Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/cu_cxrrgeWZECWMQtQDJtWOfrp8.roa
File: cu_cxrrgeWZECWMQtQDJtWOfrp8.roa (raw, json)
Hash identifier: pfXsC+vA1E9eawpKZcxzseGFBDCxzNpYg1DGBzwCgco=
Subject key identifier: 72:EF:DC:C6:BA:E0:79:66:44:09:63:10:B5:00:C9:B5:63:9F:AE:9F
Certificate issuer: /CN=6184d30ab1083aa2e1c7faee086e70416d283b6b
Certificate serial: 01856FF98467FDD5B24D66BF5E7D69561F76
Authority key identifier: 61:84:D3:0A:B1:08:3A:A2:E1:C7:FA:EE:08:6E:70:41:6D:28:3B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYTTCrEIOqLhx_ruCG5wQW0oO2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/cu_cxrrgeWZECWMQtQDJtWOfrp8.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 46.253.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:84:67:fd:d5:b2:4d:66:bf:5e:7d:69:56:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6184d30ab1083aa2e1c7faee086e70416d283b6b
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72efdcc6bae0796644096310b500c9b5639fae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:ba:81:58:c8:5b:d3:75:b4:73:a9:af:96:
7d:5c:67:3c:d4:eb:ee:de:5f:7e:91:dc:76:8b:55:
c1:79:14:94:19:52:bd:3b:7c:50:38:49:3d:f6:ca:
18:4a:6e:8e:28:bc:02:98:b8:df:a1:74:9e:8a:02:
6a:f5:05:72:ce:df:28:9b:de:48:da:5e:6d:fb:63:
3a:94:ae:a1:c5:09:6c:62:b0:ae:ff:d9:59:5f:12:
ea:82:1a:ef:bf:d6:10:96:2e:43:dc:d4:90:1b:17:
bf:0e:6c:a8:6e:38:ec:e3:27:81:73:74:17:7c:fd:
77:44:95:6a:2f:84:8c:8f:55:65:fa:ea:b1:82:1a:
e3:fd:79:82:03:fd:9f:fe:e7:9f:33:67:38:80:fd:
35:37:52:e2:ab:57:35:98:fd:0f:d3:47:6e:e3:d3:
7b:58:da:be:ba:2c:ce:c2:82:a3:ce:c2:0c:d4:50:
82:2b:c7:a0:d1:92:56:13:bc:f6:a0:e9:69:3d:61:
5a:86:4d:39:e8:b2:e9:7b:e5:eb:59:42:32:c0:ee:
84:9f:04:c1:37:4c:34:91:a6:05:e4:28:ca:fd:ca:
3b:a9:e5:7d:7e:da:e7:5b:bd:b7:8f:b4:40:6e:c3:
75:49:3e:c3:30:ce:9a:df:f4:a8:9d:94:8b:64:1a:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:DC:C6:BA:E0:79:66:44:09:63:10:B5:00:C9:B5:63:9F:AE:9F
X509v3 Authority Key Identifier:
keyid:61:84:D3:0A:B1:08:3A:A2:E1:C7:FA:EE:08:6E:70:41:6D:28:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYTTCrEIOqLhx_ruCG5wQW0oO2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/cu_cxrrgeWZECWMQtQDJtWOfrp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b70398-d4ee-4d40-9301-96c9bb1af568/1/YYTTCrEIOqLhx_ruCG5wQW0oO2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.138.0/24
Signature Algorithm: sha256WithRSAEncryption
00:68:39:eb:25:ab:85:f9:bb:9f:7f:f8:03:52:b0:1f:d6:57:
e2:0c:f6:e3:ca:ed:ca:fc:f2:df:15:8c:63:89:b5:fb:00:5d:
e7:72:e5:fb:0f:9b:53:aa:82:33:cb:89:5e:d8:24:f7:83:84:
be:61:ba:2e:db:ed:0c:27:5e:d8:25:ba:54:9b:19:91:72:91:
c4:2c:a5:9d:36:52:29:81:68:d6:f6:c1:0a:6a:31:6d:5e:07:
9c:47:85:3c:48:62:8e:d4:43:45:1d:5c:92:57:cd:c0:f0:21:
b0:0e:4e:1a:23:bc:d5:3a:c5:9d:6c:a3:6b:37:67:14:af:81:
3a:8f:0d:16:cb:d6:0e:33:e8:26:74:8b:d0:62:d3:84:1f:1a:
c1:ad:c6:f3:8b:dd:07:7f:26:a5:b6:c7:e8:da:b5:60:02:e7:
f7:96:9f:bf:e8:7c:7a:aa:45:2d:d5:b0:96:fb:a1:52:f9:35:
6e:94:fa:0b:47:19:71:d9:5a:d1:3a:49:55:ff:57:cb:2c:92:
08:03:9b:b9:0c:b2:e4:26:2f:71:35:62:df:98:d7:6f:a1:f1:
6c:9a:15:d1:e6:2f:e2:2f:18:ce:47:e9:29:13:29:f2:67:ff:
05:18:e6:54:49:5d:0b:84:e3:31:14:81:6b:7b:f3:e7:f2:93:
f2:c5:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org