Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/XLX_Mksbh8ZiZ3To-dgeEwpku_8.roa
File: XLX_Mksbh8ZiZ3To-dgeEwpku_8.roa (raw, json)
Hash identifier: +ep4FywlnBFLmBdkALsa5OhEYCzh93grYt0gaaU95qs=
Subject key identifier: 5C:B5:FF:32:4B:1B:87:C6:62:67:74:E8:F9:D8:1E:13:0A:64:BB:FF
Certificate issuer: /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial: 0187806A480AA3882B0CF6F6A18AEBFCA7AA
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/XLX_Mksbh8ZiZ3To-dgeEwpku_8.roa
Signing time: Fri 14 Apr 2023 15:37:41 +0000
ROA not before: Fri 14 Apr 2023 15:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:6a:48:0a:a3:88:2b:0c:f6:f6:a1:8a:eb:fc:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
Validity
Not Before: Apr 14 15:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb5ff324b1b87c6626774e8f9d81e130a64bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:97:e1:06:f5:fc:af:1e:10:23:f0:c4:63:
4e:a8:24:14:c9:00:1f:23:d0:fe:37:8a:55:22:5a:
08:67:f3:10:5f:6e:2b:84:e3:29:46:62:54:91:96:
bf:1f:09:16:63:d7:23:09:4a:7f:d8:68:10:d8:2d:
f8:9f:74:78:ad:d3:22:0e:7e:91:6b:8c:aa:c4:1e:
ae:cd:ca:2e:46:db:5f:63:d1:8c:53:4d:82:b5:7c:
5b:ca:5b:b7:05:2a:64:86:7c:4f:e2:f3:1d:fe:d4:
bd:bb:24:73:c1:ae:98:d9:d3:36:86:18:00:20:be:
1a:db:5d:ab:70:61:27:77:49:b6:0a:59:72:01:f7:
5f:d6:fa:fa:2c:e0:72:25:f1:ea:46:76:f9:ba:07:
fb:8b:14:70:f0:da:b7:43:c1:a9:59:d2:7b:f0:f6:
60:62:fc:fa:f6:28:22:4a:2c:49:d4:6b:03:20:96:
b7:0a:b7:df:a6:6e:0f:0a:02:e7:63:3a:1e:13:0c:
47:1a:5f:f7:1e:9d:f2:84:6c:e0:b1:d8:7a:05:4c:
6e:9a:53:c0:9b:13:1f:23:85:f2:18:94:02:05:02:
23:3f:e5:88:f6:33:d8:32:7a:39:8c:81:c9:27:1d:
dd:38:e2:3e:bd:67:5c:01:3e:92:a9:15:50:06:ee:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:FF:32:4B:1B:87:C6:62:67:74:E8:F9:D8:1E:13:0A:64:BB:FF
X509v3 Authority Key Identifier:
keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/XLX_Mksbh8ZiZ3To-dgeEwpku_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f8:28:d9:86:ad:3c:f1:7b:cf:39:de:f1:6e:0f:56:fb:10:
d5:ad:1b:0a:4e:14:4d:78:1c:4d:4a:f2:60:08:9c:b3:d7:51:
b8:35:17:be:2f:08:51:b2:4e:28:bb:a6:6e:69:0d:66:75:73:
fc:00:55:22:e5:64:dd:ec:ad:d6:10:d8:05:d1:f5:21:b8:db:
24:73:a2:34:5d:13:dd:af:5a:f3:4a:d1:98:ca:c2:d7:7c:61:
7e:a0:0c:0e:5f:a4:3e:2f:28:1f:c0:9c:e4:10:0b:a0:da:1c:
33:1a:07:72:bf:56:e8:c3:1b:18:d0:c8:df:aa:d1:fd:51:36:
8b:32:88:4a:c4:c9:89:93:fc:89:e6:f6:ed:2f:1e:b0:06:9b:
3f:0f:8c:3a:95:80:e4:17:79:cd:fb:78:21:3b:62:32:66:8e:
1b:95:e8:29:a1:2c:6c:99:93:54:84:7a:56:76:6d:c6:14:7f:
f2:f6:b6:09:f5:2b:2a:81:b0:97:f7:1e:85:22:d2:8e:14:bf:
06:12:c7:b7:54:bb:c5:44:86:22:8f:d8:d8:51:a7:86:0c:62:
1d:8d:cf:f6:96:cf:8e:cf:c4:b2:c6:52:6b:4c:59:1f:89:19:
f2:f0:c6:7f:86:59:ec:42:38:15:89:e8:d8:01:4c:12:57:0d:
02:7c:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:45 2024 by rpki-client on console-fra.rpki-client.org