Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/Rtw7C6APlavD5Q7sIEPJOFBPOgs.roa
File: Rtw7C6APlavD5Q7sIEPJOFBPOgs.roa (raw, json)
Hash identifier: WHeMgB+BLu+dJvKMQNG8w2x37gO4dgVw40/V/Yoyqrg=
Subject key identifier: 46:DC:3B:0B:A0:0F:95:AB:C3:E5:0E:EC:20:43:C9:38:50:4F:3A:0B
Certificate issuer: /CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Certificate serial: 018658DEA99785C6467AD3E69B7EB180D7D1
Authority key identifier: 45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/Rtw7C6APlavD5Q7sIEPJOFBPOgs.roa
Signing time: Thu 16 Feb 2023 06:17:12 +0000
ROA not before: Thu 16 Feb 2023 06:17:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 84.246.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:de:a9:97:85:c6:46:7a:d3:e6:9b:7e:b1:80:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Validity
Not Before: Feb 16 06:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46dc3b0ba00f95abc3e50eec2043c938504f3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:a3:f2:4a:85:3c:d7:1c:d1:95:3c:93:69:
2c:1a:f3:1f:24:bd:e9:24:dd:2c:cc:88:0e:04:f1:
7d:88:55:67:ad:46:52:4f:ff:e2:26:2d:f7:87:1a:
f2:ee:98:eb:09:59:a2:35:10:82:e0:06:2f:40:5b:
f6:69:84:f5:5c:37:be:40:da:74:91:9e:41:24:6b:
d5:8c:88:8d:3c:03:7b:3e:f5:4e:b6:8b:c1:9e:46:
5e:46:9a:ba:df:21:c4:7e:7e:69:e9:9c:12:92:7d:
64:14:4b:e0:9f:3c:88:5c:1e:97:1f:ab:55:c9:21:
0d:f4:63:5a:7c:9a:b0:43:eb:98:5b:b7:3b:d5:2d:
bd:11:b7:91:1e:bd:c5:72:c1:51:11:0f:ca:88:db:
73:08:11:c6:bb:25:d6:aa:e7:66:89:13:23:42:ce:
fb:41:14:73:d3:d3:ea:7c:4a:c0:33:4e:02:e4:cd:
a7:60:34:3f:c6:08:34:98:43:c1:06:72:77:7d:7b:
14:a8:bb:79:24:b8:02:1f:8c:be:fa:1e:30:47:8b:
6c:a6:8f:2f:d5:b5:aa:4e:dd:7c:45:d3:6e:9e:cb:
30:c8:25:42:83:f7:ad:b6:90:8e:b5:a1:c0:2f:6e:
da:4c:ed:86:12:73:8f:1c:cd:39:90:cb:cc:6c:a0:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:3B:0B:A0:0F:95:AB:C3:E5:0E:EC:20:43:C9:38:50:4F:3A:0B
X509v3 Authority Key Identifier:
keyid:45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/Rtw7C6APlavD5Q7sIEPJOFBPOgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/RThaUKYzqh2nFboIoJzS9EAPx4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d6:f8:71:39:34:b1:55:5a:60:b8:d9:68:3a:12:6a:e4:30:
74:39:a8:f3:a6:dd:5c:49:d0:5b:c1:44:bc:9b:24:b3:83:1e:
a5:9c:7b:ba:1d:cf:fc:c7:56:a0:4f:18:cb:99:47:c1:ce:3b:
bd:bb:48:b6:71:44:08:de:b8:c4:f5:4c:2d:52:2e:97:cf:3f:
60:13:b2:f8:af:9d:3a:bc:36:6b:17:a4:f6:14:3a:60:34:8b:
8b:67:b6:61:cd:b2:fe:04:4c:15:df:94:50:42:7b:c2:9c:20:
88:ed:a3:54:1b:ab:f9:95:15:f5:a1:a0:14:7f:e1:8f:ce:4f:
3e:40:14:62:c9:ac:a5:5e:02:d4:20:8b:4c:e6:6a:5f:28:07:
46:37:9a:0f:5d:9b:3c:14:33:41:20:1c:c6:f9:c4:46:c7:a3:
41:4a:e0:b8:27:3c:8a:cc:d2:c7:0b:81:c9:27:55:7c:15:b8:
1f:ad:4a:f6:5e:87:83:29:d4:81:49:a2:96:07:6b:29:44:91:
85:65:c9:10:cc:92:c1:49:69:43:80:a7:34:35:2e:0e:34:b3:
87:77:45:5a:fa:af:cc:80:7b:08:3f:e4:db:83:d3:b5:66:80:
22:92:36:74:e3:19:de:47:5a:7d:02:3c:17:b4:63:b6:b1:71:
8a:3f:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:49 2025 by rpki-client