Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/tiNHPBgdxMMbm_Bc9zEzfWlDC_g.roa
File: tiNHPBgdxMMbm_Bc9zEzfWlDC_g.roa (raw, json)
Hash identifier: B4uHVcmPAyHgh0QWBjzapxPpZU0xG+w3B6j3d2wiet8=
Subject key identifier: B6:23:47:3C:18:1D:C4:C3:1B:9B:F0:5C:F7:31:33:7D:69:43:0B:F8
Certificate issuer: /CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Certificate serial: 0C07A72E
Authority key identifier: 0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/tiNHPBgdxMMbm_Bc9zEzfWlDC_g.roa
Signing time: Mon 14 Feb 2022 20:45:10 +0000
ROA not before: Mon 14 Feb 2022 20:45:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7224
IP address blocks: 46.51.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201828142 (0xc07a72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Validity
Not Before: Feb 14 20:45:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b623473c181dc4c31b9bf05cf731337d69430bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:a6:cf:67:08:64:be:a3:54:85:01:78:bb:
15:80:2a:bf:f8:8a:61:d9:25:a5:50:96:6a:06:04:
a0:b4:8f:3c:bb:32:34:08:53:18:72:ba:7c:01:4a:
7b:6b:86:ad:35:b4:9f:0b:ef:7b:16:8b:a1:54:23:
3e:62:a8:a2:5f:b4:e4:c5:19:8e:f2:9e:88:16:6d:
da:52:ad:fd:b7:65:a8:67:3b:2c:8c:d5:0e:d3:88:
89:e9:06:2f:2b:32:23:44:b2:79:c6:16:d4:b4:4a:
2f:97:45:e5:7a:3f:f6:d2:9d:cf:1e:2a:ed:01:b6:
2c:81:86:6e:14:06:2f:c7:2d:d3:75:cd:bd:9c:12:
1c:ca:1c:1b:41:0f:c5:f5:1e:72:d7:15:cc:af:e9:
d6:83:38:a1:04:70:62:08:e1:d8:3e:96:02:77:66:
67:b2:35:4c:f1:73:db:b8:9c:cb:6e:78:6f:9f:f8:
e1:d6:69:eb:58:31:d6:29:d0:f8:38:4b:ae:74:76:
07:8c:aa:da:e9:a2:3b:84:95:bd:8f:a0:23:f1:96:
aa:2c:3d:ed:15:70:d0:60:66:99:1f:3a:19:0a:cd:
f8:b9:97:8c:39:0a:03:95:e1:eb:de:ca:59:2e:6e:
d9:2d:dd:4e:f7:9e:7d:1e:51:90:8b:59:82:a0:93:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:47:3C:18:1D:C4:C3:1B:9B:F0:5C:F7:31:33:7D:69:43:0B:F8
X509v3 Authority Key Identifier:
keyid:0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/tiNHPBgdxMMbm_Bc9zEzfWlDC_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/Dbz_q_X6vIvLBEV8HqbMZl9idA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:84:7c:c4:13:ca:8b:8a:28:d8:96:60:af:a2:63:78:08:75:
05:11:0b:8c:40:2d:6f:12:a4:ad:b3:cc:b1:8b:16:88:75:21:
83:78:4d:b2:42:72:81:92:87:25:38:40:96:76:a1:67:dc:ff:
8e:a0:21:3d:0c:71:52:4b:7d:37:2b:b2:70:44:d4:ab:0d:4c:
07:61:ec:0e:f1:ed:89:3c:3f:40:c8:7a:09:d4:fb:96:53:28:
41:df:44:1d:a9:d0:ec:a3:3a:ab:cf:29:52:a2:d3:77:e0:69:
bf:e9:67:cd:30:e8:51:cf:c3:aa:f8:3c:04:f5:f7:d5:d8:0c:
e1:c2:13:99:7a:38:c3:f9:64:e9:b6:09:95:ef:03:74:aa:18:
c7:aa:07:81:b1:47:75:1e:27:98:fe:f3:50:3a:77:ac:70:21:
38:c3:c1:8d:cf:45:a8:6b:4a:79:c6:3a:13:07:6f:fa:b1:9a:
91:7d:f3:01:08:03:37:7b:5d:30:84:55:e5:9b:49:b3:eb:a2:
05:b5:2d:f8:7c:4b:e6:5f:2d:04:67:1d:f3:5b:a1:f5:2b:36:
83:cc:17:72:cc:55:6e:c3:cc:4e:52:e4:14:a3:5e:b8:70:eb:
3d:c3:fd:29:09:8a:93:69:4e:61:46:c8:6f:a8:4e:af:07:38:
93:be:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:23 2024 by rpki-client on console-fra.rpki-client.org