Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/erK90scMdm8x41TeeIUWBbEZU24.roa
File: erK90scMdm8x41TeeIUWBbEZU24.roa (raw, json)
Hash identifier: +EKUrh+3O5OGO6/d0aFs/6T2wj5iVzAVP+L9B9Sbm6Q=
Subject key identifier: 7A:B2:BD:D2:C7:0C:76:6F:31:E3:54:DE:78:85:16:05:B1:19:53:6E
Certificate issuer: /CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Certificate serial: 018572B428B26707C1A7434BE8036F7772CE
Authority key identifier: 45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/erK90scMdm8x41TeeIUWBbEZU24.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 84.246.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:28:b2:67:07:c1:a7:43:4b:e8:03:6f:77:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45385a50a633aa1da715ba08a09cd2f4400fc784
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab2bdd2c70c766f31e354de78851605b119536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:00:8e:b4:cf:3e:b2:9b:9e:79:45:ee:b1:
9e:b9:ae:f0:16:b7:02:02:c2:11:17:e2:88:f2:25:
24:63:9f:70:24:b4:fd:c3:c9:d5:4d:4a:b1:7a:b2:
56:0f:52:b6:75:1c:24:cb:72:03:fe:56:c5:85:b7:
0c:f3:42:f8:70:98:b2:f0:d5:35:26:68:1c:fd:52:
dc:3e:47:07:1d:48:1d:1d:fa:a6:2a:b0:1b:12:4d:
96:7a:a8:5d:94:1d:8c:30:35:96:f8:18:cb:f2:be:
6a:46:d2:ce:05:88:4c:90:47:86:0a:8a:f2:c8:47:
6f:0b:27:7c:49:23:ff:15:22:f8:15:dc:b8:90:ad:
93:1e:b2:49:ad:61:f5:2f:94:11:42:c5:6a:a0:3c:
86:df:a4:5b:45:d4:46:c5:15:ca:86:e8:ae:a2:13:
53:a1:47:6b:48:f5:c3:89:6a:c0:28:3f:bc:57:69:
12:fa:db:f2:a8:06:43:81:e7:b7:eb:ed:37:c5:1b:
ff:92:20:0c:ce:b2:09:ed:94:ed:66:d5:c0:57:2a:
cd:36:3b:56:5a:74:7c:ca:4a:3b:eb:56:11:24:a1:
2d:5d:10:e0:47:7b:ca:92:15:58:93:c3:8b:9f:7f:
03:e5:3c:90:3b:9e:9c:34:94:a7:f0:d9:25:d3:ac:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:BD:D2:C7:0C:76:6F:31:E3:54:DE:78:85:16:05:B1:19:53:6E
X509v3 Authority Key Identifier:
keyid:45:38:5A:50:A6:33:AA:1D:A7:15:BA:08:A0:9C:D2:F4:40:0F:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RThaUKYzqh2nFboIoJzS9EAPx4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/erK90scMdm8x41TeeIUWBbEZU24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d2230-cdd3-4275-8e72-d96777cbf2d6/1/RThaUKYzqh2nFboIoJzS9EAPx4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.83.0/24
Signature Algorithm: sha256WithRSAEncryption
62:95:21:c9:eb:e8:84:1c:93:0f:90:1b:88:74:5d:d8:99:f5:
fc:0b:7e:92:80:50:5c:f9:46:bd:a6:2d:85:75:d4:80:9f:0e:
f1:12:72:14:fa:f5:25:ee:3a:9c:bf:57:6e:fc:74:8e:68:1b:
20:c7:ef:e6:0c:6e:78:36:65:d9:fc:55:69:b3:35:4c:5f:4c:
0a:9a:8a:1d:79:af:40:23:43:7b:85:b9:0d:04:c5:6c:f2:75:
ca:01:b5:4b:30:99:44:a8:04:1f:01:00:ec:30:4e:d9:9f:63:
a2:b4:08:a2:59:bd:90:3c:5c:17:08:2f:a0:80:0b:3e:7e:92:
7f:d8:76:bb:ad:6b:84:7f:7e:4f:03:2b:6e:d8:01:3d:71:bd:
91:86:a1:88:5f:4f:b6:5a:67:c9:d4:95:39:81:96:2e:2e:bd:
ab:47:ca:f1:ae:ae:4a:f8:b5:e9:56:7b:60:14:7a:9e:44:cf:
a6:68:cc:c0:88:33:a1:1d:f0:fb:7b:1f:4b:fe:f9:c0:4b:9c:
d4:8a:b6:42:42:66:34:05:10:25:c3:9a:6c:c1:f5:3c:43:60:
09:b2:33:ab:b5:8d:6c:79:39:f9:1e:dd:ae:52:ae:f9:14:d7:
f2:28:31:a4:75:7e:76:2d:ab:23:42:2b:7b:2e:eb:27:be:95:
6b:47:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:56 2024 by rpki-client on console-ams.rpki-client.org