Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/ZLQlXPHjMtlZrB0Pc69UDYJ_TQk.roa
File: ZLQlXPHjMtlZrB0Pc69UDYJ_TQk.roa (raw, json)
Hash identifier: MiwcfUomFU0ZuFWyEN/XPY5SYhTS1xDQf96bmZcafhw=
Subject key identifier: 64:B4:25:5C:F1:E3:32:D9:59:AC:1D:0F:73:AF:54:0D:82:7F:4D:09
Certificate issuer: /CN=d0f38ffa201e952d65b65b68b2ddfaa278669fb8
Certificate serial: 018964C05B6D1916746641A4BED20C6ABBB2
Authority key identifier: D0:F3:8F:FA:20:1E:95:2D:65:B6:5B:68:B2:DD:FA:A2:78:66:9F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0POP-iAelS1ltltost36onhmn7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/ZLQlXPHjMtlZrB0Pc69UDYJ_TQk.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 46.254.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5b:6d:19:16:74:66:41:a4:be:d2:0c:6a:bb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f38ffa201e952d65b65b68b2ddfaa278669fb8
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b4255cf1e332d959ac1d0f73af540d827f4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:4d:52:8b:2c:90:80:03:b2:5c:ef:33:48:
16:3c:ff:98:e8:b2:62:86:65:36:90:7d:0c:ef:89:
f0:e7:3d:a1:ad:c7:ad:81:6b:4f:67:14:01:9b:21:
0b:7c:f3:72:ea:4f:67:e2:26:46:a8:11:37:39:d7:
ea:b5:4d:79:78:1c:97:fb:55:94:a2:91:5b:34:a0:
1d:1d:00:fc:ee:53:cf:48:c7:23:7e:98:14:f2:d9:
5d:fc:f1:78:04:76:54:b9:d2:0d:dc:bf:ad:a0:66:
30:28:d9:66:59:a4:61:c4:44:02:4d:07:cb:45:53:
38:ad:95:14:b3:44:f5:bd:68:b7:43:a6:51:09:60:
c0:d3:6c:1c:bc:63:1d:94:bd:55:18:38:fb:8c:86:
e0:68:a6:05:f3:05:77:09:81:ce:12:e7:c0:c5:cf:
6d:62:16:75:d9:be:1c:61:a0:f5:ad:a3:40:8d:19:
36:0f:86:4a:1c:4f:23:10:0c:44:3d:f3:64:f8:20:
3f:4a:c9:23:f6:74:b1:c9:29:ec:84:6c:fd:d6:a0:
ed:4d:6e:6f:35:6c:b5:2c:95:c9:a5:10:35:6d:95:
13:c4:d4:5f:18:99:9d:97:2f:1d:06:f0:68:25:11:
51:6f:ff:30:0e:15:a0:d4:a6:ff:a3:6a:7e:52:0e:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B4:25:5C:F1:E3:32:D9:59:AC:1D:0F:73:AF:54:0D:82:7F:4D:09
X509v3 Authority Key Identifier:
keyid:D0:F3:8F:FA:20:1E:95:2D:65:B6:5B:68:B2:DD:FA:A2:78:66:9F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0POP-iAelS1ltltost36onhmn7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/ZLQlXPHjMtlZrB0Pc69UDYJ_TQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a149c-e7df-46e5-91a7-98e4e7afaabb/1/0POP-iAelS1ltltost36onhmn7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.110.0/24
Signature Algorithm: sha256WithRSAEncryption
08:11:5a:86:05:b5:c5:b6:a8:8b:3c:eb:06:98:8f:92:19:4c:
f0:81:25:e0:34:3e:95:02:18:56:5c:9c:23:c6:5b:6e:4f:b6:
43:05:6d:4f:1b:20:3a:7a:dd:47:97:8e:5c:f8:ee:15:b6:62:
22:82:1e:7a:80:8d:d8:95:c4:ae:53:d0:43:f3:04:5e:7f:63:
0d:3b:30:32:8e:e7:e0:62:54:3d:ae:34:6b:c3:78:5a:41:ec:
f4:a4:e7:cb:7a:e4:d4:c4:ea:52:4d:73:de:d7:04:9b:98:d0:
5d:8d:cc:29:2e:6a:50:ed:3e:d2:1d:cb:14:da:6e:d1:2e:9d:
3f:67:1a:4b:f6:b2:d9:dc:d9:89:17:24:92:70:38:d5:ec:3c:
ee:e2:96:9f:37:9b:b6:14:9f:55:c4:e9:06:25:44:9e:82:a1:
15:35:c3:69:d2:08:69:8a:70:3a:39:6b:86:65:e8:62:44:fd:
58:21:33:f9:36:8e:e3:75:c5:a4:25:69:d7:8f:49:d7:aa:1d:
d2:7d:61:57:22:ce:07:61:7c:59:61:2d:dc:e0:81:9b:01:e1:
b2:7a:c5:6e:c7:90:a7:47:f9:31:73:1e:bf:b7:4f:24:f7:99:
aa:11:5f:b3:08:e9:93:a1:a6:af:85:a9:64:78:59:f7:20:c3:
93:39:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:50 2024 by rpki-client on console-ams.rpki-client.org