Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/juG4uypi2e2F8UoRQVrlhSc-Vc0.roa
File: juG4uypi2e2F8UoRQVrlhSc-Vc0.roa (raw, json)
Hash identifier: gQ7uHVeb0FRh5QFhQ0fQA58rVUwPoueGfFwhGXUcFok=
Subject key identifier: 8E:E1:B8:BB:2A:62:D9:ED:85:F1:4A:11:41:5A:E5:85:27:3E:55:CD
Certificate issuer: /CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
Certificate serial: 01856BD381734E3777C97C1A296502AF3EDF
Authority key identifier: BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/juG4uypi2e2F8UoRQVrlhSc-Vc0.roa
Signing time: Sun 01 Jan 2023 05:35:01 +0000
ROA not before: Sun 01 Jan 2023 05:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:81:73:4e:37:77:c9:7c:1a:29:65:02:af:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9614d1d5f1cc5d6e1ec530aa048ab247abfe88
Validity
Not Before: Jan 1 05:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ee1b8bb2a62d9ed85f14a11415ae585273e55cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:23:69:83:67:f9:dd:6c:e2:a3:26:30:2d:
fa:e3:2f:f2:2e:96:11:46:e7:f7:91:65:a7:c5:f1:
5b:05:bf:a3:d3:b1:c3:6c:fd:31:9f:55:6a:37:4f:
f8:71:df:25:c2:af:bb:2e:20:e1:82:82:0f:db:64:
8c:26:d8:fc:24:4e:9e:45:47:e4:c4:b8:cb:74:1b:
fe:26:06:72:d4:c9:1b:dd:4b:b2:01:72:92:10:83:
48:43:fc:c9:9e:96:10:ba:b8:85:24:24:4a:e4:28:
b8:86:a1:6e:fa:be:3a:9b:0f:c7:68:9a:7f:36:5c:
9d:8a:f0:c8:ae:18:48:30:2a:32:83:b6:d0:c3:a5:
53:bb:72:22:f2:96:96:1c:c9:da:fe:a3:b7:ad:29:
a6:f2:e4:52:c1:37:0e:5d:06:2e:4b:bc:4a:09:48:
9d:96:d7:de:46:c0:fc:59:e5:6e:86:d9:9e:41:55:
81:74:8b:d2:bc:5e:21:b2:17:58:f3:30:84:1a:21:
91:2a:45:76:90:5b:e0:d8:ae:a8:e8:ac:d1:44:a6:
70:20:28:16:7d:2a:07:48:e8:5f:4d:2d:ed:e3:41:
c6:74:7f:88:e3:91:20:65:fc:cd:fe:9a:16:c8:37:
74:dd:6c:09:ce:d3:bd:ce:f1:5e:dc:c4:a6:cb:a1:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:B8:BB:2A:62:D9:ED:85:F1:4A:11:41:5A:E5:85:27:3E:55:CD
X509v3 Authority Key Identifier:
keyid:BA:96:14:D1:D5:F1:CC:5D:6E:1E:C5:30:AA:04:8A:B2:47:AB:FE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upYU0dXxzF1uHsUwqgSKsker_og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/juG4uypi2e2F8UoRQVrlhSc-Vc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44ce44-e71c-42a4-b6ce-8830bbb4321b/1/upYU0dXxzF1uHsUwqgSKsker_og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b1:86:25:72:48:1b:6f:5d:59:df:8c:75:17:7e:16:38:7f:
68:d7:49:8b:66:46:79:93:e4:ec:7c:03:93:54:c4:70:4c:66:
54:a9:84:41:78:60:5a:cd:aa:7e:f9:37:03:3d:88:a7:de:d6:
77:cb:60:1b:e6:af:a8:c6:74:2d:34:68:38:64:08:6b:ca:15:
92:da:23:e8:df:ac:1e:65:90:20:fd:11:f5:05:8d:83:a5:57:
7c:30:29:8a:27:25:34:aa:0a:3c:88:d5:64:db:e4:ae:f3:a2:
ac:6a:72:aa:6b:fb:51:3d:9e:d6:07:c3:35:f7:c3:0d:8e:39:
2d:09:e7:7e:f5:6f:0f:9e:ad:26:ab:be:4a:ba:cf:9d:ed:89:
24:e4:55:be:86:f2:a3:d6:6a:33:67:a9:c0:55:fc:6b:ed:af:
f1:23:8c:29:e1:b1:e4:b8:1a:4d:91:44:d1:c1:31:ea:87:33:
d1:fc:4d:28:24:20:b5:d8:18:64:ec:b9:90:8f:b7:4e:98:0b:
2f:19:09:6d:61:40:37:bc:0e:e0:36:e5:58:91:ff:f6:6d:63:
46:71:54:78:fe:44:ff:c5:a3:a5:3d:ad:67:31:0a:ac:bb:27:
e0:11:bb:06:05:7d:ee:91:83:35:c9:e0:f4:97:52:16:41:48:
f5:ba:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:36 2024 by rpki-client on console-ams.rpki-client.org