Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/rZ836pccrMwt68xTqVDOwxJ-UMY.roa
File: rZ836pccrMwt68xTqVDOwxJ-UMY.roa (raw, json)
Hash identifier: +FPgsou5Tu5WGStHd5KGVMJAWEy6NZLrfThxmTPTzVA=
Subject key identifier: AD:9F:37:EA:97:1C:AC:CC:2D:EB:CC:53:A9:50:CE:C3:12:7E:50:C6
Certificate issuer: /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial: 0183A2DDC3745EFC02E2DE72638257174ABA
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/rZ836pccrMwt68xTqVDOwxJ-UMY.roa
Signing time: Tue 04 Oct 2022 11:59:45 +0000
ROA not before: Tue 04 Oct 2022 11:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 146.19.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:dd:c3:74:5e:fc:02:e2:de:72:63:82:57:17:4a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Validity
Not Before: Oct 4 11:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad9f37ea971caccc2debcc53a950cec3127e50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:60:77:d8:0e:16:c7:97:19:0f:10:ef:cc:
dd:30:1a:a9:be:b6:37:ec:47:14:0c:da:6f:f6:87:
7e:f8:9b:9b:5a:f5:2a:c9:0b:a7:4d:d9:b8:03:70:
8e:4b:6c:eb:d6:03:b6:31:6e:15:7c:75:e1:80:f2:
fe:2c:83:a7:d8:e9:2a:0b:7d:08:40:1a:4b:36:39:
1a:b5:9e:09:22:42:37:fc:b8:a3:3a:2d:1a:6e:c5:
d4:8e:28:4b:0c:81:9f:2d:0a:52:fe:25:24:15:e9:
75:e3:0b:e5:4a:e8:4c:46:8b:a8:df:d0:25:ea:4c:
af:a6:fe:05:2f:db:4c:97:99:dc:6d:0e:35:f2:8b:
70:bf:c9:42:60:81:38:b1:d8:f3:0b:fd:97:71:6a:
b4:73:78:32:4a:aa:b4:d3:1c:85:f6:0e:22:ee:7c:
6c:82:ff:8b:1e:46:64:d6:dc:be:35:2f:04:ad:59:
08:7d:17:9f:93:8d:70:a5:d6:26:8b:70:c7:51:2a:
99:22:33:14:4a:1b:aa:8f:78:24:98:e9:77:ce:91:
8f:55:da:75:65:d7:eb:1c:b3:4d:7d:81:5c:e0:24:
94:2a:24:e8:b6:1e:9e:86:fb:87:7d:12:d3:c2:b5:
0c:7b:7f:3a:a2:89:a4:7c:e5:97:11:95:eb:51:02:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:37:EA:97:1C:AC:CC:2D:EB:CC:53:A9:50:CE:C3:12:7E:50:C6
X509v3 Authority Key Identifier:
keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/rZ836pccrMwt68xTqVDOwxJ-UMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:dd:b4:66:08:6e:09:55:40:b5:c6:0e:03:9f:c9:2d:60:51:
a5:e7:12:c5:ec:4d:3d:da:ed:fe:79:9e:07:4e:12:64:92:68:
c2:49:ff:60:d7:09:67:fb:49:dc:fa:5c:99:73:0e:a8:e2:40:
ee:94:48:20:88:84:f9:36:a8:d3:42:50:2f:94:22:f3:38:a4:
31:9c:a7:58:4b:f8:a3:32:ea:59:02:ee:8e:8d:8c:bb:2c:46:
69:e3:ee:0d:cc:33:a9:be:ad:5c:10:3e:da:f0:da:fc:f9:0c:
08:22:f8:a2:86:d1:ee:32:52:19:1e:d9:9a:97:60:cf:a9:0a:
2a:0f:4c:d2:74:e5:ef:c9:38:f0:e1:ea:f3:a9:ea:b1:55:3c:
3b:cd:4a:1d:d1:93:4e:dd:8f:d3:dc:3a:94:59:11:6c:56:7c:
04:cd:b2:0c:f9:0c:12:b4:82:69:80:67:37:bb:f1:c7:37:cf:
a5:3e:b7:89:6b:83:9a:2e:d0:dc:5d:96:86:fd:1b:88:20:49:
3a:fb:c6:f0:01:80:16:25:13:5d:87:a7:83:00:0e:ba:0b:8d:
d4:61:ac:de:e6:6a:9d:88:ee:0e:20:06:9b:68:08:f3:d3:65:
c8:4e:39:49:b4:42:9e:92:fc:3c:9a:22:c1:54:71:18:7c:ad:
00:9b:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:47 2024 by rpki-client on console-ams.rpki-client.org