Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/VdAIAycGORBcMVwYxWqIVxzeuA0.roa
File: VdAIAycGORBcMVwYxWqIVxzeuA0.roa (raw, json)
Hash identifier: IVV9tt3xhUsHarI4jf/ZCN2aX9VUoXKlHD3QxG06Otc=
Subject key identifier: 55:D0:08:03:27:06:39:10:5C:31:5C:18:C5:6A:88:57:1C:DE:B8:0D
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 0185708C9889EB279911B0067159D81A3C6F
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/VdAIAycGORBcMVwYxWqIVxzeuA0.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:98:89:eb:27:99:11:b0:06:71:59:d8:1a:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55d00803270639105c315c18c56a88571cdeb80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:2b:fe:17:99:58:f2:ec:00:11:bf:e8:8d:
17:59:9e:8f:c6:e7:c1:53:2e:54:7f:f6:42:1d:f0:
b7:3d:73:e6:75:37:7c:7e:0d:75:64:4a:83:bc:2c:
54:c3:15:7e:14:44:73:bc:7c:4d:0d:cb:a5:ce:aa:
d2:ad:dc:cc:5c:8b:01:a4:06:da:58:28:65:d0:f7:
ea:a8:a6:c7:c1:7f:97:48:ab:03:73:ec:c0:4c:a1:
78:9d:56:78:c4:2c:fb:42:3d:c7:55:0a:b8:8a:40:
95:79:6a:b6:05:af:cf:70:7c:9d:f2:71:36:ea:a2:
54:65:b2:43:62:98:e7:d3:d3:70:d9:f8:98:4f:42:
f4:9d:00:a9:8d:f8:19:5f:6d:cf:5c:18:14:0d:82:
9a:12:74:07:56:68:e6:a5:25:df:8a:fd:3b:4c:6e:
50:76:b1:2e:ee:ce:15:d1:ee:78:13:e4:fa:9e:98:
51:82:da:c9:99:1d:96:9d:99:b7:a3:1e:61:55:ab:
a4:7a:18:d3:7a:1a:44:ab:28:de:8c:16:47:cf:dc:
8f:39:92:c1:03:6e:ce:93:9b:de:83:a8:81:3f:ac:
89:50:8f:77:c2:86:7c:2c:1d:42:15:92:ad:1e:85:
dc:14:b0:c4:e1:5c:b4:47:81:b5:a7:fc:f1:95:03:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:08:03:27:06:39:10:5C:31:5C:18:C5:6A:88:57:1C:DE:B8:0D
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/VdAIAycGORBcMVwYxWqIVxzeuA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
25:69:f9:36:62:04:f6:bd:d0:a5:be:a6:c8:16:09:7e:7c:a4:
77:df:e0:43:8d:05:3c:40:d5:71:c0:75:fa:2e:2e:90:c0:47:
e5:6c:3e:91:92:5d:1e:d0:7e:a3:53:b4:a5:73:6f:fd:0b:d9:
fd:54:89:fa:cf:7e:4c:3b:4c:b6:33:33:48:29:b1:2d:f9:1b:
ff:6d:10:f0:3d:cd:14:41:95:23:9e:08:37:e9:9c:22:1d:7d:
45:3c:71:0b:13:8c:07:71:3b:5b:38:ab:bb:00:f3:91:a1:a9:
c4:3d:f9:40:64:7d:dd:4f:47:47:86:31:b5:b4:a7:11:00:38:
0d:09:c5:e6:22:a4:dd:55:36:b3:6b:41:fa:ab:9c:50:db:b6:
d7:1f:94:ec:98:0a:b3:e6:73:20:eb:31:30:2c:f5:df:c4:c9:
f8:d8:3f:bc:71:08:f4:76:4a:2e:ac:e7:7d:b2:23:36:37:e5:
3f:4c:3b:c4:9d:c8:64:7b:90:77:49:a4:22:9b:4f:c7:ba:08:
69:b1:b5:af:14:08:b2:84:5f:27:da:a4:18:e7:d1:86:bd:6b:
5d:f4:38:6e:76:d8:10:4a:53:6f:d1:cb:d3:e1:c4:8b:25:4a:
10:79:e1:96:90:28:2f:be:fb:9f:bf:29:d9:8b:89:84:d7:bc:
ad:c4:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org