Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/AsutIrHgbD-fbki7vYA6ZEz_I2w.roa
File: AsutIrHgbD-fbki7vYA6ZEz_I2w.roa (raw, json)
Hash identifier: paNvmalQFEkbX4UpfumXPP/WpPd3OjPn1B5yXarcsPo=
Subject key identifier: 02:CB:AD:22:B1:E0:6C:3F:9F:6E:48:BB:BD:80:3A:64:4C:FF:23:6C
Certificate issuer: /CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Certificate serial: 01856DA64C6DCF1C9C9F566D1B92BBB078AD
Authority key identifier: 7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/AsutIrHgbD-fbki7vYA6ZEz_I2w.roa
Signing time: Sun 01 Jan 2023 14:04:53 +0000
ROA not before: Sun 01 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:4c:6d:cf:1c:9c:9f:56:6d:1b:92:bb:b0:78:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Validity
Not Before: Jan 1 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02cbad22b1e06c3f9f6e48bbbd803a644cff236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:f3:41:0f:24:12:e3:0e:ac:42:c8:6a:ee:
61:7c:95:c3:48:5b:fb:9f:a0:5b:42:7e:3d:2b:2a:
fc:6e:30:dd:14:01:f3:71:3d:13:b8:90:50:b9:25:
df:d2:49:59:32:1d:3c:59:ff:93:ae:6c:7c:c3:68:
be:ad:f4:00:d4:e5:b9:fb:6f:bc:ed:95:59:f5:8b:
a1:a4:0b:b6:f1:29:f5:52:b9:b3:2c:4c:d4:b4:d6:
20:1f:fe:b3:07:16:c3:f5:57:b0:41:6d:8e:1c:fe:
78:fb:20:23:1e:98:40:32:23:8a:a8:9c:fe:86:26:
8f:9b:d5:3b:c4:6e:d9:1d:90:a6:5e:42:68:bb:70:
b7:b8:31:78:b5:1e:8b:07:6e:00:90:29:39:9e:62:
68:3d:e2:dc:14:87:d3:69:14:e7:91:3a:6e:3f:1a:
96:38:da:3c:1b:a8:b8:bc:a2:d8:ae:29:b9:31:04:
74:f3:73:87:b9:7a:ed:e4:8e:dd:23:28:fa:4e:24:
bc:c8:55:95:5e:d3:df:47:42:c1:f0:0a:ed:c1:49:
a3:8c:ce:6f:33:7e:32:77:3f:9c:a2:da:80:95:bd:
d9:6e:44:c3:0b:1b:82:7e:31:2b:01:25:b2:e5:6c:
96:e3:db:9a:85:d2:c1:66:4b:1e:12:c8:a7:cc:06:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:AD:22:B1:E0:6C:3F:9F:6E:48:BB:BD:80:3A:64:4C:FF:23:6C
X509v3 Authority Key Identifier:
keyid:7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/AsutIrHgbD-fbki7vYA6ZEz_I2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:4d:b0:c7:5b:a7:1d:e6:af:6c:d5:6a:6b:68:b2:e7:21:23:
76:15:a1:de:33:7a:b4:af:1c:f6:fa:02:26:37:d6:52:ec:26:
92:95:d1:a6:60:91:4d:47:10:98:b0:0f:1e:82:78:42:c8:a9:
8d:7b:1e:93:1a:1d:16:84:3a:09:2e:69:ee:3d:1c:00:98:7c:
b3:ec:9e:12:ab:ae:0f:4c:fa:45:82:fa:6a:cf:a0:a4:c0:19:
78:b9:81:63:50:56:2f:dd:66:33:e9:be:30:68:14:25:e0:41:
fe:57:bd:88:bd:b2:db:7b:af:69:98:dc:93:e5:01:26:35:e7:
24:59:e4:77:c1:db:5b:c5:ea:eb:23:87:f7:14:84:c2:e5:eb:
39:28:70:01:68:49:fc:64:1a:ad:1c:eb:88:6a:e3:e9:41:55:
cb:b5:c3:fa:87:27:23:19:c5:a5:29:0f:85:7b:0c:a2:32:76:
dd:f5:07:e8:58:07:c9:d1:77:f8:f5:34:39:6c:09:ce:53:e4:
4a:23:34:a6:a0:1e:13:78:58:39:e6:b7:8c:67:a6:df:8f:08:
2f:e8:6f:8b:73:3d:0b:15:69:14:e9:1a:18:bf:e6:9b:87:4c:
2d:7d:8f:29:52:da:8e:a4:2d:82:0e:4e:80:22:39:fd:d4:82:
0b:41:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:58 2024 by rpki-client on console-ams.rpki-client.org