Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/H4dX9Pov-Wo2GRs3dPDRW_zUiGA.roa
File: H4dX9Pov-Wo2GRs3dPDRW_zUiGA.roa (raw, json)
Hash identifier: EGM9um3uuh+AABEGvjuraZygMFm84jOUaWI+da3HU4s=
Subject key identifier: 1F:87:57:F4:FA:2F:F9:6A:36:19:1B:37:74:F0:D1:5B:FC:D4:88:60
Certificate issuer: /CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Certificate serial: 018805C97711ADE1136260D652F64A11404E
Authority key identifier: DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/H4dX9Pov-Wo2GRs3dPDRW_zUiGA.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:11:ad:e1:13:62:60:d6:52:f6:4a:11:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f8757f4fa2ff96a36191b3774f0d15bfcd48860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:71:ce:39:3e:4e:84:4b:a1:d6:32:e3:b6:
82:7f:fc:5e:81:57:53:70:76:d4:e2:a9:d6:d7:bd:
0a:6d:fc:8a:f2:42:a0:d1:89:8f:3b:15:bc:a4:04:
c1:5b:b4:b6:53:95:85:ea:b5:1a:63:50:34:3c:9d:
ac:11:f5:f2:d9:8a:a1:ae:d9:c5:da:41:a6:a7:10:
b6:17:87:d1:4b:8f:f3:95:1a:69:50:a0:21:cf:66:
5d:70:63:3b:fb:28:3a:96:b0:3c:9e:2d:0c:a6:60:
9e:f2:a4:57:06:71:10:22:90:e2:50:a8:f9:ed:da:
b7:11:86:b1:15:55:37:97:b1:15:81:7f:7d:f6:6d:
60:dc:09:97:14:0c:94:d6:67:79:33:4c:e0:ce:24:
58:f2:0b:0b:44:68:a7:50:b0:85:c6:6b:f6:b2:a8:
e0:18:e9:02:10:72:e2:f7:c8:13:f4:fc:ff:a2:13:
10:9c:22:cb:12:06:3c:cf:64:ad:bc:96:e8:ab:8c:
16:52:c3:c5:2d:57:48:a4:d8:32:a9:b7:b2:89:a7:
69:d6:c5:22:99:50:d5:84:d9:bd:7d:fb:c6:e2:db:
29:75:ee:7c:12:69:0d:20:7a:02:79:92:0d:21:a0:
77:a7:6c:f1:e3:8b:ef:89:a2:55:b8:75:a3:0f:eb:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:57:F4:FA:2F:F9:6A:36:19:1B:37:74:F0:D1:5B:FC:D4:88:60
X509v3 Authority Key Identifier:
keyid:DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/H4dX9Pov-Wo2GRs3dPDRW_zUiGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/3vDiAmytPgwmX9bIH_WA2BBN7pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:f0:36:b0:a4:ae:91:a8:f9:32:e8:58:4b:3f:9e:cc:40:33:
37:46:7c:8c:9d:f8:1e:47:89:a8:76:a4:fc:20:52:bf:c2:40:
7b:79:f2:a2:2b:04:6b:ca:d4:9f:22:5b:65:cb:40:b2:76:80:
b8:f9:ec:4f:7e:8c:23:4e:fe:5a:46:76:ad:d5:66:cc:92:4d:
7e:97:01:ef:86:9c:16:1b:1c:c2:e7:dc:49:39:a9:b3:00:cd:
66:98:2d:88:78:76:f6:72:0b:b1:8a:f9:a8:a3:a8:4d:4a:47:
b9:5c:34:56:b3:9f:b6:4a:ff:cc:d5:76:33:8d:01:7a:91:ec:
9e:b4:21:d5:14:76:a3:2e:4d:13:a9:1e:a5:07:e7:43:4f:87:
3c:5b:c6:36:3b:45:ca:97:81:3e:93:e3:9b:f5:f1:e8:f3:e7:
b1:5d:2a:ab:e9:a3:b1:ae:d9:26:41:a9:b2:b9:cc:fa:69:5c:
f0:d2:17:8c:0d:07:82:28:73:0b:e2:72:86:34:70:99:1c:bf:
dc:5d:09:01:66:5e:34:0c:81:62:66:b9:dc:37:04:8e:9b:84:
61:15:a5:45:8c:a1:09:21:5d:f9:ef:c8:16:bb:8f:c3:fd:41:
45:ec:37:d2:f4:62:52:c3:fb:45:65:ff:c5:6a:91:67:50:8d:
ca:88:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:41 2024 by rpki-client on console-ams.rpki-client.org