Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/wMS59AvfHazGCPhApFyw1v4V4vk.roa
File: wMS59AvfHazGCPhApFyw1v4V4vk.roa (raw, json)
Hash identifier: ziElmZrwZ7W7GDcmoSwwH3IC6MDsUS0vD/fYPqwqgpI=
Subject key identifier: C0:C4:B9:F4:0B:DF:1D:AC:C6:08:F8:40:A4:5C:B0:D6:FE:15:E2:F9
Certificate issuer: /CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Certificate serial: 018200F284F8314CF049773C56243FF524E3
Authority key identifier: 6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/wMS59AvfHazGCPhApFyw1v4V4vk.roa
Signing time: Fri 15 Jul 2022 08:21:09 +0000
ROA not before: Fri 15 Jul 2022 08:21:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6819
IP address blocks: 46.243.40.0/21 maxlen: 21
2a00:9a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:f2:84:f8:31:4c:f0:49:77:3c:56:24:3f:f5:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd57978e5d2f2654c97fdebc0d547ccfb586db9
Validity
Not Before: Jul 15 08:21:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0c4b9f40bdf1dacc608f840a45cb0d6fe15e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:1d:b9:9c:52:a4:8d:20:4d:61:85:a3:a3:
12:28:18:72:5c:9b:34:b6:df:2f:6b:10:70:20:79:
dd:74:e0:ca:f1:bd:41:74:31:85:02:de:63:42:a5:
ca:0e:83:ef:ed:40:4d:0b:ed:c9:89:89:04:a9:b4:
8f:74:32:f1:72:ee:61:06:df:80:4e:fc:1d:34:2b:
79:61:51:14:24:a9:e1:c0:65:36:11:91:1d:43:de:
a2:dd:07:03:09:c4:7c:6e:29:f5:bb:d5:c2:57:5c:
4b:8f:2a:dd:ba:73:4e:71:85:4d:a8:4e:62:b3:57:
3e:19:d5:72:24:b5:b7:1a:9e:b6:ed:9b:8a:ab:5d:
82:47:84:f5:b6:1a:c0:5b:83:9c:59:35:4d:81:0c:
f0:1d:cb:2b:2e:76:5a:44:0d:ce:36:90:c8:a9:0c:
27:7b:47:1e:cd:13:e0:59:89:f4:a7:c1:2f:be:4f:
16:c7:30:c6:2f:cc:c0:94:75:fa:c5:bb:e9:86:5f:
53:cf:b4:88:6c:2b:fe:1d:bb:c3:14:ac:e1:4f:64:
5e:92:0b:9f:75:f7:d1:ca:0d:3d:ed:e3:77:ae:6a:
95:66:d2:16:46:02:3f:78:74:0f:a3:49:aa:de:d1:
2c:31:56:ab:3f:66:63:cf:c0:51:c2:f5:30:1c:13:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C4:B9:F4:0B:DF:1D:AC:C6:08:F8:40:A4:5C:B0:D6:FE:15:E2:F9
X509v3 Authority Key Identifier:
keyid:6D:D5:79:78:E5:D2:F2:65:4C:97:FD:EB:C0:D5:47:CC:FB:58:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdV5eOXS8mVMl_3rwNVHzPtYbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/wMS59AvfHazGCPhApFyw1v4V4vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/014924-5659-4a34-881c-1a4cc9c96170/1/bdV5eOXS8mVMl_3rwNVHzPtYbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.40.0/21
IPv6:
2a00:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
90:42:dc:ee:39:16:41:20:09:1f:31:53:6b:ed:0d:64:76:ed:
bf:c1:ed:bf:e1:01:59:97:3c:54:cf:d6:7a:00:02:ea:a5:f3:
f5:4b:be:c1:83:0b:e9:69:80:5f:59:65:18:fc:08:a3:f7:4c:
b7:53:bc:de:eb:c4:f1:52:63:7e:f1:73:53:03:83:25:e0:be:
92:ad:53:42:28:db:d5:3b:e9:6a:c5:54:4a:d8:4c:34:1b:6b:
93:00:91:72:a0:7d:46:c4:eb:f1:71:a3:d9:a7:a6:8d:09:69:
a9:7c:8d:e5:82:d0:ac:7d:e7:a7:3a:ce:02:77:5a:6c:9f:91:
a1:37:a2:47:15:6b:aa:0a:8f:5d:7a:b6:ff:bf:6e:90:43:1e:
bb:df:8e:47:a1:ae:21:ae:dd:94:98:00:a8:f8:b8:f7:88:b9:
70:3d:dc:40:57:c0:e6:b5:5b:e6:64:7e:b5:f1:89:68:45:15:
21:dd:e0:58:27:c6:3d:1b:03:0b:6b:6d:1b:d9:a6:b3:4e:5d:
9b:8f:8c:43:f8:10:5e:4d:b8:47:43:66:09:59:1a:32:99:c5:
24:91:3e:99:af:db:13:b3:29:8b:2f:7f:28:56:64:dd:c4:54:
55:2f:b3:64:0d:71:21:1b:5d:1d:0c:0f:7a:0d:d0:9e:ec:78:
b4:77:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:16 2024 by rpki-client on console-ams.rpki-client.org