Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/i7FuQZqrQACh70qm6xG1VOQP82Q.roa
File: i7FuQZqrQACh70qm6xG1VOQP82Q.roa (raw, json)
Hash identifier: RV9WC0WOAGuRJJ1cscNpr9UpDK1dErYLi6eTFvc5kvQ=
Subject key identifier: 8B:B1:6E:41:9A:AB:40:00:A1:EF:4A:A6:EB:11:B5:54:E4:0F:F3:64
Certificate issuer: /CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Certificate serial: 018CC2DB605F243E358C34A33F944192E171
Authority key identifier: EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/i7FuQZqrQACh70qm6xG1VOQP82Q.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34939
IP address blocks: 146.19.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:5f:24:3e:35:8c:34:a3:3f:94:41:92:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bb16e419aab4000a1ef4aa6eb11b554e40ff364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:db:73:01:64:d5:d1:6a:44:bb:9f:f4:b6:
76:3c:6c:1d:2a:73:71:ea:3a:11:ab:72:82:ec:f0:
93:8c:b4:6a:e7:28:f3:66:98:a4:5b:bf:51:3d:c0:
4b:ea:ec:4b:b0:e2:4c:71:8e:2c:dd:28:fc:5a:6b:
14:cc:62:fd:c9:65:e5:9c:69:b3:54:94:fe:53:69:
38:2b:74:a9:2a:fa:e5:74:1c:70:f8:63:3a:3d:b9:
e0:95:a0:f2:60:35:e1:31:56:6f:e1:38:06:ea:e6:
cd:44:cd:e7:18:62:2f:a3:30:69:93:dd:c7:00:90:
b8:a7:85:44:9f:00:5f:78:8c:6d:cc:fb:74:4e:81:
4c:54:84:02:3e:58:71:88:41:8c:14:37:5a:46:a0:
4d:c3:33:4d:2b:fc:65:ce:81:5d:50:19:e5:40:38:
b1:d5:78:3e:0b:8a:14:db:1e:b7:26:f6:6c:37:8e:
2a:2e:62:a8:8a:d1:1d:a0:5e:1e:14:0f:5e:fd:9f:
e3:5b:2e:49:77:af:6f:79:f3:b8:23:4d:fa:07:dc:
2b:23:bf:a2:fa:9d:a4:cc:53:9a:26:5d:e5:04:9c:
e2:a5:c3:c6:aa:0f:5d:39:8d:24:25:da:92:b7:1a:
40:69:d3:c7:dc:8f:be:01:0e:0d:0d:c4:f3:5c:bb:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B1:6E:41:9A:AB:40:00:A1:EF:4A:A6:EB:11:B5:54:E4:0F:F3:64
X509v3 Authority Key Identifier:
keyid:EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/i7FuQZqrQACh70qm6xG1VOQP82Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.14.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d9:60:52:f1:39:d5:46:37:62:99:bf:50:0e:16:87:23:51:
07:74:99:0f:53:a0:14:cf:4a:9c:57:bb:da:76:2b:9b:12:4b:
5a:fa:60:45:1e:dd:fc:99:f5:34:9b:68:b3:c4:6a:a6:cb:e5:
9c:36:de:fb:3a:da:b1:54:c3:cf:cc:45:0b:33:2d:cd:c2:b6:
0d:cf:d6:a5:2d:8f:12:f0:53:7c:c0:dd:c8:ca:f4:a6:96:1c:
f1:2c:32:16:ea:3a:a1:73:5e:9c:ea:ad:f7:59:f8:e8:9c:fa:
e7:d6:70:e6:60:4a:eb:00:54:f7:a4:26:ee:2c:1c:e5:a6:b5:
82:d6:35:df:ca:96:9c:d1:c2:33:8e:ba:7d:06:12:25:a8:f9:
98:d9:a8:12:11:d8:03:b9:68:ef:19:df:b2:18:9f:ed:91:9e:
e3:68:9a:e1:02:10:fe:14:61:b7:51:69:a5:d3:0e:a5:cf:87:
37:d9:55:7b:ad:93:55:5b:cd:2e:e6:e0:1f:d1:ea:6a:28:3e:
35:c4:d4:11:b0:f4:35:14:4c:ab:1a:95:00:e2:47:eb:22:4f:
2c:32:aa:fe:a8:e2:02:2e:09:c1:e8:c5:51:00:0d:cd:ce:79:
ba:32:6b:5c:5a:aa:4a:ac:c6:fc:1f:4c:90:d2:1c:61:94:15:
3a:f0:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:19 2024 by rpki-client on console-fra.rpki-client.org