Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/xuYoq0rl4K18lKFD9TBBQqSNtYo.roa
File: xuYoq0rl4K18lKFD9TBBQqSNtYo.roa (raw, json)
Hash identifier: 49LnGG16eY9QHC3KGpHDhBj7CkGCx3Gc52aYjgPZFFE=
Subject key identifier: C6:E6:28:AB:4A:E5:E0:AD:7C:94:A1:43:F5:30:41:42:A4:8D:B5:8A
Certificate issuer: /CN=5c36618473c826cb3d2cb5ea4bdbd258d1a0b5a1
Certificate serial: 018D659406BBDAD42E182C164CDDA3A6D5D7
Authority key identifier: 5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDZhhHPIJss9LLXqS9vSWNGgtaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/xuYoq0rl4K18lKFD9TBBQqSNtYo.roa
Signing time: Thu 01 Feb 2024 16:50:16 +0000
ROA not before: Thu 01 Feb 2024 16:50:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200109
IP address blocks: 212.46.61.0/24 maxlen: 24
2a13:cd00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:94:06:bb:da:d4:2e:18:2c:16:4c:dd:a3:a6:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c36618473c826cb3d2cb5ea4bdbd258d1a0b5a1
Validity
Not Before: Feb 1 16:50:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6e628ab4ae5e0ad7c94a143f5304142a48db58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:44:a8:ea:1d:6b:ee:66:bb:e2:1a:41:d5:
d8:85:16:d8:48:49:37:d5:a6:46:f0:4b:0c:24:cc:
23:60:87:ce:a4:ca:3c:22:e9:65:90:65:77:97:4b:
50:0c:27:50:17:e0:36:49:69:9a:4f:fc:66:ba:f4:
63:ba:e6:58:f1:5b:dc:4f:24:47:75:8b:6f:5d:62:
6a:7c:40:15:62:e8:b2:d7:44:81:f1:ce:91:d9:2f:
3d:fa:29:49:8b:8d:8b:d6:d4:0f:05:90:e8:71:20:
1f:4e:a0:a5:26:76:a3:79:61:f1:36:85:78:d9:43:
0c:fa:85:1a:ea:b3:03:9d:4f:7c:e7:da:f9:f2:5c:
aa:d5:ee:8d:32:d0:55:6e:31:92:9c:ce:36:08:99:
b7:5a:5e:e1:98:e7:ae:59:0c:dc:a8:6e:a6:23:7a:
22:98:14:3a:7b:9e:0d:ea:09:eb:fb:b6:4c:35:c9:
cb:d1:57:e9:eb:38:e4:81:3f:09:3a:12:6d:a2:9a:
87:fe:0f:c9:28:90:fb:4d:6c:a9:f6:d7:64:ed:af:
dd:af:d5:4e:93:3c:f0:0b:88:0e:23:82:a3:64:23:
52:5e:4a:9a:63:36:37:5c:29:fa:f8:65:35:9b:d5:
cd:cf:e5:17:ac:80:d2:50:17:0e:aa:7f:83:c2:f5:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:28:AB:4A:E5:E0:AD:7C:94:A1:43:F5:30:41:42:A4:8D:B5:8A
X509v3 Authority Key Identifier:
keyid:5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDZhhHPIJss9LLXqS9vSWNGgtaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/xuYoq0rl4K18lKFD9TBBQqSNtYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.61.0/24
IPv6:
2a13:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7e:15:ca:b4:cf:8f:81:71:95:5a:eb:59:8d:1c:09:e5:6a:
88:c0:ff:f8:56:4c:1a:ae:6e:3f:82:3b:59:09:66:95:4c:56:
cc:c0:be:a6:68:c4:b8:9d:f5:4f:92:2f:51:ae:ad:7c:3c:b6:
b0:51:76:f6:b1:c7:66:44:6d:97:1e:ae:b4:91:dd:7b:a5:9d:
13:39:34:af:71:c6:b9:ff:2e:19:bd:5d:45:48:24:27:61:c9:
0a:bb:4f:e2:cf:bb:d5:77:60:2f:01:e2:57:bc:5e:d5:a1:cb:
bb:56:f6:2f:9d:db:27:e2:42:f4:42:1a:f8:25:91:c6:fd:4d:
ba:0e:ec:7c:87:ec:57:70:60:da:5f:a8:2f:7a:2b:a7:29:59:
de:a0:cc:b8:1c:46:66:69:41:28:b0:6e:64:ff:65:b7:9c:f2:
7f:98:a9:52:01:f3:dc:46:cb:39:60:ab:05:d8:31:c5:80:07:
47:42:4e:41:48:2b:79:7b:4c:3d:b6:6f:30:10:85:04:59:4f:
26:53:a5:a3:2e:45:61:4d:d8:08:33:85:9a:f4:1c:71:f6:3a:
55:94:bb:00:a7:2e:e0:1c:e8:4f:84:da:93:20:a7:62:b5:8e:
c1:37:68:56:88:48:78:d9:9a:fa:f7:1e:18:85:f2:de:17:ec:
db:83:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:05 2024 by rpki-client on console-ams.rpki-client.org