Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Tljv2jjpTNjvrD0T_K9cBcw20cc.roa
File: Tljv2jjpTNjvrD0T_K9cBcw20cc.roa (raw, json)
Hash identifier: dLKiGoYD6FvLceGjn5RIJP3zSRAni/M4zQxHwNM8FhE=
Subject key identifier: 4E:58:EF:DA:38:E9:4C:D8:EF:AC:3D:13:FC:AF:5C:05:CC:36:D1:C7
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB92A0EE610E496A880FBAEFEB8D0A
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Tljv2jjpTNjvrD0T_K9cBcw20cc.roa
Signing time: Sun 01 Jan 2023 19:25:13 +0000
ROA not before: Sun 01 Jan 2023 19:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:92:a0:ee:61:0e:49:6a:88:0f:ba:ef:eb:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e58efda38e94cd8efac3d13fcaf5c05cc36d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:06:0e:8d:96:14:b3:8e:42:b2:91:b3:2f:
ea:98:50:7d:ce:23:e1:ac:89:03:59:ea:e3:76:1c:
53:44:11:62:35:8f:73:48:d0:bc:c1:c8:e4:36:50:
3c:60:ed:39:0d:3f:6f:b2:f8:84:66:5c:06:56:c8:
3b:39:92:ac:df:49:50:26:f3:40:09:ce:38:95:f7:
26:4c:80:81:d8:ec:80:0e:b2:72:82:85:07:f7:b2:
8a:a3:42:8a:d5:ef:8c:f6:20:a3:25:9e:b6:16:78:
4c:a1:31:c4:bb:62:42:2e:5a:85:d0:58:ea:02:3b:
05:ac:c0:b1:de:f6:e2:b4:fc:af:b2:dc:59:6a:d0:
b3:5b:9c:02:36:0e:c2:a3:50:24:19:3a:46:e0:5a:
a3:f3:68:ff:5a:4f:5a:de:14:fc:df:c7:c1:c8:3b:
d9:95:79:9f:ef:3d:cf:62:b4:2b:8f:28:04:d1:ae:
d6:63:a7:4b:ed:7c:ba:df:2d:4d:66:1c:42:9c:ed:
ab:93:87:57:9d:96:4e:5e:0b:1c:f8:83:0e:4a:5b:
7c:9f:11:c0:d7:35:b8:b1:02:e1:0e:79:4b:16:07:
df:ad:7d:eb:c0:8f:b3:7c:0e:0c:62:6a:4a:f2:cf:
64:64:49:36:d9:69:eb:e3:be:d2:45:26:f6:b5:de:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:EF:DA:38:E9:4C:D8:EF:AC:3D:13:FC:AF:5C:05:CC:36:D1:C7
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Tljv2jjpTNjvrD0T_K9cBcw20cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/23
Signature Algorithm: sha256WithRSAEncryption
28:79:b9:6e:ca:d0:5f:64:32:6b:8f:56:e3:e3:66:f9:ec:7c:
f3:6d:f2:0a:bf:38:8a:f6:c8:40:9c:b0:7c:46:3a:36:ad:a7:
9c:3f:22:77:8e:a7:67:d7:1b:25:34:ab:15:05:dc:62:a9:6d:
da:03:1b:f3:c8:8a:2e:81:27:b5:13:3d:e4:5d:bd:5b:f7:86:
97:d1:ba:87:f0:12:0c:6f:ec:b4:7a:01:82:d5:1e:c2:3a:b3:
b6:b9:4b:51:25:17:cc:72:b4:68:2c:dc:1a:71:70:75:57:c1:
94:82:fa:0e:b3:71:db:6f:97:df:e0:8d:fc:3e:37:07:47:86:
1e:d3:80:45:7a:bc:cd:73:33:83:5e:3c:ca:5c:e1:7b:da:ba:
ab:02:0b:5f:b3:de:6a:81:27:72:76:8d:56:76:57:12:40:53:
a4:d6:49:8b:16:7d:33:8f:71:d2:ac:a9:f5:98:67:1b:34:78:
97:0b:4f:96:dc:6e:21:a3:4b:80:40:3d:96:8f:8a:1e:72:1b:
f7:43:5a:fe:41:ac:e2:0a:d8:77:03:45:a0:56:c4:1c:22:69:
1d:0c:50:72:f3:43:8b:03:39:04:3b:e3:8c:6f:98:3b:35:5f:
74:60:d6:50:70:f7:cc:5f:d6:81:36:ca:de:fb:9a:e9:a8:15:
16:f9:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org