Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/pd9xti92ojst2WGo9GgE7FR7Vco.roa
File: pd9xti92ojst2WGo9GgE7FR7Vco.roa (raw, json)
Hash identifier: M4PQyqtgVzxmm+pGtq97th6JkSvEBhODpHAkKwM4lEQ=
Subject key identifier: A5:DF:71:B6:2F:76:A2:3B:2D:D9:61:A8:F4:68:04:EC:54:7B:55:CA
Certificate issuer: /CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Certificate serial: 01889172AFBA02EE01F8A31A54B13F01E834
Authority key identifier: 99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/pd9xti92ojst2WGo9GgE7FR7Vco.roa
Signing time: Tue 06 Jun 2023 16:03:12 +0000
ROA not before: Tue 06 Jun 2023 16:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 46.253.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:72:af:ba:02:ee:01:f8:a3:1a:54:b1:3f:01:e8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9989ddf489ba45c98e28917018b565dac1b2ec2c
Validity
Not Before: Jun 6 16:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5df71b62f76a23b2dd961a8f46804ec547b55ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:f0:ef:04:8a:c4:f2:c5:49:0c:15:53:37:
03:9f:9a:42:70:26:1b:78:69:08:52:28:3e:25:a9:
88:23:3a:f0:91:f9:01:2e:6c:78:a2:e5:c3:a0:78:
ef:b9:bd:f2:1c:82:52:52:99:1d:14:f6:98:12:a1:
49:ac:54:8c:71:69:a1:fe:bb:41:54:c7:7e:34:f1:
44:52:d6:bb:54:40:ba:53:86:89:0b:49:ca:cf:eb:
fb:1e:59:1c:a9:61:77:99:c0:d2:d5:45:e7:0d:ac:
66:cf:4b:d2:f9:40:6a:c8:9c:a9:05:61:86:2b:60:
7d:19:f4:e4:a0:a3:68:d3:d3:11:e6:85:09:7f:42:
37:ff:e2:93:c3:53:e5:af:88:2d:34:9d:21:70:9a:
a9:a7:77:31:f2:af:89:27:99:46:35:5b:f7:e1:6c:
02:cb:9c:b9:b4:54:95:6f:29:33:07:07:7c:49:9a:
87:2d:4f:17:cf:68:20:54:bc:9b:85:27:e3:a7:7b:
30:2c:a9:eb:9e:6e:22:c3:f8:07:d0:fd:a2:eb:36:
a5:4a:d5:3a:2d:08:35:2f:bb:2b:cb:4a:f7:f5:cd:
e1:8e:61:f1:f2:e5:6e:15:98:ee:13:64:0e:bc:3f:
4e:d0:66:be:b3:7b:0b:82:70:9b:dd:c3:9f:af:d8:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DF:71:B6:2F:76:A2:3B:2D:D9:61:A8:F4:68:04:EC:54:7B:55:CA
X509v3 Authority Key Identifier:
keyid:99:89:DD:F4:89:BA:45:C9:8E:28:91:70:18:B5:65:DA:C1:B2:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/pd9xti92ojst2WGo9GgE7FR7Vco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a5ddfb-db21-4aa0-9202-f12d27b6ee78/1/mYnd9Im6RcmOKJFwGLVl2sGy7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:1c:dd:87:4b:40:55:93:5b:d2:12:05:91:90:1c:6c:b2:
8e:9a:80:74:95:fb:c1:59:1c:a4:6f:56:13:72:fd:c7:a6:99:
38:f2:70:4f:99:19:02:6b:32:9a:04:e7:02:b7:6f:cf:c0:23:
94:ec:5d:de:69:c5:85:70:ad:99:d2:5f:73:5e:67:fe:46:91:
a6:db:13:bd:da:6b:4e:70:7a:08:c4:5c:08:f6:d2:49:36:2d:
e6:b3:f0:0d:e9:6b:13:31:f5:2e:40:75:cc:06:79:b9:d9:cd:
61:22:98:0a:cb:07:db:bd:04:dd:97:48:1e:51:83:1e:bc:42:
b3:70:08:8b:68:9d:8e:23:36:1b:7d:c5:e3:8f:3b:79:fa:c9:
26:aa:5d:8b:3c:20:f0:0f:78:34:a9:05:a0:81:37:f4:c0:6a:
95:de:fd:98:ed:ce:ed:1f:09:73:70:2d:00:21:f9:35:79:b1:
92:a7:fb:2d:4a:97:f3:ec:57:e7:a0:2c:4c:26:15:72:85:c7:
eb:f1:ab:f2:ad:68:46:e5:88:da:6d:35:fc:cb:a5:ed:ee:8f:
a2:56:5f:21:67:10:a2:b9:04:2a:b0:e3:8d:e6:7a:0e:13:45:
a4:60:ac:b8:16:93:0a:50:3f:55:86:71:c5:73:77:3d:67:74:
c5:a3:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org