Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/DU7Tbfrv9kKtE-5z9yogoYdr270.roa
File: DU7Tbfrv9kKtE-5z9yogoYdr270.roa (raw, json)
Hash identifier: OM0iu9+ZMvPedhpPDjlK4Xj0jJcoImJx7XWdW9NR4NI=
Subject key identifier: 0D:4E:D3:6D:FA:EF:F6:42:AD:13:EE:73:F7:2A:20:A1:87:6B:DB:BD
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 0185708C96AE2DCD2959A9EB8568F249E386
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/DU7Tbfrv9kKtE-5z9yogoYdr270.roa
Signing time: Mon 02 Jan 2023 03:35:39 +0000
ROA not before: Mon 02 Jan 2023 03:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:96:ae:2d:cd:29:59:a9:eb:85:68:f2:49:e3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 2 03:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4ed36dfaeff642ad13ee73f72a20a1876bdbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:cb:02:80:25:1e:d5:d0:90:d2:45:91:09:
ca:08:42:de:2a:48:77:34:e2:33:a7:64:6c:96:c4:
19:93:5c:fb:fd:af:5a:6e:9a:57:a0:38:a0:d7:c5:
7c:68:7f:7a:37:31:5c:30:0c:f2:88:2a:e3:8e:c5:
1b:bd:a2:b2:d2:e8:ec:e4:86:dd:a7:55:e3:13:a8:
2e:69:c6:24:5c:c3:3f:ab:18:dc:29:26:37:d4:54:
21:c6:20:cd:89:a7:8f:fc:34:76:76:4c:fc:49:6d:
3b:e0:13:51:3a:f6:3e:54:de:f0:22:04:1d:80:70:
11:e8:9a:ee:0d:11:a2:e7:6f:4d:2d:b0:99:c5:d4:
a5:e8:de:77:6d:e8:9e:6a:8e:fb:cb:03:61:f5:19:
bd:2a:86:ab:55:88:b9:92:d1:dc:cc:60:8d:eb:ea:
aa:42:2c:3a:b3:b7:6b:67:b7:c3:2a:b1:fb:53:c0:
85:3e:d1:2e:25:87:de:a3:ba:6d:f1:8e:c1:fc:e5:
a5:b2:da:a0:9e:30:ad:cf:02:2f:f1:80:d8:25:8d:
5e:cc:3e:da:95:41:5a:81:c4:88:63:ea:b6:a2:aa:
1f:37:c1:34:0e:7b:5e:ac:e0:39:4a:81:af:25:0c:
4c:20:51:19:d2:dd:b4:63:0f:1b:95:5a:39:de:1f:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4E:D3:6D:FA:EF:F6:42:AD:13:EE:73:F7:2A:20:A1:87:6B:DB:BD
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/DU7Tbfrv9kKtE-5z9yogoYdr270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:09:21:79:da:39:0f:50:1d:a3:3d:ac:5b:a1:ab:0b:32:20:
f4:57:fb:c5:82:75:4d:d5:13:d6:7e:27:c2:5f:f7:9a:74:a0:
ac:b3:fa:f9:64:c1:87:42:06:9b:dc:7b:58:1f:53:b6:1d:be:
bf:3a:75:9a:32:4d:da:a7:57:40:c7:95:f9:39:40:d8:99:e7:
85:23:e9:37:1a:4f:d7:18:e4:3d:0e:ae:53:fd:f8:d2:ca:ff:
de:5a:9e:00:c4:37:79:89:18:92:bd:80:96:79:ba:43:d1:b4:
f7:07:00:e8:42:ba:7a:aa:c0:9f:68:64:ab:82:fc:39:e3:39:
c7:83:98:8a:2c:fa:90:88:a6:56:58:f9:d4:e7:8a:ae:01:b8:
c0:e0:09:0d:f2:1b:89:e7:96:da:99:c4:dc:eb:dd:a5:8f:7b:
98:ad:08:1d:de:29:a0:79:cc:3e:3d:5d:41:9c:a9:12:b7:3d:
75:07:d2:d6:f9:71:6d:78:3f:d2:bb:58:ea:dc:75:b2:46:2e:
91:4f:39:ad:d6:f9:c4:ba:10:b5:59:77:45:08:a3:c8:34:60:
a3:22:d8:44:d9:ac:d6:e4:a7:f3:e3:9d:6d:f3:8c:4b:32:ea:
92:52:8e:87:9c:69:b8:b5:71:3b:54:bf:a0:9b:60:5e:84:c1:
73:e4:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org