:c6:ac:f8:c7:da:3b:
98:ff:54:82:4d:e8:c1:d9:0c:59:c3:6f:11:5b:2d:
3d:9e:0a:5b:14:1a:22:cb:e9:a9:62:fc:4e:82:70:
6c:0c:4f:fb:da:f0:29:70:1c:f7:d7:68:44:4e:f7:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:6F:0F:7D:05:A8:66:48:27:6B:48:24:FA:90:9E:4D:52:F1:48
X509v3 Authority Key Identifier:
keyid:6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/S9pvD30FqGZIJ2tIJPqQnk1S8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/bdV5eOXS8mVMl_3rwNVHzPtYbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.40.0/21
IPv6:
2a03:8100::/32
Signature Algorithm: sha256WithRSAEncryption
77:4e:2f:be:45:62:05:e4:05:73:5b:f3:3b:38:7e:ee:bb:49:
ae:68:0e:e6:54:18:98:90:a8:8b:4b:ac:5d:62:d9:35:fa:13:
98:09:31:0e:97:23:be:a6:b9:9b:72:a3:fa:9d:b9:17:3a:bc:
97:08:91:0e:22:4c:c9:6f:13:c8:3a:bf:fa:a7:72:83:b6:a9:
a1:36:41:25:2f:43:fa:02:e8:2a:f4:b6:4e:51:5a:4d:6a:a3:
98:e8:01:99:2c:37:48:56:eb:26:1a:0c:7f:f1:88:a9:ae:25:
b6:f4:de:ec:ef:ab:76:9b:46:cf:bf:be:a7:5b:fd:e5:68:15:
92:86:b1:b2:03:5f:47:d9:4b:07:e7:68:dd:b3:0b:aa:34:fa:
37:42:79:00:a0:fb:0c:4f:31:7a:c3:0e:e9:10:fd:6d:cb:f2:
f3:af:92:fd:04:e7:5f:08:30:cd:d1:43:11:65:6c:9e:d9:f6:
33:d3:c7:0c:5b:56:ee:a8:2e:54:73:4a:71:4a:9b:b2:75:a0:
bc:46:ee:08:86:52:c7:c6:15:57:a2:09:30:c5:dd:bf:f7:2b:
9b:e7:c9:11:e9:4b:25:9b:ac:10:b9:cc:51:6a:25:d4:60:32:
46:af:76:53:f3:97:5d:22:88:15:de:2f:ca:c3:84:28:ce:ee:
2c:16:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:16 2024 by rpki-client on console-ams.rpki-client.org