Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/9e9qQMTTSqGvpyYMggAis8AEN-k.roa
File: 9e9qQMTTSqGvpyYMggAis8AEN-k.roa (raw, json)
Hash identifier: judRmwH7hUg+7rl68bQSkHefcIaxKO0IMCTuTtBNsL0=
Subject key identifier: F5:EF:6A:40:C4:D3:4A:A1:AF:A7:26:0C:82:00:22:B3:C0:04:37:E9
Certificate issuer: /CN=a47bd29a726f17ae70bcd77f8c2762edb50c2eae
Certificate serial: 015EAFEF
Authority key identifier: A4:7B:D2:9A:72:6F:17:AE:70:BC:D7:7F:8C:27:62:ED:B5:0C:2E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHvSmnJvF65wvNd_jCdi7bUMLq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/9e9qQMTTSqGvpyYMggAis8AEN-k.roa
Signing time: Sat 01 Jan 2022 15:06:36 +0000
ROA not before: Sat 01 Jan 2022 15:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41957
IP address blocks: 46.16.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22982639 (0x15eafef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47bd29a726f17ae70bcd77f8c2762edb50c2eae
Validity
Not Before: Jan 1 15:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ef6a40c4d34aa1afa7260c820022b3c00437e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:3e:46:20:ab:1f:e7:a3:af:5e:86:1b:58:
6d:6a:7f:8d:04:04:f4:03:e0:79:10:12:db:8c:28:
2d:89:6c:76:56:ba:44:8f:5e:04:34:e3:aa:cb:86:
c1:88:a2:9d:c8:8a:3d:0c:aa:78:24:da:7f:aa:b1:
03:f4:e5:42:68:2a:31:02:29:c4:7b:3a:d3:c3:1a:
13:d9:4a:92:ae:04:0e:fd:51:3c:cd:27:5b:18:51:
f9:d0:09:48:67:ad:2b:9c:9c:e7:c1:04:3c:23:4f:
6d:80:8a:10:3c:b4:4f:df:a6:a6:71:54:60:39:f6:
ac:9d:b3:99:fa:cf:18:90:65:0d:88:7b:af:97:9b:
9a:0f:14:9f:ad:56:96:01:c9:35:60:5c:62:0c:41:
40:48:d4:58:f4:fa:78:29:00:9f:1d:e4:13:7e:53:
30:6b:43:19:fc:91:e0:d6:e5:2e:8d:c8:3d:85:0f:
c3:7a:c9:9e:94:87:21:7c:ee:d6:cc:3a:94:3d:69:
45:94:d4:5d:f7:10:98:13:c9:20:6c:61:96:33:8d:
25:37:46:42:a1:7e:06:87:a0:25:83:4c:31:e6:68:
15:a4:b3:d9:64:56:d8:c6:a4:b7:d9:bf:1e:a5:6d:
88:16:87:32:60:a0:1a:7f:f1:a0:79:fe:57:5a:ca:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EF:6A:40:C4:D3:4A:A1:AF:A7:26:0C:82:00:22:B3:C0:04:37:E9
X509v3 Authority Key Identifier:
keyid:A4:7B:D2:9A:72:6F:17:AE:70:BC:D7:7F:8C:27:62:ED:B5:0C:2E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHvSmnJvF65wvNd_jCdi7bUMLq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/9e9qQMTTSqGvpyYMggAis8AEN-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/pHvSmnJvF65wvNd_jCdi7bUMLq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:98:9e:8f:26:4d:5c:f0:59:b9:d7:57:51:dc:87:ff:11:f0:
98:97:90:19:28:6c:3b:70:d8:8b:eb:89:d2:13:14:16:65:29:
5b:e3:e6:4b:5b:2f:b6:c1:60:28:14:f2:80:d0:8a:29:48:10:
4c:f3:ca:45:54:0a:1f:88:18:2b:86:c5:8a:ed:ac:38:f1:c4:
f8:75:6e:e7:ac:ea:d4:7a:b0:29:9a:c8:ba:b1:91:0e:5f:66:
92:3a:d8:ac:71:50:6c:bd:35:0d:fd:f4:7b:1a:68:30:2c:a5:
19:b8:5a:9c:5f:51:d3:30:42:44:e3:91:58:4d:eb:3b:64:02:
84:fe:94:9b:44:81:7e:f9:54:a1:50:60:80:bb:e2:f1:d4:e2:
20:9d:37:81:25:42:7e:5a:39:f0:62:04:20:1d:1e:72:19:f1:
3b:91:99:1e:a0:82:7b:46:7f:12:83:16:09:37:ff:32:7e:0c:
a0:f2:35:f5:e8:44:a7:9d:c3:91:67:7e:54:51:14:3e:ea:0c:
16:d0:ef:e6:12:21:ef:da:d6:97:2b:1f:78:7f:73:8c:ae:41:
a6:a7:5b:25:42:5c:ce:13:ed:c8:57:a4:9f:eb:00:c6:d0:c5:
36:70:b0:3c:a2:71:99:e4:0a:22:63:5f:35:f4:71:5b:e2:3b:
d1:1a:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org