Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/pqxXRn1fQ86oL_86f8qbUvEgAzs.roa
File: pqxXRn1fQ86oL_86f8qbUvEgAzs.roa (raw, json)
Hash identifier: cm/5s2niMw67l4vJ/PYqrxvmOureyCa1GAvAk8BU0Wk=
Subject key identifier: A6:AC:57:46:7D:5F:43:CE:A8:2F:FF:3A:7F:CA:9B:52:F1:20:03:3B
Certificate issuer: /CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Certificate serial: 0182B4F2ED87C9F7E1EDC6F709EBDFBA5224
Authority key identifier: AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/pqxXRn1fQ86oL_86f8qbUvEgAzs.roa
Signing time: Fri 19 Aug 2022 07:13:15 +0000
ROA not before: Fri 19 Aug 2022 07:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 146.19.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:f2:ed:87:c9:f7:e1:ed:c6:f7:09:eb:df:ba:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Validity
Not Before: Aug 19 07:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6ac57467d5f43cea82fff3a7fca9b52f120033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:f2:16:3b:c1:79:80:93:bb:d7:14:fe:a4:
4c:3e:77:5e:f5:5c:e0:fb:ce:a1:5e:d5:4d:a9:b0:
c4:59:50:66:24:65:7d:b2:61:da:2e:e1:2d:1b:2e:
59:1a:18:e9:ae:da:3d:79:60:90:02:3e:bf:9f:81:
a3:d7:60:e8:a3:64:42:35:ec:fa:cf:4b:f1:3a:5b:
17:a2:87:f5:c8:57:97:44:08:80:05:62:a2:4a:83:
5f:1c:f7:0d:f5:b2:e6:da:47:54:7d:23:f0:5f:02:
bc:99:d0:43:45:51:e0:78:83:8b:b8:e9:32:4a:02:
cf:34:0f:7d:8d:5b:97:d2:30:f0:a3:b0:72:1a:06:
81:ad:88:a1:34:57:7c:df:7b:4a:e8:36:5c:b2:63:
d4:e5:c4:aa:d4:80:95:35:c6:04:6a:ad:7e:00:d5:
ba:a2:d7:e3:4c:38:2b:4c:b1:74:4a:ec:1c:9c:63:
84:95:28:2a:14:cd:cb:02:02:24:e6:a1:a5:11:31:
ee:08:19:d7:d2:46:45:01:e2:8d:ca:4a:57:bc:00:
c6:42:04:d1:68:f0:ce:3b:58:06:ee:a6:24:ac:b8:
ba:83:c5:ac:da:5d:cc:94:a4:03:2f:00:91:59:51:
3e:5b:3a:90:ed:ad:d1:ec:95:fe:39:31:83:6a:0c:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AC:57:46:7D:5F:43:CE:A8:2F:FF:3A:7F:CA:9B:52:F1:20:03:3B
X509v3 Authority Key Identifier:
keyid:AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/pqxXRn1fQ86oL_86f8qbUvEgAzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:ff:04:2c:e6:49:be:67:fd:b5:ba:bd:5a:85:4b:26:bc:
3b:33:5c:d2:e4:6c:47:a6:65:fb:69:d8:2a:7b:33:59:0f:5d:
cc:9c:81:10:4a:b2:16:52:13:4d:32:b3:00:34:b6:59:4b:f0:
96:a2:9e:8c:c9:24:3f:d4:f5:af:d0:70:78:53:f9:8d:9f:6a:
5a:fd:97:30:e1:5b:dd:ef:8c:52:bc:51:a4:a2:94:2a:c7:74:
f9:14:cf:af:02:f4:7e:4c:1f:28:ba:2f:2d:64:5b:39:26:fe:
0a:7a:b6:c6:4d:5e:7a:f0:c2:21:5c:2d:16:18:06:6b:aa:fb:
55:72:84:eb:06:0f:30:ea:5b:35:a8:60:cf:63:63:c9:28:fa:
00:55:f9:d2:9c:f2:da:2c:6e:35:ec:68:5d:b2:34:88:76:ad:
25:c0:f5:76:d0:3e:7a:4d:99:6b:b2:d1:97:5b:b8:c0:37:94:
d1:5c:98:b2:3f:eb:a6:d4:e1:ee:a8:ee:e7:32:18:5f:c8:4e:
bd:5e:f1:05:1d:52:2d:d8:a0:a8:92:68:e9:37:e0:cf:de:69:
4b:1f:8e:58:5d:84:d5:a0:45:b0:78:0a:bf:47:75:50:f3:02:
3f:93:6b:e4:79:69:53:e2:23:2f:0c:55:19:69:4c:7b:cb:3d:
bd:58:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:44 2024 by rpki-client on console-ams.rpki-client.org