Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/0Ge8G6VwUp_jaiYoxY306VbMy6k.roa
File: 0Ge8G6VwUp_jaiYoxY306VbMy6k.roa (raw, json)
Hash identifier: 3IPWplz6k1frq3tjTj1kYJaMQHhpX7JFmuwHKhuvMmQ=
Subject key identifier: D0:67:BC:1B:A5:70:52:9F:E3:6A:26:28:C5:8D:F4:E9:56:CC:CB:A9
Certificate issuer: /CN=eaea3e38d6c7706f306128e547b63b80120106b2
Certificate serial: 01856D5D105F59A1CE84EDD6CC861CB2E6FF
Authority key identifier: EA:EA:3E:38:D6:C7:70:6F:30:61:28:E5:47:B6:3B:80:12:01:06:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/0Ge8G6VwUp_jaiYoxY306VbMy6k.roa
Signing time: Sun 01 Jan 2023 12:44:53 +0000
ROA not before: Sun 01 Jan 2023 12:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 46.253.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:10:5f:59:a1:ce:84:ed:d6:cc:86:1c:b2:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaea3e38d6c7706f306128e547b63b80120106b2
Validity
Not Before: Jan 1 12:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d067bc1ba570529fe36a2628c58df4e956cccba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:0e:45:f6:3b:8a:36:e5:2c:ca:58:20:ad:
31:8b:67:74:b1:f2:94:6e:ad:c2:3d:5d:d0:10:db:
4b:e9:48:9c:b4:53:84:d1:23:52:e2:7d:40:36:61:
2a:88:49:0e:43:95:67:0c:9d:e2:35:08:39:e1:20:
8b:e0:77:27:10:03:bf:53:24:41:df:b4:e5:59:aa:
88:e8:38:c1:f2:44:fb:ed:f1:e4:e8:82:3e:72:40:
3d:3b:32:24:e4:1d:e8:3d:83:89:90:37:9c:fc:54:
3f:3a:34:77:79:de:00:61:c3:28:f0:0b:02:ed:c3:
e1:02:bd:cc:3c:ff:e0:03:cd:0f:25:3c:ff:35:43:
fb:99:eb:f4:3d:24:01:fb:d4:d2:90:1c:69:de:cd:
2a:15:f8:b8:83:9d:4f:ff:3f:fe:2a:0e:77:c1:6e:
6e:67:17:3c:17:68:20:34:7d:1a:e6:4a:17:ac:9f:
06:86:66:ec:36:09:2f:6a:28:d6:f9:68:f5:0a:5e:
bd:e5:00:71:55:e4:cf:9f:60:01:e8:56:fa:92:f1:
f9:61:5f:77:8f:87:34:52:2c:51:c4:5c:f0:2a:fc:
58:3e:83:70:05:20:cf:73:84:c9:31:5d:cc:08:e1:
17:ad:38:64:0e:cb:fc:e9:88:27:bd:68:b1:34:4e:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:BC:1B:A5:70:52:9F:E3:6A:26:28:C5:8D:F4:E9:56:CC:CB:A9
X509v3 Authority Key Identifier:
keyid:EA:EA:3E:38:D6:C7:70:6F:30:61:28:E5:47:B6:3B:80:12:01:06:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/0Ge8G6VwUp_jaiYoxY306VbMy6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d3a90-7dd2-459d-94f6-c40cd4686a23/1/6uo-ONbHcG8wYSjlR7Y7gBIBBrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.135.0/24
Signature Algorithm: sha256WithRSAEncryption
06:95:e9:61:11:fb:2a:fc:e1:20:44:c9:a1:a6:f1:b9:66:13:
05:ed:e5:a5:b0:e4:bc:fe:6a:bc:75:42:9a:b6:2f:3b:97:bc:
68:f0:ef:bb:36:8d:16:cf:b6:ea:10:5b:5f:b6:79:99:1e:2f:
57:6b:5b:7b:7b:0b:6a:c1:ab:84:31:cd:4e:5a:0e:59:3a:65:
55:fa:46:31:05:4d:73:c7:bd:ca:05:ad:ac:9d:2d:f6:31:34:
a0:15:5a:43:a9:5b:0f:f6:c8:37:72:f5:6c:7f:b3:49:b9:b3:
e4:da:17:53:8b:55:ce:b4:54:ac:e1:3a:4c:cf:94:85:6a:39:
0b:2e:7d:8d:a1:14:96:c9:8b:fa:be:c1:a9:23:3e:35:e4:a2:
94:13:02:89:89:0f:8f:bd:c5:43:c2:9a:36:f1:e8:5b:a7:43:
ee:f5:31:09:13:f0:9a:c8:0f:5d:0c:48:09:8a:37:a1:e7:fe:
18:24:b6:5a:6f:fc:fb:30:84:00:13:bb:98:02:49:59:a8:97:
84:6d:b5:05:77:56:85:be:06:e7:bd:6e:61:55:fc:10:e8:85:
4e:59:2a:97:9a:47:8f:ba:bb:2e:6c:0c:70:3e:8c:07:5c:50:
f5:cd:7e:c1:9a:4e:e7:97:bb:d1:6d:99:01:e5:d0:8d:c4:52:
88:0f:ab:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org