Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/LT9e9rcs8F3XqA8jtqSK4Tg2EHw.roa
File: LT9e9rcs8F3XqA8jtqSK4Tg2EHw.roa (raw, json)
Hash identifier: uK71n94126HPx4CMZSzRS39qdXy8+NNwO57+vJDY0zE=
Subject key identifier: 2D:3F:5E:F6:B7:2C:F0:5D:D7:A8:0F:23:B6:A4:8A:E1:38:36:10:7C
Certificate issuer: /CN=112d594a2f1c937d8ad2bd050fe8e4bddbb96c7b
Certificate serial: 01DDA3C7
Authority key identifier: 11:2D:59:4A:2F:1C:93:7D:8A:D2:BD:05:0F:E8:E4:BD:DB:B9:6C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1ZSi8ck32K0r0FD-jkvdu5bHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/LT9e9rcs8F3XqA8jtqSK4Tg2EHw.roa
Signing time: Wed 15 Jun 2022 13:08:44 +0000
ROA not before: Wed 15 Jun 2022 13:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 146.19.97.0/24 maxlen: 24
2a13:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31302599 (0x1dda3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d594a2f1c937d8ad2bd050fe8e4bddbb96c7b
Validity
Not Before: Jun 15 13:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3f5ef6b72cf05dd7a80f23b6a48ae13836107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:21:dc:a3:69:c6:3c:d6:d1:84:03:3b:72:
13:46:96:cc:e8:85:12:a9:95:ba:66:87:b6:30:fe:
84:cd:98:41:b9:f6:af:a6:e0:a6:9e:e7:91:02:12:
18:f0:f8:ef:a6:d3:4f:d7:32:ca:2c:fb:b8:c4:5c:
25:4d:50:a5:51:28:6b:1c:66:b7:dc:64:d9:ec:4e:
a9:9c:0e:b4:08:ec:ef:ce:72:ad:8c:2f:ce:57:f5:
d6:cd:85:34:07:27:c7:21:c0:02:7f:14:00:e2:48:
78:a2:3a:82:b4:33:36:d7:9d:b9:0f:1a:e4:b1:62:
ff:b7:e0:b1:3a:4d:d8:ad:37:92:36:f0:5b:44:38:
c4:45:16:5f:d4:fe:d1:8f:b4:3a:43:6a:df:b1:3b:
1f:35:77:85:46:b2:a0:4e:b6:91:52:85:d4:3f:d1:
da:6b:e7:36:1e:56:a2:7f:8f:9a:59:94:0b:67:3d:
3e:6c:9c:be:a1:bd:0a:69:f6:07:c0:48:90:cc:41:
53:f2:76:50:03:9f:37:32:6f:12:97:f9:a7:d3:4e:
80:e5:ce:a0:aa:00:52:32:af:82:87:fc:cd:c1:96:
e1:7b:7d:30:bd:2a:3a:b6:81:c7:c6:61:96:02:29:
db:cc:06:82:11:98:7e:78:2f:b9:cd:32:41:3b:7b:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:5E:F6:B7:2C:F0:5D:D7:A8:0F:23:B6:A4:8A:E1:38:36:10:7C
X509v3 Authority Key Identifier:
keyid:11:2D:59:4A:2F:1C:93:7D:8A:D2:BD:05:0F:E8:E4:BD:DB:B9:6C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1ZSi8ck32K0r0FD-jkvdu5bHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/LT9e9rcs8F3XqA8jtqSK4Tg2EHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/ES1ZSi8ck32K0r0FD-jkvdu5bHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
4c:33:c0:f5:4b:d3:ec:3c:6f:50:c6:21:bb:d7:34:14:3f:dd:
b0:f0:83:66:67:5a:a9:fa:9c:e1:31:42:c2:7b:28:20:a6:73:
50:21:51:5a:be:ef:74:28:82:bc:6c:35:ac:05:6f:e7:9b:bc:
d9:a7:42:eb:6a:7d:36:a8:4a:16:ce:70:b3:dd:b6:12:ca:0a:
2c:a8:ca:87:48:e6:6f:6d:67:28:f8:dd:80:9d:4f:f9:27:98:
cc:e5:6a:e8:0c:d4:86:21:fa:1e:41:89:43:fa:f5:dd:94:f3:
af:05:5a:1a:95:c8:57:bf:46:96:15:98:f0:71:10:1f:ea:d4:
8a:b9:3e:82:18:f0:cc:82:cb:48:56:6a:f1:94:88:6e:3c:42:
7b:5c:44:bc:4b:66:66:1c:70:2c:9c:db:7d:b2:5c:e5:12:fe:
56:15:ae:82:b6:c8:ac:30:a5:53:45:fd:0c:3a:ad:76:58:7f:
64:f6:d2:15:a0:e7:b6:37:f6:63:67:4d:32:b8:45:ab:39:13:
62:80:8d:99:bc:37:70:d6:b9:e2:cb:96:9b:56:3e:13:01:a2:
6f:a8:48:fa:12:dc:1e:e1:3b:94:da:5f:fa:6d:a2:36:1e:e3:
60:96:e4:ae:93:c2:0e:37:ce:93:d9:4a:ed:ae:3e:04:67:b8:
db:dc:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:37 2024 by rpki-client on console-fra.rpki-client.org