Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/OzBAb6lbyI-PjcCSJDHVthqysV4.roa
File: OzBAb6lbyI-PjcCSJDHVthqysV4.roa (raw, json)
Hash identifier: MiK7wVi/89qsbzFfzBBPEyHaRlnUFtg+aywWgV4ibvM=
Subject key identifier: 3B:30:40:6F:A9:5B:C8:8F:8F:8D:C0:92:24:31:D5:B6:1A:B2:B1:5E
Certificate issuer: /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial: 01833D83DE5332B85478B967CD540DC3AC38
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/OzBAb6lbyI-PjcCSJDHVthqysV4.roa
Signing time: Wed 14 Sep 2022 19:39:55 +0000
ROA not before: Wed 14 Sep 2022 19:39:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57428
IP address blocks: 146.19.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:83:de:53:32:b8:54:78:b9:67:cd:54:0d:c3:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Validity
Not Before: Sep 14 19:39:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b30406fa95bc88f8f8dc0922431d5b61ab2b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:7e:8c:e6:a4:4e:ff:df:0a:af:74:d8:5e:
29:86:18:f3:b4:4b:fe:ec:13:47:f9:d1:e4:03:fc:
2a:32:44:f6:6d:63:28:9f:ed:67:d0:d1:04:5f:aa:
2a:08:7a:cf:ed:6b:fb:8f:bd:72:c8:27:2c:dc:f2:
73:3c:93:69:f9:1b:dd:42:94:27:30:98:20:c4:63:
f0:8a:b4:5c:4c:27:7e:c9:6d:a1:8d:d2:9b:7a:20:
38:67:ff:24:3e:86:9e:26:1e:8d:b5:0f:bd:e3:fb:
4d:64:36:d5:97:55:7d:cf:1e:17:0a:f1:00:64:f5:
15:54:bf:2f:62:65:a2:5a:1a:b8:09:83:72:f3:86:
38:5b:20:6a:7c:01:5f:31:99:27:1a:19:89:ed:aa:
5f:24:93:e3:43:09:18:81:02:24:b5:48:04:3b:99:
3a:85:a8:41:d5:7d:a6:a3:24:e2:18:99:78:43:28:
46:b9:73:51:8f:43:b8:9d:af:80:79:47:4b:4a:1e:
83:8f:83:66:cb:fc:55:fa:b4:ca:25:a7:08:8d:f1:
be:c5:81:f0:f5:a6:65:1d:bb:14:4c:a8:11:f4:50:
72:d5:af:12:c4:1b:80:6d:5d:d4:7a:78:4d:08:37:
6a:3f:57:c3:13:7f:93:14:4f:5b:54:8d:7a:ae:2c:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:40:6F:A9:5B:C8:8F:8F:8D:C0:92:24:31:D5:B6:1A:B2:B1:5E
X509v3 Authority Key Identifier:
keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/OzBAb6lbyI-PjcCSJDHVthqysV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
Signature Algorithm: sha256WithRSAEncryption
99:43:0c:fe:76:98:e8:06:26:b9:c3:5f:a6:69:e8:0c:06:43:
18:77:9f:1f:e8:c6:e3:41:4a:f8:1e:bb:e0:3b:50:c9:79:0d:
44:15:61:8a:d4:eb:c8:c7:df:a8:7c:c1:12:ba:3d:0f:b6:91:
ad:5a:33:1a:5a:da:af:af:55:e5:82:58:7d:9f:0a:45:47:d6:
ea:63:5e:eb:a1:dd:b1:8f:80:8d:a2:c8:ef:7e:53:b4:e9:75:
32:5b:c8:7f:9a:b2:c3:c8:b9:5d:8e:3b:79:51:1a:ba:22:2d:
20:47:c3:80:17:1b:1f:06:e1:67:b2:b1:58:9c:d8:5a:a3:8f:
02:89:b5:f6:d1:29:82:10:80:4f:c0:e8:58:18:09:8e:9e:21:
d5:35:e3:3f:e2:ae:6b:6b:2d:4e:e7:b5:65:32:10:a8:96:8b:
2b:db:b9:f3:fa:d4:85:cb:27:2c:51:53:25:63:09:15:a3:a2:
b2:d2:9c:15:85:ce:e4:9a:bd:3a:e7:cc:48:f0:74:ee:a5:ef:
19:76:b8:4b:8b:08:b4:c6:91:44:f8:30:e5:46:a2:0a:97:2a:
d8:d9:4e:79:ba:fc:cf:0e:2c:26:b3:b5:34:20:76:67:8b:3e:
00:76:a8:85:56:b8:f7:52:fc:b0:9e:a9:35:51:ae:fd:f7:f7:
e0:7d:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org