Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/kLKZJ6Nv5h51yUVmDmMheR47lHg.roa
File: kLKZJ6Nv5h51yUVmDmMheR47lHg.roa (raw, json)
Hash identifier: TpnPrMGzCwSx/Kb1bvbM6ysQ49JNESPbdsi9UY8R2TI=
Subject key identifier: 90:B2:99:27:A3:6F:E6:1E:75:C9:45:66:0E:63:21:79:1E:3B:94:78
Certificate issuer: /CN=9acae1e86f3e58abb80c0fa97420094d55206d7b
Certificate serial: 01857321D5F96478CFE3060C422969553BFC
Authority key identifier: 9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msrh6G8-WKu4DA-pdCAJTVUgbXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/kLKZJ6Nv5h51yUVmDmMheR47lHg.roa
Signing time: Mon 02 Jan 2023 15:37:55 +0000
ROA not before: Mon 02 Jan 2023 15:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57884
IP address blocks: 146.19.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d5:f9:64:78:cf:e3:06:0c:42:29:69:55:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acae1e86f3e58abb80c0fa97420094d55206d7b
Validity
Not Before: Jan 2 15:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90b29927a36fe61e75c945660e6321791e3b9478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:db:f9:2b:60:42:02:2d:19:a9:a0:ce:ff:
c5:af:b3:45:17:a1:ab:4e:e7:f9:48:4b:0b:58:c9:
fa:1b:64:a5:51:78:c9:b2:5b:1a:4a:2a:9e:e9:3c:
1c:c8:41:56:9a:c6:af:8b:a8:32:b7:d0:6e:98:fd:
b0:24:0b:31:9f:11:56:9c:be:59:4c:f0:4b:28:38:
0a:f7:59:eb:be:b5:9d:23:a4:7c:ea:c5:ee:56:c8:
95:d1:1f:db:20:fe:eb:56:63:2f:7d:64:fb:17:00:
4e:c5:ff:ee:d3:f7:ff:31:5c:fa:b7:73:41:cb:ed:
18:fe:ca:e2:68:f2:47:8c:dc:37:69:5c:f2:bf:3b:
ee:55:eb:65:10:43:f4:42:44:67:eb:c0:ed:b9:50:
d9:6b:de:70:af:47:52:4b:4c:b3:f0:18:bb:c2:21:
cf:0b:45:93:03:8b:84:db:c3:a3:0d:75:2a:d3:41:
6c:49:f5:bb:d1:eb:42:79:0e:a9:36:d1:74:e3:10:
6d:87:b7:62:a5:38:b7:6c:48:c9:55:63:70:27:ac:
a0:0b:b2:ef:34:e4:ff:b0:a7:af:57:90:1a:86:2d:
bc:b0:11:a2:88:2e:f6:ac:76:7b:7e:04:1c:86:db:
cd:6f:28:7b:f5:d0:fa:41:df:58:2e:39:fc:ce:b4:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:99:27:A3:6F:E6:1E:75:C9:45:66:0E:63:21:79:1E:3B:94:78
X509v3 Authority Key Identifier:
keyid:9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msrh6G8-WKu4DA-pdCAJTVUgbXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/kLKZJ6Nv5h51yUVmDmMheR47lHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/msrh6G8-WKu4DA-pdCAJTVUgbXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:43:d4:be:c0:4b:6e:fc:98:f6:14:5c:7d:38:be:ea:e5:a7:
c9:56:73:d2:be:be:1f:c0:f0:5f:52:9d:af:ad:ff:a9:48:e2:
56:e1:00:9b:21:a2:37:90:a2:c8:9c:da:31:06:91:11:09:69:
76:37:de:c2:cb:fa:74:fe:1e:f6:43:ab:ba:4b:75:c9:85:34:
e0:a3:42:7f:50:4c:2b:92:74:ef:f6:f4:c2:9d:74:4f:7d:b5:
f0:6b:c4:87:13:59:2b:7b:fe:6e:21:d2:b8:83:b3:cd:d6:78:
3f:5b:64:48:14:c7:ea:04:fc:74:f8:ca:84:14:3a:e4:ec:ef:
11:15:d6:aa:a0:b2:e5:89:16:21:ce:af:2b:5a:d3:61:80:cf:
0f:90:f3:45:ea:2d:89:7b:ce:02:96:c2:73:73:96:a1:88:1f:
5d:b8:a2:aa:db:97:0b:0a:da:ac:ce:3a:fe:7f:cb:30:3d:92:
a9:9d:a8:b3:92:c0:53:e2:69:a9:7c:b2:a9:be:04:56:dd:ce:
2a:6d:d6:fa:62:e1:76:93:59:1c:b5:d1:3a:41:73:ef:57:36:
8f:e9:f2:25:a7:1d:62:de:21:cb:33:a7:8b:60:e3:32:31:35:
32:fc:ba:c9:62:b4:f9:0f:9d:85:99:e9:78:70:b0:15:e5:4d:
e0:20:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:04 2024 by rpki-client on console-fra.rpki-client.org