Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/BskfCL0mnyq1vxW4axtUmc16dT0.roa
File: BskfCL0mnyq1vxW4axtUmc16dT0.roa (raw, json)
Hash identifier: u+H+o0AANNyRAMwSzizprHaT+23a0GzG8OuPeTFElYo=
Subject key identifier: 06:C9:1F:08:BD:26:9F:2A:B5:BF:15:B8:6B:1B:54:99:CD:7A:75:3D
Certificate issuer: /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial: 018B9642B5B89B2A69780DDA8CC4EE0AA15C
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/BskfCL0mnyq1vxW4axtUmc16dT0.roa
Signing time: Fri 03 Nov 2023 17:37:16 +0000
ROA not before: Fri 03 Nov 2023 17:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 79.110.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:42:b5:b8:9b:2a:69:78:0d:da:8c:c4:ee:0a:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Validity
Not Before: Nov 3 17:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c91f08bd269f2ab5bf15b86b1b5499cd7a753d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:07:f5:6e:b8:c3:cc:eb:90:1f:1b:80:99:
14:08:b4:cd:1a:f0:54:ae:0d:43:43:e8:55:aa:ea:
e0:91:83:39:68:41:4b:61:b9:6d:b1:0d:90:51:25:
89:1f:e9:9e:87:30:71:de:e1:bd:97:e6:d3:cf:e6:
a3:33:34:93:c0:dd:b8:b1:d0:1f:f6:1f:2d:9c:fc:
60:48:62:ba:ec:db:c6:1c:75:46:56:cd:f7:d5:18:
c7:30:e9:77:8c:1b:c5:68:53:a0:2d:a1:11:68:71:
05:a7:44:73:0e:6d:c4:5b:96:83:8f:42:59:db:b9:
98:4b:04:80:27:26:b6:b3:e1:44:54:2f:ba:e7:97:
c5:68:85:60:e0:0e:6e:5a:2b:70:b7:a4:f7:78:c8:
b6:d4:30:85:99:8a:f4:e9:56:a9:fd:de:0b:e7:af:
96:ed:a9:44:f9:05:e1:18:0f:53:a2:83:26:27:6c:
78:47:f3:4e:61:0c:0f:c7:b5:22:4a:ba:14:86:b9:
a2:42:93:66:7e:4c:d5:bb:0b:50:2b:5d:2d:c9:85:
11:49:e5:4a:0e:66:da:97:8a:23:75:dd:bd:c6:87:
e0:d2:bd:0b:c7:97:00:b1:cd:82:78:94:a8:a8:01:
a5:e6:7e:77:93:11:c5:97:5c:d9:ac:45:21:89:50:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:1F:08:BD:26:9F:2A:B5:BF:15:B8:6B:1B:54:99:CD:7A:75:3D
X509v3 Authority Key Identifier:
keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/BskfCL0mnyq1vxW4axtUmc16dT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:66:45:c5:5c:47:1d:06:18:ab:02:5d:a4:a4:1b:af:a1:67:
46:84:b4:61:db:1b:c9:ef:c9:92:44:31:08:e9:2f:69:be:29:
ab:69:c4:54:6b:7f:21:91:73:5e:b4:b1:e2:3b:19:f8:18:43:
f3:93:2d:8f:95:b5:9c:13:3b:5a:dd:2a:f3:af:47:d1:4f:b1:
bd:ea:0c:a0:4a:f8:cb:91:13:ba:6e:ad:4b:14:c0:d3:ae:2b:
b0:f5:63:af:66:59:06:63:55:07:85:8c:52:10:30:01:72:fa:
cd:c9:9b:39:0d:e2:9f:c4:26:d5:67:36:2e:0e:b8:5b:d9:64:
70:ad:1c:e1:13:f6:2f:5a:06:a0:29:74:43:36:b0:e1:ca:7f:
e1:9e:18:82:78:59:0c:e8:d7:31:97:45:dd:61:d4:7c:32:65:
76:17:1b:b7:47:60:5a:33:19:96:19:9c:6a:74:1e:bd:95:71:
e8:f2:39:95:f7:de:14:c0:ff:93:1b:f4:89:fb:78:78:73:17:
26:ec:62:bc:80:8e:aa:3a:ed:7e:fa:2f:57:f5:26:51:67:e1:
cc:98:2e:ca:94:31:01:ad:9b:66:9b:89:ad:42:59:ec:f7:96:
b9:93:94:32:0b:c0:cb:c7:58:0a:91:54:f2:32:4f:22:f9:ec:
f2:06:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org