Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa
File: 02_X6Dd3QOEiItQ70iqCQNPkmFU.roa (raw, json)
Hash identifier: YQaqCwuBoOo0W93T1c5lYoTQXmflzjJK5QKVVEtmaHk=
Subject key identifier: D3:6F:D7:E8:37:77:40:E1:22:22:D4:3B:D2:2A:82:40:D3:E4:98:55
Certificate issuer: /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial: 01856F9DAFFBD2A40A5E72590FE9FF6C0695
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:af:fb:d2:a4:0a:5e:72:59:0f:e9:ff:6c:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb558699207297438090cbee19f022b6eeab982
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d36fd7e8377740e12222d43bd22a8240d3e49855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:47:2f:38:46:11:8d:d9:18:79:e9:7b:87:
87:de:41:3d:01:4d:19:7e:ca:19:31:0a:50:8a:41:
a8:8f:08:a1:25:e9:0c:24:45:09:f0:41:e2:5f:93:
e0:35:25:53:86:bb:29:51:33:e4:a2:5b:bc:fd:37:
69:5c:b1:c8:b7:d0:18:f5:da:27:3e:98:68:da:44:
f6:d8:f6:c2:b1:0e:31:00:64:4c:69:b3:8c:f5:be:
56:37:ec:11:1d:b1:e2:27:d7:f1:0d:28:0c:69:13:
2b:6a:67:62:d6:70:da:bf:af:2e:2d:15:a6:13:43:
96:32:4b:80:0f:3f:ea:cf:fd:2e:79:d3:8d:ee:14:
0f:b1:fc:18:28:b4:19:77:1e:32:1c:7a:a8:72:d3:
5a:ce:d2:8a:42:ca:2d:1c:c5:89:c9:ef:d8:47:a1:
ea:b3:b6:97:49:32:a1:49:8b:24:90:c4:8a:55:f1:
3b:fe:4a:ca:cc:40:c0:a0:2a:5e:36:b7:f4:4f:7b:
18:36:40:bd:4f:a3:75:9f:2e:af:f7:a1:d2:d1:5f:
21:b2:00:27:d4:4d:43:8f:6e:64:fe:e7:57:40:54:
89:b9:95:56:28:e1:89:f2:99:22:ee:28:4c:48:57:
8d:5d:75:f1:be:d7:26:d2:18:ce:2e:01:8f:00:88:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:D7:E8:37:77:40:E1:22:22:D4:3B:D2:2A:82:40:D3:E4:98:55
X509v3 Authority Key Identifier:
keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/02_X6Dd3QOEiItQ70iqCQNPkmFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cf:24:97:11:38:52:58:17:13:5a:ec:be:da:70:c5:27:ee:
85:99:dc:35:3b:85:96:73:a0:29:1c:da:10:f7:0d:49:18:40:
27:83:fe:8f:6d:e8:6b:56:99:0b:cd:1f:0f:ef:f9:68:5d:29:
a0:57:00:35:fd:06:f9:fb:ec:88:b2:ef:52:e0:7d:bc:35:c0:
18:27:59:e6:07:a5:a7:23:14:23:b7:0a:8f:9e:91:d0:48:b6:
38:3e:0e:08:d3:0e:8a:1c:29:75:a5:74:92:d5:cc:8c:f5:65:
99:cc:a4:79:3f:8b:b3:9b:2d:49:46:84:0e:08:b5:e4:03:53:
2f:8a:3a:80:30:d8:fb:8f:08:eb:9c:73:ce:49:3a:3e:a6:0c:
99:cf:09:fc:7d:0e:3d:1d:7a:2e:ae:28:04:94:f8:64:bd:68:
6a:89:27:ff:f8:34:73:2a:cd:ef:e6:44:25:8e:dc:7a:de:ed:
0d:86:a6:69:35:2f:78:a5:94:2b:37:b4:cb:18:73:2e:2a:61:
c7:3a:18:68:86:e0:ec:53:53:ce:34:79:07:20:f7:a9:00:bd:
e4:f5:9c:0b:6b:65:dc:fc:d1:9e:9c:60:a4:32:04:e3:59:e7:
ee:d1:4b:59:8b:43:5a:d9:e7:c2:03:64:54:ca:e6:7c:bc:3b:
dd:3b:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org