Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/UnBsvKJdzFZ3-JnZiACaRSaVGQY.roa
File: UnBsvKJdzFZ3-JnZiACaRSaVGQY.roa (raw, json)
Hash identifier: /sRsp5hp/BWEVSbUKRbUrnQB78ZJYwFzR6lAzLJN1Kw=
Subject key identifier: 52:70:6C:BC:A2:5D:CC:56:77:F8:99:D9:88:00:9A:45:26:95:19:06
Certificate issuer: /CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Certificate serial: 018779E372788F52B6B9822C34CDE67EBA0F
Authority key identifier: 45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/UnBsvKJdzFZ3-JnZiACaRSaVGQY.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.246.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:72:78:8f:52:b6:b9:82:2c:34:cd:e6:7e:ba:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52706cbca25dcc5677f899d988009a4526951906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:07:b5:a0:bc:89:2a:a0:b5:eb:bf:07:d2:
5d:d8:fa:ff:a5:e8:b3:e1:58:b2:ef:21:f7:d3:4b:
cc:3e:ba:cc:f5:66:3c:1f:d1:22:49:d2:ab:5e:d1:
35:2b:89:18:6e:42:a7:7b:06:47:59:8b:10:e3:ed:
f5:bc:97:16:a6:d5:57:a6:94:10:3f:81:9f:a3:ea:
f0:39:ef:e8:4e:24:28:dd:e1:8b:62:18:43:5f:cc:
67:fc:68:f3:b5:c3:45:15:8a:bc:4e:22:45:b5:50:
83:9e:ce:c7:46:d8:64:29:55:51:06:0c:53:ba:ba:
58:00:0c:99:9f:54:50:8e:06:7b:42:ec:35:6c:c8:
9d:34:f7:c5:f1:d5:eb:93:f9:db:77:7a:2d:33:5b:
4e:be:81:8c:88:28:aa:37:22:ae:3e:4a:74:1d:c6:
05:d7:62:f0:d7:61:e8:cb:95:0e:3e:9b:ec:0c:a1:
76:1e:39:07:ac:2b:ea:d1:5a:6e:c1:1b:3b:e2:f9:
70:cb:c0:bd:4d:4b:7c:3f:94:d8:29:f3:07:ba:ce:
0f:18:fd:01:36:48:b4:82:6c:1a:b4:d8:44:a1:25:
73:59:b5:1b:73:f3:70:a9:d0:ef:89:45:49:5d:65:
cb:be:8e:f1:b4:69:dc:25:8d:68:07:fc:e9:2a:c9:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:6C:BC:A2:5D:CC:56:77:F8:99:D9:88:00:9A:45:26:95:19:06
X509v3 Authority Key Identifier:
keyid:45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/UnBsvKJdzFZ3-JnZiACaRSaVGQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/RThaUKYzqh2nFboIoJzS9EAPx4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.83.0/24
Signature Algorithm: sha256WithRSAEncryption
75:05:6d:e9:45:ec:b3:0f:78:09:65:03:c2:b8:f5:89:dd:46:
1b:97:c6:a1:ff:36:a4:21:aa:75:02:e8:f4:08:7f:42:5d:5d:
9f:50:50:76:55:87:49:e9:8b:37:f6:cf:8a:e7:fa:9f:e8:7a:
bd:a8:0b:77:aa:35:8f:90:50:11:80:b1:59:62:2c:be:a1:4f:
e9:12:92:6a:eb:9b:29:d2:c3:16:6e:cc:26:02:c5:ec:ee:48:
02:69:04:dc:ed:a0:41:f7:9a:10:42:ab:29:5b:7f:ab:a2:bc:
29:0e:5d:46:c0:91:ee:8e:0a:e0:5f:26:84:c4:99:7f:b8:a8:
32:f5:67:33:21:46:8f:99:a8:21:6b:22:3d:31:f2:84:a7:18:
89:e6:82:f2:a6:29:ae:43:3a:87:41:8d:79:d9:73:b3:e8:a3:
c5:13:48:7c:f7:9d:ea:76:55:3e:b2:f3:9e:97:82:d0:12:32:
d1:1f:7c:17:75:e4:b5:44:fa:13:9c:e9:90:b8:77:03:a8:05:
45:ad:a6:2c:40:d8:ef:79:f8:61:7b:3e:5d:62:a6:94:4d:da:
79:61:9e:40:6e:e8:1d:8e:2d:3d:f1:d1:56:5b:2e:d7:12:6d:
f5:72:c7:d6:0a:44:89:90:8e:81:bb:86:48:e2:2c:3b:50:4c:
59:69:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org