Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/a0W8ykYLDuxowEVM6So-dXcwbo8.roa
File: a0W8ykYLDuxowEVM6So-dXcwbo8.roa (raw, json)
Hash identifier: 3jqMwJHsav5ahVMsLhq1o3VmVCuPc0bEZ2Ndo/uRhrI=
Subject key identifier: 6B:45:BC:CA:46:0B:0E:EC:68:C0:45:4C:E9:2A:3E:75:77:30:6E:8F
Certificate issuer: /CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Certificate serial: 0188916FEEEE35C357BD4E5F6A3B48C83B61
Authority key identifier: AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/a0W8ykYLDuxowEVM6So-dXcwbo8.roa
Signing time: Tue 06 Jun 2023 16:00:11 +0000
ROA not before: Tue 06 Jun 2023 16:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 146.19.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6f:ee:ee:35:c3:57:bd:4e:5f:6a:3b:48:c8:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Validity
Not Before: Jun 6 16:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b45bcca460b0eec68c0454ce92a3e7577306e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:85:e0:01:af:f9:6d:1c:0e:45:53:f5:cd:
e4:5d:c9:70:08:a8:c5:07:09:a9:f1:7d:85:bf:eb:
fa:7e:2e:fe:95:0d:c0:24:d0:61:99:ee:2f:93:20:
e5:66:41:3e:e3:77:e3:ab:a7:52:37:fd:9f:06:45:
7a:d6:5b:89:61:26:20:49:9c:d1:46:74:bf:ef:ec:
e8:dd:ec:68:86:ce:b3:9b:cd:59:51:8b:3f:35:a6:
7d:b7:bf:65:e9:5a:8b:65:f8:78:cb:af:34:0f:76:
83:c3:26:2e:4f:29:2d:30:8b:06:f1:f4:56:43:86:
08:3e:20:a5:66:d4:bb:83:e2:06:f0:6a:1a:7e:34:
d5:81:96:c1:d7:77:fa:ae:dd:96:c2:fa:ae:33:80:
14:65:30:80:47:c9:07:8a:81:4a:72:50:98:e5:8a:
dd:4b:d4:79:7d:0d:0c:76:06:61:e6:66:8a:20:5d:
02:46:52:e4:fd:ef:a5:bb:3d:35:51:84:2d:2f:09:
44:ab:70:a7:17:b7:40:b8:16:a9:5c:eb:ae:25:58:
52:a2:99:9f:3b:32:ba:91:66:07:48:11:45:98:b5:
d4:68:d1:38:f1:3f:36:c7:78:a1:d1:e7:19:e0:2d:
d1:5e:23:03:9e:fb:50:74:26:8e:86:79:13:bf:af:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:BC:CA:46:0B:0E:EC:68:C0:45:4C:E9:2A:3E:75:77:30:6E:8F
X509v3 Authority Key Identifier:
keyid:AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/a0W8ykYLDuxowEVM6So-dXcwbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.44.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b5:ed:e8:e5:54:0c:fa:de:80:a8:a7:70:f0:20:fa:d2:77:
1c:d0:1c:53:3b:0a:10:d2:e5:cd:f0:57:6e:d0:7a:16:fe:9b:
c9:60:cb:b2:11:02:3d:81:4b:03:e3:73:07:db:07:ac:87:a5:
74:b8:ec:2a:35:25:fe:2f:a8:a7:b2:32:a2:4e:7c:4c:f0:a6:
58:0d:11:e4:e3:c8:a9:e7:7f:86:aa:43:83:1f:42:7f:91:8b:
33:11:03:0d:84:b3:b0:33:01:18:87:98:c8:b6:c2:89:09:07:
52:f3:2f:59:f6:41:e9:a9:0c:c1:f7:b2:9a:73:5d:cf:01:43:
81:4b:34:50:63:a6:1a:1d:fe:e4:96:9a:1d:c9:dc:97:89:41:
78:ea:9e:a6:37:09:2c:62:5f:49:de:12:a7:d2:55:d2:2e:d9:
55:05:db:c4:db:c4:99:65:50:0d:bb:0b:17:31:51:d4:b3:f8:
0e:ee:75:66:e3:9b:44:49:c1:63:11:f1:1c:5a:de:a5:e1:e1:
c0:88:78:d9:42:47:55:5d:d6:ff:a5:06:0f:d8:35:d4:55:5c:
28:62:c8:27:25:64:a4:d7:5b:0c:a4:7c:1e:6b:b7:17:6b:24:
ca:5a:f3:c8:41:16:55:07:75:4f:ba:9c:58:8e:9d:a3:b8:dc:
ed:29:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:52 2024 by rpki-client on console-fra.rpki-client.org