Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/d8xM9aHsk8X4fjiwbzqu60g1Dak.roa
File: d8xM9aHsk8X4fjiwbzqu60g1Dak.roa (raw, json)
Hash identifier: WBWVAsOAIQV4+WXQcZJCJpHGJMGIyKktwewh+lh2p5U=
Subject key identifier: 77:CC:4C:F5:A1:EC:93:C5:F8:7E:38:B0:6F:3A:AE:EB:48:35:0D:A9
Certificate issuer: /CN=a47bd29a726f17ae70bcd77f8c2762edb50c2eae
Certificate serial: 01856F0B3F6F9D5C68331A83781BDEF93645
Authority key identifier: A4:7B:D2:9A:72:6F:17:AE:70:BC:D7:7F:8C:27:62:ED:B5:0C:2E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHvSmnJvF65wvNd_jCdi7bUMLq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/d8xM9aHsk8X4fjiwbzqu60g1Dak.roa
Signing time: Sun 01 Jan 2023 20:34:46 +0000
ROA not before: Sun 01 Jan 2023 20:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41957
IP address blocks: 46.16.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:3f:6f:9d:5c:68:33:1a:83:78:1b:de:f9:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47bd29a726f17ae70bcd77f8c2762edb50c2eae
Validity
Not Before: Jan 1 20:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77cc4cf5a1ec93c5f87e38b06f3aaeeb48350da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:4f:45:b4:ff:9b:b6:fd:df:64:19:88:a2:
41:4f:90:d9:e8:ac:d7:dc:eb:f6:6b:b8:c2:12:06:
d0:0b:ea:dd:0a:52:99:f4:71:1d:e0:d7:ee:29:df:
ac:3d:e2:37:4b:4c:65:15:d4:9f:63:c5:fe:f0:a9:
64:10:7e:91:97:21:1a:3c:21:e7:3d:21:f9:9a:67:
38:79:63:66:9c:a5:db:98:b7:1c:c0:47:2b:c6:77:
61:8b:7c:59:32:84:a6:bd:f0:9b:ca:42:1b:0d:c5:
fd:64:cc:6c:98:90:fc:8e:87:b3:22:9f:dd:18:8f:
06:af:02:64:9b:de:2c:9f:0e:29:b4:c2:3d:9c:0b:
9f:a2:66:15:c1:5d:ad:0c:67:18:db:76:95:e7:71:
22:c9:fb:54:66:d0:5c:2f:91:b1:73:c2:59:3f:c7:
e1:45:4b:7f:08:a4:3f:37:f7:43:ad:c7:d7:78:d8:
26:38:77:8c:1a:02:40:66:f7:8d:a3:e6:6f:5c:51:
ab:db:ae:d7:97:b0:37:4c:26:d4:3f:48:cc:13:53:
f6:42:70:82:6d:c0:62:a9:e8:aa:59:88:b1:bc:f7:
dd:ab:a2:78:3a:a5:4c:58:f3:e4:99:fb:79:b9:fd:
4b:be:e2:32:ba:f3:e8:78:96:e5:5c:bb:71:0b:10:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:4C:F5:A1:EC:93:C5:F8:7E:38:B0:6F:3A:AE:EB:48:35:0D:A9
X509v3 Authority Key Identifier:
keyid:A4:7B:D2:9A:72:6F:17:AE:70:BC:D7:7F:8C:27:62:ED:B5:0C:2E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHvSmnJvF65wvNd_jCdi7bUMLq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/d8xM9aHsk8X4fjiwbzqu60g1Dak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1202d2-029a-4a8b-9de5-d3c886c150de/1/pHvSmnJvF65wvNd_jCdi7bUMLq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cf:66:f7:a5:35:2b:84:c8:e5:87:ff:d8:19:88:c5:8e:66:
68:58:c9:10:a5:35:1c:fd:48:12:4f:08:0a:f4:3c:c7:59:a4:
ca:66:8e:d9:b8:87:1a:04:97:74:15:33:a1:df:00:a2:3b:5f:
5c:1f:62:6d:79:ea:6c:a0:e9:3a:24:74:0c:11:14:51:5b:a9:
9e:de:7d:db:a9:2d:0e:39:f4:0e:80:1a:fd:08:01:92:c3:96:
3e:23:1b:42:a7:c9:0d:56:2a:cc:62:a4:a7:4c:21:b5:b1:ab:
cb:3e:a9:cf:8e:1b:8e:c5:44:32:3d:96:4d:5f:ac:27:21:d1:
1f:d5:dc:d5:47:94:3c:8e:85:fd:74:9b:24:30:d4:de:3e:8a:
57:01:10:90:71:57:f3:83:ec:75:66:c3:e8:08:c2:55:7f:b1:
04:3e:76:b9:42:2d:37:8d:d2:31:94:00:8f:58:d3:15:69:30:
2f:a3:1b:76:e3:4b:92:bf:5e:e3:e7:d9:27:f0:32:7c:e4:1f:
8c:43:bf:b8:ea:68:05:93:ba:08:34:69:5a:cf:3d:f4:c3:59:
1d:19:1f:f5:ed:e7:06:ee:2f:9d:71:61:29:3b:c1:fa:36:9f:
f1:64:24:d4:cf:81:23:1a:1c:9e:bc:32:b7:e2:19:2f:87:08:
9c:3e:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org