Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/U514nZnhRUyyHC8vSPtgtOhNZEg.roa
File: U514nZnhRUyyHC8vSPtgtOhNZEg.roa (raw, json)
Hash identifier: 5PAn7Y/JxBciFslUakS2Dlgw/O0u/H3I0q+Q192Ony4=
Subject key identifier: 53:9D:78:9D:99:E1:45:4C:B2:1C:2F:2F:48:FB:60:B4:E8:4D:64:48
Certificate issuer: /CN=ef4b46ab4b83f5d1a22248b2ac26414388091d33
Certificate serial: 01544CA6
Authority key identifier: EF:4B:46:AB:4B:83:F5:D1:A2:22:48:B2:AC:26:41:43:88:09:1D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70tGq0uD9dGiIkiyrCZBQ4gJHTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/U514nZnhRUyyHC8vSPtgtOhNZEg.roa
Signing time: Sat 01 Jan 2022 12:04:38 +0000
ROA not before: Sat 01 Jan 2022 12:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 46.254.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22301862 (0x1544ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4b46ab4b83f5d1a22248b2ac26414388091d33
Validity
Not Before: Jan 1 12:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=539d789d99e1454cb21c2f2f48fb60b4e84d6448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:7d:5f:57:77:c9:97:50:d1:60:90:17:3f:
67:be:a8:27:0c:be:d5:08:b9:b7:16:48:3f:6a:eb:
7f:c2:31:ee:fb:1b:cd:d7:c4:dc:26:7b:cb:89:4a:
bf:f8:a5:96:c6:a5:68:70:cc:0e:b1:b7:8a:57:66:
d7:b0:8c:ba:86:1e:99:ed:03:9f:cc:f4:5b:43:bf:
98:6b:d1:58:b9:67:79:ce:47:77:99:e7:90:d1:8d:
34:5b:2e:9b:4a:fd:5d:17:7b:03:a8:52:bc:61:76:
34:1e:d0:7e:3c:7b:79:32:fe:3f:33:5f:e6:f5:a2:
a6:7c:d8:03:fa:33:ab:27:37:e0:8c:26:11:a2:03:
20:1d:6c:d0:5e:58:90:b5:b2:f3:36:a6:ff:c2:e3:
e6:f0:d1:06:70:94:2a:64:7b:f1:c2:86:d2:cf:cd:
f8:5e:e9:9e:bd:71:a4:d6:d2:5b:68:a6:9e:b0:a5:
f3:81:9f:78:0b:b0:44:99:fe:75:ff:87:a2:e0:41:
df:44:70:40:f4:67:30:a5:50:1f:f0:b2:87:25:25:
bb:05:1a:49:d7:75:da:55:4f:d7:f7:63:a3:7d:7a:
33:30:1f:75:27:ce:75:c5:85:57:21:b8:f4:00:b9:
43:b5:82:16:d5:24:e8:ae:9c:2c:46:f5:6f:02:50:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:78:9D:99:E1:45:4C:B2:1C:2F:2F:48:FB:60:B4:E8:4D:64:48
X509v3 Authority Key Identifier:
keyid:EF:4B:46:AB:4B:83:F5:D1:A2:22:48:B2:AC:26:41:43:88:09:1D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70tGq0uD9dGiIkiyrCZBQ4gJHTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/U514nZnhRUyyHC8vSPtgtOhNZEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3eee06-5994-4500-bdd8-32099691158b/1/70tGq0uD9dGiIkiyrCZBQ4gJHTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6f:35:71:5c:a0:e8:51:85:03:ff:a3:84:1d:4e:67:b0:95:
08:09:6a:e9:40:74:7e:5d:41:13:7a:ca:40:c0:a4:ba:c8:7b:
9a:b1:28:41:f1:af:6a:cf:25:c7:62:56:3e:77:f9:0e:d0:a6:
45:bf:6d:d4:cf:8b:39:69:1a:b9:a0:ed:70:82:ad:2e:b4:d9:
4c:7d:aa:d4:8e:5b:c8:cf:9e:de:33:63:16:b0:4f:c5:be:9c:
ac:f6:2f:ff:76:0c:dc:fd:bc:00:19:83:de:33:69:a1:3f:16:
c1:b3:1a:58:1c:48:1d:ec:aa:2f:b5:bd:a6:83:fb:65:5c:ae:
6a:3b:e9:07:88:1a:bb:83:10:26:59:97:8f:a5:ee:48:14:b0:
4a:54:45:6f:12:a9:18:84:6b:66:6b:26:bf:49:69:a9:e1:3d:
74:00:16:89:56:c9:53:08:fb:4a:c6:35:6e:31:63:b6:46:ad:
56:ff:7a:e4:d7:b0:62:f0:c8:05:85:33:98:6a:b0:69:dc:16:
6a:a9:06:12:32:7a:77:97:0f:88:be:b1:00:dc:20:bc:24:30:
4e:61:02:b0:b7:e6:bc:0f:2f:44:a8:df:06:a9:39:f4:1f:56:
3b:63:92:d5:92:5a:4f:61:e9:2e:a6:c5:e3:59:2f:5b:85:e2:
1d:e0:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org