Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/jcLh5I8JCyozCg2AcPFY4dD0ZNA.roa
File: jcLh5I8JCyozCg2AcPFY4dD0ZNA.roa (raw, json)
Hash identifier: X7NUghDW7ot24lbmpCI77vc83Pa0KqW/QCEscHV3Xz8=
Subject key identifier: 8D:C2:E1:E4:8F:09:0B:2A:33:0A:0D:80:70:F1:58:E1:D0:F4:64:D0
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 014931C1
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/jcLh5I8JCyozCg2AcPFY4dD0ZNA.roa
Signing time: Sun 16 Jan 2022 07:15:52 +0000
ROA not before: Sun 16 Jan 2022 07:15:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21574081 (0x14931c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 16 07:15:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dc2e1e48f090b2a330a0d8070f158e1d0f464d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:55:dd:c5:d9:a6:6a:f2:5b:9e:88:97:e7:
29:6a:10:68:64:a6:d9:c1:6e:e4:ac:4d:87:65:05:
83:c4:ff:2d:09:d2:2c:27:23:da:27:79:db:bf:c7:
d3:f8:c5:34:8d:ac:da:fd:b3:af:2c:c2:6c:0b:bf:
81:d7:c1:30:0e:02:bc:f2:69:4d:00:a8:a3:32:8f:
2e:2a:28:af:19:f3:73:e1:ba:35:20:eb:fc:c3:86:
41:33:3a:ff:58:63:24:ee:b1:00:44:07:16:0f:14:
38:6f:a4:9b:72:5b:e4:52:9c:f5:ba:00:69:a0:c8:
30:75:e5:c7:62:49:ff:b6:ed:da:97:df:b2:75:b4:
20:8f:eb:57:ba:e7:f7:0a:25:4f:c9:d9:26:a1:6f:
f0:18:05:c2:02:21:07:10:d0:65:68:c0:42:09:fa:
d3:7a:e5:40:99:b4:79:cb:53:04:cf:29:5e:e8:4c:
17:c4:60:b3:9f:5b:ed:8d:10:52:92:25:29:35:c7:
f3:69:3d:e2:bb:3c:52:5d:b5:34:a3:64:1e:ba:d8:
ce:5a:66:ec:7b:76:68:af:d9:b9:8e:92:74:b6:b3:
a3:4c:10:3a:4f:70:db:a6:d6:85:04:56:0c:97:11:
2e:5c:0e:72:c9:3f:c4:5d:ea:a7:a8:59:dd:9d:b9:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C2:E1:E4:8F:09:0B:2A:33:0A:0D:80:70:F1:58:E1:D0:F4:64:D0
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/jcLh5I8JCyozCg2AcPFY4dD0ZNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bf:e6:1b:16:65:39:08:3a:0d:b7:59:c2:c4:7c:90:fe:aa:
d0:b1:6f:85:33:22:69:db:54:5a:c7:be:da:24:cd:20:ec:30:
72:64:c4:3c:87:76:35:27:d2:b6:6a:d7:e8:04:49:22:f2:e5:
e0:7d:d5:6d:0f:f4:96:89:31:45:6c:4f:bc:9d:35:ff:a6:ef:
e8:9a:9a:57:c3:9e:f3:f4:5a:6d:34:09:4e:e9:1e:14:a9:b9:
42:fe:67:b6:f3:d5:b4:63:54:6b:a6:db:44:c7:79:4a:3f:6d:
80:38:6f:1c:4d:c8:08:a2:b5:d7:89:ab:2b:76:78:d5:54:f6:
f6:1f:79:ae:5d:25:0f:e4:eb:2b:87:29:bb:c9:ad:d4:75:71:
5f:49:56:e0:a0:69:2b:8f:bb:57:63:ee:a1:71:22:76:63:85:
4f:f3:96:ad:28:31:83:e2:fe:c0:58:85:b1:6b:7e:99:e4:9e:
ad:70:63:95:46:be:14:19:92:16:0c:4d:86:9e:50:96:90:25:
91:00:1c:9d:e2:a6:3f:34:47:c4:9a:ab:21:bf:66:79:64:a2:
cb:6f:2d:25:da:34:a1:43:ef:cd:a2:83:9b:de:2b:ff:23:08:
f2:d9:36:71:be:cd:63:a4:42:f3:a7:ed:86:1c:3f:d0:51:20:
1f:55:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org