Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/DZZnLxrhhZTOYybmzJx7zywnVqY.roa
File: DZZnLxrhhZTOYybmzJx7zywnVqY.roa (raw, json)
Hash identifier: YbHgjbWCmu83jRGWddOtsO88oHtDCQInUelGrOAsU7A=
Subject key identifier: 0D:96:67:2F:1A:E1:85:94:CE:63:26:E6:CC:9C:7B:CF:2C:27:56:A6
Certificate issuer: /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial: 01856BE5B4CB59834B5EB955FCD70DA04EDA
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/DZZnLxrhhZTOYybmzJx7zywnVqY.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b4:cb:59:83:4b:5e:b9:55:fc:d7:0d:a0:4e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d96672f1ae18594ce6326e6cc9c7bcf2c2756a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:2f:32:67:c0:2e:50:1f:77:54:ba:3c:eb:
b4:d1:1e:69:f9:a5:11:61:ad:4c:54:e8:d6:71:74:
0c:43:39:2e:fa:5f:d9:d0:84:c1:84:63:b1:5c:e6:
ac:79:68:8b:89:21:68:cd:97:1b:68:ab:8c:0c:b4:
47:9b:08:fc:a9:1d:8a:3e:dd:45:1f:d4:db:f9:7d:
cf:55:b3:10:18:88:55:a1:45:50:6a:dd:d7:02:c1:
0d:33:fe:3d:81:62:45:24:b7:93:1a:8d:e1:ad:9e:
1c:03:1c:b8:b1:c7:f5:b1:60:17:22:c7:ee:fb:0d:
bb:27:62:76:12:6c:07:cd:bd:e1:2b:84:22:2c:2a:
40:07:bd:3a:e1:a6:7f:21:77:bd:76:03:77:3d:0e:
28:9d:7d:ec:dd:35:8d:71:d9:af:b3:64:61:b6:10:
15:38:78:a2:f8:d5:9a:53:f5:7a:62:c3:c9:83:b0:
7e:4e:78:51:f1:44:71:cc:49:0f:d5:66:3a:4b:d6:
8e:bf:ce:71:8a:1b:df:72:3a:98:53:e4:cb:e8:6a:
2c:75:1a:52:be:05:89:0a:bc:5d:bc:5e:12:14:b0:
74:a8:d2:f8:ea:7e:3b:73:cb:26:c2:92:f3:2b:28:
b4:9b:9d:1d:65:0c:74:22:7d:ff:5e:7d:04:d1:f1:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:67:2F:1A:E1:85:94:CE:63:26:E6:CC:9C:7B:CF:2C:27:56:A6
X509v3 Authority Key Identifier:
keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/DZZnLxrhhZTOYybmzJx7zywnVqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2a:30:73:d5:6f:6d:56:59:bd:60:c6:68:db:78:9a:bb:0e:
f8:60:b3:0a:45:bb:20:0e:00:f1:4f:a9:fb:13:db:e6:91:6a:
8e:58:c6:8d:d7:51:c7:83:0c:4d:75:60:db:ad:6a:98:d1:39:
e5:26:28:33:96:e9:d5:d7:e5:c4:8f:f0:e9:4d:da:30:39:ec:
0a:44:81:4d:5c:8e:c3:e8:32:dd:e5:0e:ff:ac:f1:0f:bf:35:
7d:ea:f1:9a:da:14:89:be:dd:0d:f5:ff:9f:06:35:6d:96:08:
02:4c:05:1f:65:1c:0b:e2:64:62:dd:04:af:a8:bf:c7:59:1a:
30:a3:75:12:89:6e:dc:67:73:6b:39:bd:1f:f6:f1:87:9c:31:
a8:48:cb:1b:78:89:9c:65:64:8e:ce:d3:0a:b0:59:20:8d:c0:
79:a9:f1:81:7b:a5:96:25:64:c0:ce:18:c1:1d:02:59:c4:9e:
02:fc:2e:83:97:03:d1:ce:16:bd:db:b7:22:73:cf:f8:c0:56:
e7:78:89:50:f5:8e:87:3c:55:13:b2:19:07:16:c3:10:a7:53:
b6:bd:07:6c:67:dc:6c:3b:3b:b7:4b:11:f5:5d:1e:b3:b5:4d:
2d:8d:cc:38:7c:32:8f:7c:11:63:6b:ff:42:d7:4c:5f:82:09:
2b:c5:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:30 2024 by rpki-client on console-ams.rpki-client.org