Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/muhHLicioQp4fylVPXKlOXfzQjo.roa
File: muhHLicioQp4fylVPXKlOXfzQjo.roa (raw, json)
Hash identifier: TWF59x6CroGht+0eCzOB+XJAFaXuICnbompsnqOefnM=
Subject key identifier: 9A:E8:47:2E:27:22:A1:0A:78:7F:29:55:3D:72:A5:39:77:F3:42:3A
Certificate issuer: /CN=bb392126dc4ccab41a2a32aedcd796e66ed3a9aa
Certificate serial: 01856F9DADF1970DF7363901624B3391985D
Authority key identifier: BB:39:21:26:DC:4C:CA:B4:1A:2A:32:AE:DC:D7:96:E6:6E:D3:A9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzkhJtxMyrQaKjKu3NeW5m7Tqao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/muhHLicioQp4fylVPXKlOXfzQjo.roa
Signing time: Sun 01 Jan 2023 23:14:42 +0000
ROA not before: Sun 01 Jan 2023 23:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 146.19.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ad:f1:97:0d:f7:36:39:01:62:4b:33:91:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb392126dc4ccab41a2a32aedcd796e66ed3a9aa
Validity
Not Before: Jan 1 23:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae8472e2722a10a787f29553d72a53977f3423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:52:40:c5:23:23:48:75:a6:be:fe:f6:ed:
89:ba:26:a6:9e:46:27:64:39:c7:dc:9c:f9:ae:ae:
62:44:5e:ac:2f:f4:8d:91:6d:9c:08:f0:fc:04:a9:
fc:90:bd:5f:13:78:a7:30:69:36:41:74:fc:1f:b8:
85:31:80:bb:7a:58:67:03:69:2c:9c:c8:38:b4:42:
af:d1:83:64:bc:d3:6c:cd:de:72:c4:7a:15:6c:bf:
fa:1e:6b:58:45:0c:c6:41:87:d8:ac:db:11:df:df:
63:1e:45:1e:d6:d2:9d:7f:04:12:ff:10:56:2f:e1:
19:26:21:7d:53:31:3e:20:7a:7c:5c:6d:aa:38:17:
25:64:a8:12:b0:d1:56:70:11:1e:d8:c4:ae:8c:48:
2d:b7:d7:6b:5f:df:1b:f2:9c:df:cf:80:c4:71:0a:
d0:43:35:d7:c4:fc:f1:74:72:c6:d6:13:c4:fd:b9:
0a:76:03:03:a5:1e:ad:cb:18:65:0e:8a:e1:3b:04:
2a:77:50:e0:53:60:5c:b8:30:92:94:f1:9b:eb:f8:
88:2c:36:ca:55:9d:9f:52:ed:44:be:60:cd:b0:a0:
bb:15:ed:46:f9:9e:5e:6a:c1:a7:c0:ee:61:77:6f:
f7:96:94:d8:cb:e5:78:d2:cc:11:41:14:47:b5:71:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:47:2E:27:22:A1:0A:78:7F:29:55:3D:72:A5:39:77:F3:42:3A
X509v3 Authority Key Identifier:
keyid:BB:39:21:26:DC:4C:CA:B4:1A:2A:32:AE:DC:D7:96:E6:6E:D3:A9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzkhJtxMyrQaKjKu3NeW5m7Tqao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/muhHLicioQp4fylVPXKlOXfzQjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9368b5-53a5-4314-b19f-9f24143249b5/1/uzkhJtxMyrQaKjKu3NeW5m7Tqao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.18.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1c:61:7a:9f:26:8a:d3:c5:22:a7:74:3f:aa:8e:74:b5:16:
15:c9:27:72:f8:85:d4:82:bb:a9:2b:ca:3f:24:db:80:5b:3c:
dc:ff:2e:67:9f:6a:c9:73:89:f6:24:f2:53:e3:8f:51:5e:3c:
24:a4:6c:7b:66:78:02:f8:f2:bc:b3:7d:97:51:bc:ca:ec:63:
83:54:63:63:9d:92:18:f6:84:f4:0b:8f:e9:77:71:cf:93:6b:
78:fd:8d:e9:af:de:59:92:d3:2d:e1:fa:67:bf:8b:26:61:e4:
ba:55:23:2d:af:2b:d2:e8:fc:a3:9b:0f:fb:34:e6:9e:cf:bf:
e4:52:7d:58:98:f2:4f:e2:b7:3f:ab:4a:27:13:45:b3:ca:5b:
cc:92:80:b5:d1:6c:67:39:60:87:0c:07:28:06:33:88:cf:4d:
b3:fb:ba:c0:d7:0d:23:15:8c:32:91:c5:78:6f:9b:6e:d4:05:
ef:a3:76:54:3b:c2:30:40:99:11:c8:e0:49:90:56:0a:51:d9:
d9:4d:b1:4a:0c:a1:3f:d9:b1:26:ef:6b:57:2b:fe:0e:8f:76:
87:27:c0:f6:7b:db:2b:6e:5e:4f:b7:c0:b4:c2:fa:53:10:be:
75:b0:be:ee:a9:72:4b:12:45:24:93:a7:94:07:e8:b9:d5:d4:
a4:6e:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:18 2024 by rpki-client on console-fra.rpki-client.org