Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/XZWE6fMyF9E7hQ3ybImA00aDIrM.roa
File: XZWE6fMyF9E7hQ3ybImA00aDIrM.roa (raw, json)
Hash identifier: WYLUuHCJV+lap7+xXia8cQr/1c4ls+zM5okvYtCuNiE=
Subject key identifier: 5D:95:84:E9:F3:32:17:D1:3B:85:0D:F2:6C:89:80:D3:46:83:22:B3
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 0185708C97DFCC321E3BE6B24289068E61BE
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/XZWE6fMyF9E7hQ3ybImA00aDIrM.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:97:df:cc:32:1e:3b:e6:b2:42:89:06:8e:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9584e9f33217d13b850df26c8980d3468322b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:bf:3e:7a:8c:20:ea:c8:0d:33:43:5c:b5:
56:d7:1a:27:47:43:60:ed:73:17:f7:e0:a8:40:d8:
69:e8:bf:0b:ea:b0:3b:43:40:ab:46:aa:26:5c:de:
26:f5:22:9b:82:ad:15:df:30:39:93:da:bd:cc:57:
10:b1:93:3c:dd:61:96:25:34:95:cc:59:d9:16:5e:
9a:dc:c2:f3:f0:0c:ff:36:3b:cb:a0:f7:97:13:5d:
b9:7a:d7:e3:d9:34:dc:68:84:b8:5f:5e:ae:77:80:
a3:ac:5a:c7:0a:cb:6b:eb:e4:51:73:6c:dc:01:eb:
3b:2d:42:db:98:49:ea:2b:81:58:5d:95:01:2a:fd:
12:1b:e4:7b:68:0a:5d:3a:28:8b:e1:5c:22:3f:64:
f2:e3:d3:70:ed:10:39:67:1f:80:6d:a9:0e:5f:1e:
ca:7d:d9:50:54:8a:8e:3c:6e:95:36:a0:d2:61:de:
5b:93:18:da:b8:d7:bb:83:04:5d:29:b6:3b:2b:01:
de:31:c5:69:e1:47:c2:3c:4e:30:9a:ca:36:be:ec:
e0:8e:a2:5a:1c:43:f2:86:1b:8b:df:04:1e:bc:f2:
58:9f:2e:a9:86:05:40:24:ea:20:22:de:52:fc:a1:
5c:b8:3c:dc:85:0c:ca:93:a1:a4:95:cb:7f:35:cf:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:84:E9:F3:32:17:D1:3B:85:0D:F2:6C:89:80:D3:46:83:22:B3
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/XZWE6fMyF9E7hQ3ybImA00aDIrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fc:b6:7c:f7:67:5e:07:f2:24:e1:45:7a:d0:45:0f:b5:39:
a0:06:84:b1:9d:4f:f0:17:05:79:4c:f4:11:81:d1:69:ec:f9:
b3:16:0e:bf:08:d6:50:aa:d4:9b:5d:ce:1b:f6:ab:a9:d7:f5:
de:76:62:da:ac:20:9b:94:ee:18:19:a0:92:11:57:ff:48:64:
e8:6c:71:07:34:16:6c:b8:58:fd:c2:9e:ea:eb:6a:4a:e1:83:
ef:e2:39:2d:16:0e:e1:da:05:97:d1:2c:15:ce:63:5c:90:eb:
82:02:ab:ef:44:68:9c:37:86:07:e5:09:16:02:56:91:01:65:
09:46:1d:a3:41:3b:2e:97:8a:0d:9d:91:a2:5a:6d:b2:d7:ba:
cc:7f:14:a2:0b:05:a5:2e:fd:b4:ba:c1:09:a5:22:5c:3f:4f:
3d:43:45:a0:3a:2e:79:e4:0c:d7:7d:8a:6b:71:d3:55:5d:dd:
ad:21:4a:40:87:0c:76:7a:07:f5:7a:78:da:52:17:bf:82:6a:
b3:27:e5:3d:07:27:b7:7c:35:03:d5:f8:7f:ce:00:b6:25:19:
64:29:7e:66:cb:8c:cb:26:69:fa:1e:4b:05:7d:85:fd:9c:dc:
81:32:57:57:8e:30:5a:95:35:12:8e:83:81:8b:5e:34:a4:74:
d1:4a:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org