Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/N4tYZJ0HXEClgd1jwhUuaQd7fRs.roa
File: N4tYZJ0HXEClgd1jwhUuaQd7fRs.roa (raw, json)
Hash identifier: gIS3Fj/SJUJDEx5r/sVQqOAadM517xa2rJ7en7h7xfY=
Subject key identifier: 37:8B:58:64:9D:07:5C:40:A5:81:DD:63:C2:15:2E:69:07:7B:7D:1B
Certificate issuer: /CN=1eedfb17b87dd959a6885f4ecbde6c4f76481955
Certificate serial: 0187ED15DBC2442FA12148CA1646CA5EFAB6
Authority key identifier: 1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/N4tYZJ0HXEClgd1jwhUuaQd7fRs.roa
Signing time: Fri 05 May 2023 18:04:05 +0000
ROA not before: Fri 05 May 2023 18:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.255.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:15:db:c2:44:2f:a1:21:48:ca:16:46:ca:5e:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eedfb17b87dd959a6885f4ecbde6c4f76481955
Validity
Not Before: May 5 18:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=378b58649d075c40a581dd63c2152e69077b7d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:94:00:69:ed:6a:37:46:f1:a4:26:30:af:
91:f2:88:bc:24:a1:5a:73:04:89:1b:4b:48:92:5c:
71:4f:57:85:2c:f0:e3:17:99:a3:81:65:1a:de:95:
8f:8a:a4:03:b3:10:1c:88:0a:52:36:10:ef:69:5e:
d5:ff:c6:c2:50:b5:51:c4:cf:0b:b3:0a:9a:37:94:
79:72:62:62:a3:d7:93:3c:4d:1d:71:3c:36:66:6f:
1d:b5:e7:37:48:77:d5:5c:3f:c2:db:bc:a3:74:3d:
4f:c9:14:56:5e:1e:8e:c9:af:b3:13:39:c2:35:cd:
e0:8a:b4:63:5d:ef:5a:a0:99:e5:08:84:f8:0b:d1:
85:04:3a:71:49:74:76:20:16:c2:33:e0:36:53:c4:
67:af:61:54:18:b1:33:35:a2:24:3f:a2:a9:d8:bf:
7b:46:83:9d:9d:27:a8:ad:18:01:47:1b:63:e2:75:
2e:23:cd:c6:3e:12:d3:26:10:0b:8c:bb:41:e6:20:
98:cf:84:77:09:ec:ba:d6:f5:08:85:3f:8b:d4:ea:
37:2f:5d:98:00:fd:b9:94:15:7e:58:0b:02:6e:c9:
e3:96:93:9f:e0:cb:59:fa:d6:10:0e:97:af:d4:c6:
a0:b2:a2:a2:fe:c9:72:33:a9:8c:79:5c:7a:9a:ed:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:58:64:9D:07:5C:40:A5:81:DD:63:C2:15:2E:69:07:7B:7D:1B
X509v3 Authority Key Identifier:
keyid:1E:ED:FB:17:B8:7D:D9:59:A6:88:5F:4E:CB:DE:6C:4F:76:48:19:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hu37F7h92VmmiF9Oy95sT3ZIGVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/N4tYZJ0HXEClgd1jwhUuaQd7fRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/394f59-30f0-46b0-9680-c751995da013/1/Hu37F7h92VmmiF9Oy95sT3ZIGVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.185.0/24
Signature Algorithm: sha256WithRSAEncryption
48:09:6b:66:f4:16:41:4d:cf:90:9f:82:ad:b8:97:64:d0:fe:
5a:9d:7e:be:86:ec:cc:df:32:e7:77:bc:77:e7:ee:40:cb:82:
57:22:11:30:03:2c:c2:0c:64:5b:c9:fa:fc:ad:a1:aa:c1:7f:
b0:48:a4:63:1d:39:14:70:cd:c9:6b:fd:4c:56:4c:27:3c:f6:
53:bf:6d:0f:06:f4:69:6b:09:a3:af:23:12:fa:17:14:31:7f:
32:47:49:36:f2:86:d4:b3:80:9e:78:01:d0:7f:f7:aa:6a:7b:
1c:b8:84:57:c1:d0:aa:10:9f:50:f5:1e:82:fd:09:55:c8:57:
23:68:38:bf:a0:a1:61:cd:fc:06:c6:ce:14:e0:57:c5:02:a8:
86:84:e1:5f:c9:c6:cc:33:ad:31:22:a0:95:8c:1c:f1:5b:69:
20:3f:11:fd:48:9c:27:e0:da:73:be:82:b4:16:ff:bb:e9:a9:
10:e3:ba:c3:43:c5:59:29:80:0d:b3:7e:75:bf:ec:f3:d6:5c:
06:78:38:72:92:b8:73:98:c3:97:98:95:ad:3c:19:f7:56:83:
fd:5f:d5:69:3a:29:36:09:ba:1a:00:c1:ba:f1:40:22:22:08:
f5:28:ea:bc:24:5d:8f:68:8c:24:39:05:4a:b6:b7:c0:74:d1:
5b:88:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 07:56:37 2023 by rpki-client on console-fra.rpki-client.org