Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa
File: EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa (raw, json)
Hash identifier: ULqMLbo3nnRvJiaWcMxlcz/gJxYKtAgiV7sPX8Zks6k=
Subject key identifier: 12:D1:98:4B:A5:82:BB:32:83:14:9E:E0:59:F6:4D:0C:2D:AB:D9:61
Certificate issuer: /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial: 01875FBD1DA2041B0B33305E957B0DD4D715
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa
Signing time: Sat 08 Apr 2023 07:20:42 +0000
ROA not before: Sat 08 Apr 2023 07:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211484
IP address blocks: 146.19.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:bd:1d:a2:04:1b:0b:33:30:5e:95:7b:0d:d4:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Validity
Not Before: Apr 8 07:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d1984ba582bb3283149ee059f64d0c2dabd961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:f3:8d:2f:de:14:af:f3:11:28:6e:03:bc:
66:a9:c1:63:d4:69:00:c3:06:b5:01:d6:85:94:a4:
0d:b4:be:14:2b:5c:6c:51:23:30:49:0a:81:6a:28:
cd:df:a2:91:34:0d:d9:77:03:dd:f9:a5:8c:ce:c4:
e8:74:12:6a:40:d9:e9:8a:0b:70:60:a5:2a:8b:62:
7e:5c:f7:af:b9:06:5e:65:91:4d:b9:bf:52:34:61:
c3:c8:c7:86:af:2d:02:e6:11:dd:13:f8:3a:ae:3b:
f2:0f:f2:8c:30:2d:4a:d4:90:c7:86:31:cb:f0:fa:
2b:1b:92:f0:ed:e3:12:c9:d0:88:a5:0f:6d:d4:3e:
4d:53:ed:88:e9:25:e3:f3:bb:ff:49:4d:2d:b7:40:
cd:c4:06:e2:48:8c:0a:4c:d2:22:03:91:3e:0a:80:
39:2b:de:7a:bd:1b:42:15:82:04:6a:a1:10:10:83:
91:a1:c3:a0:c4:36:1f:a6:e3:94:2f:cd:38:21:9c:
bc:26:0f:88:fc:fe:f6:2f:bd:f9:1c:2a:5d:60:3c:
74:07:70:21:01:87:51:05:45:f1:b7:11:13:3c:dc:
a9:fa:be:ac:88:99:c9:7d:d3:74:36:06:57:e7:2c:
41:85:88:99:a5:2c:82:8f:40:50:09:37:ad:9d:67:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:98:4B:A5:82:BB:32:83:14:9E:E0:59:F6:4D:0C:2D:AB:D9:61
X509v3 Authority Key Identifier:
keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/EtGYS6WCuzKDFJ7gWfZNDC2r2WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a4:33:59:9b:cf:d0:34:cf:28:80:6c:31:b5:30:19:03:81:
24:f6:3a:c1:e7:f2:64:79:5b:12:35:4c:1a:8a:97:4b:6d:cb:
68:1d:98:83:58:f6:12:ba:f8:4f:52:74:4c:6e:cb:cd:63:67:
ea:79:23:d7:2b:d3:e6:fd:4b:a1:1a:b5:5e:ff:df:85:4a:ba:
b5:20:19:b5:88:ef:79:9b:16:5a:30:47:5b:cd:55:f1:58:1d:
44:8b:69:db:38:49:6a:fa:d2:36:f0:24:99:cd:6b:11:33:75:
b6:06:2c:9a:8b:71:73:c6:99:f9:56:c0:49:23:6e:c9:bf:ad:
45:d5:31:80:44:db:f2:f5:ca:2c:ab:3f:14:55:18:c9:4b:0a:
46:b0:2a:59:fd:3a:96:32:49:47:5f:de:2c:08:57:2d:ba:23:
34:6f:76:05:10:22:66:1b:49:e9:18:67:0d:9b:ae:eb:40:75:
e8:7c:4c:ce:6c:ba:4a:36:fd:c3:46:30:bb:a3:49:4a:f2:2c:
9d:b6:c7:a6:ed:f4:ca:d9:ec:b3:d0:9c:c5:62:ba:56:4f:31:
58:76:7c:62:4f:5d:50:66:8f:01:82:92:f1:b1:5d:d8:88:f2:
a3:2e:e3:a1:fb:6d:27:17:b3:7a:74:77:7e:59:99:6a:45:ce:
4c:60:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org