Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/3CQZKlR1sp1CwSLwvRvKMKUaCFc.roa
File: 3CQZKlR1sp1CwSLwvRvKMKUaCFc.roa (raw, json)
Hash identifier: Nhqg2mD28oagJchC3QbCCIxPBTUM0c3fviccsWkYCTs=
Subject key identifier: DC:24:19:2A:54:75:B2:9D:42:C1:22:F0:BD:1B:CA:30:A5:1A:08:57
Certificate issuer: /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial: 01877A9CB6171A365AF155FD8E0463FAB236
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/3CQZKlR1sp1CwSLwvRvKMKUaCFc.roa
Signing time: Thu 13 Apr 2023 12:35:03 +0000
ROA not before: Thu 13 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.149.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:9c:b6:17:1a:36:5a:f1:55:fd:8e:04:63:fa:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Validity
Not Before: Apr 13 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc24192a5475b29d42c122f0bd1bca30a51a0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:b4:e7:a7:a5:52:4e:7c:e8:59:0c:5d:74:
65:27:e8:21:63:63:ba:b5:1a:11:48:77:2f:ba:71:
33:47:99:0b:5f:9a:26:b0:47:fe:49:fb:e6:05:45:
d2:86:bd:81:0a:d8:65:6a:fa:ff:31:77:77:bb:79:
59:66:82:02:d3:09:57:4f:86:65:93:cc:4f:3a:2e:
4a:db:37:02:64:dc:e6:27:f3:6d:fc:19:1b:73:54:
40:1f:b5:75:4b:7c:bb:40:42:a1:bb:b0:e4:20:8b:
38:ae:4d:f4:e6:a7:dc:4a:4c:ba:b8:e9:a7:15:9a:
f8:4b:3d:16:c8:4f:85:c3:28:b2:e1:7a:75:fe:30:
ee:20:0c:0e:9c:07:11:80:26:50:20:4c:ee:f0:d3:
c5:c1:ed:6d:84:92:8b:38:0e:a7:28:e9:75:ab:04:
5e:0d:da:8b:ff:08:f0:f4:08:f5:3d:1c:3c:e3:55:
42:cb:9f:a0:7d:3e:0a:c5:19:f6:b6:69:dc:fb:0f:
b5:47:97:d8:e3:ff:5b:69:9b:96:8d:6f:90:f2:00:
b1:db:54:64:e1:c4:55:6b:fb:18:61:a8:5f:ee:4b:
d3:34:a7:3a:ed:9b:72:a7:66:c8:db:b4:47:36:e8:
2c:a4:05:f8:2c:18:24:31:90:4f:6e:7c:44:6b:52:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:19:2A:54:75:B2:9D:42:C1:22:F0:BD:1B:CA:30:A5:1A:08:57
X509v3 Authority Key Identifier:
keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/3CQZKlR1sp1CwSLwvRvKMKUaCFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:73:e4:c8:58:57:19:0b:8d:89:6c:3d:57:de:1e:6f:71:9e:
39:89:aa:97:9b:cd:f2:d5:1b:af:29:20:dc:4e:64:1c:aa:41:
b4:20:40:36:9f:c5:95:39:f5:bb:42:40:1c:75:e5:cf:81:77:
3f:36:38:b1:02:1c:a4:2f:a2:44:20:eb:29:c8:1c:10:be:72:
e9:21:34:89:df:f9:f4:22:84:23:e0:7c:15:4e:cd:83:b5:4a:
c0:9a:8e:9a:16:1b:78:ea:3a:d2:19:3f:85:9a:b3:7f:6a:60:
ac:37:5b:57:7d:15:64:6e:eb:2b:1d:9e:06:89:32:45:58:74:
9a:db:44:21:23:69:2d:37:3a:a8:17:0d:6d:50:73:f4:a3:e5:
73:c9:06:63:63:ab:99:1a:5e:c9:53:3f:93:34:f3:e9:21:de:
ac:6f:c0:66:b9:a3:10:38:af:31:14:c4:f7:25:32:6f:b8:07:
2c:d7:a8:11:f3:99:b2:45:66:57:f6:a8:32:db:85:79:bc:d8:
b1:93:20:97:1f:63:41:97:4f:c0:55:89:4e:75:32:3d:4f:73:
2d:ae:d8:f9:70:18:1a:cf:e4:af:d4:ae:42:be:0d:2b:10:f1:
c2:67:a4:15:64:6b:6f:fc:ab:b1:d1:24:2f:6e:e7:24:be:67:
25:7e:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:53 2024 by rpki-client on console-ams.rpki-client.org