Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/iap1zOZf5cOtjTQbdThRVi6kWU0.roa
File: iap1zOZf5cOtjTQbdThRVi6kWU0.roa (raw, json)
Hash identifier: GJu8U69ohoWolcAIrCAefs23Q0u8/otyn4L5Q0iPwRc=
Subject key identifier: 89:AA:75:CC:E6:5F:E5:C3:AD:8D:34:1B:75:38:51:56:2E:A4:59:4D
Certificate issuer: /CN=759a67a63db091baf950d51ccd20827db8125b13
Certificate serial: 77C773
Authority key identifier: 75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/iap1zOZf5cOtjTQbdThRVi6kWU0.roa
Signing time: Sat 01 Jan 2022 00:57:45 +0000
ROA not before: Sat 01 Jan 2022 00:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7849843 (0x77c773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759a67a63db091baf950d51ccd20827db8125b13
Validity
Not Before: Jan 1 00:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89aa75cce65fe5c3ad8d341b753851562ea4594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:98:79:73:ac:f0:45:30:95:e3:e0:c9:67:
8e:5d:2e:c0:63:ca:fb:27:46:fc:1d:91:c3:b1:bb:
2f:4c:5e:1f:e6:d2:ad:65:7c:42:b0:26:28:2f:e2:
fb:66:5d:78:13:f4:25:1d:d4:4f:1b:39:01:0d:3c:
05:04:07:94:f0:8a:ab:da:96:27:84:ce:e8:50:d9:
ad:72:d5:ab:f8:b9:b1:4e:30:8a:5c:b5:77:e4:8f:
17:62:f2:d7:df:ab:51:c1:5f:b2:e6:b9:98:3c:46:
97:93:96:41:44:db:26:83:13:ef:74:51:8e:77:30:
34:5e:0f:b5:86:61:96:37:58:79:46:3c:be:ff:5e:
bd:d4:24:25:88:eb:5f:43:34:04:e7:5e:a0:96:8d:
92:d5:ed:76:db:ea:cb:42:d1:d5:c7:ee:02:3a:15:
89:a7:5e:b9:fc:87:16:52:1b:1b:98:50:03:dc:58:
42:53:a5:0c:28:07:05:e3:78:73:90:85:d1:cd:8a:
05:a2:f1:53:e7:c9:75:27:5a:6e:fc:f0:e7:24:9b:
e8:02:d6:e4:d8:38:73:0f:6a:41:21:97:f2:a1:3b:
ca:84:ce:8e:7c:02:e6:c8:7a:88:45:1f:04:39:e6:
bd:e4:e7:0b:4e:d0:e9:10:b0:30:38:30:95:c3:52:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AA:75:CC:E6:5F:E5:C3:AD:8D:34:1B:75:38:51:56:2E:A4:59:4D
X509v3 Authority Key Identifier:
keyid:75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/iap1zOZf5cOtjTQbdThRVi6kWU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.46.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:08:8d:f4:e0:0d:f6:6e:c9:2a:99:22:19:60:4b:3d:c0:2d:
74:7f:11:88:a1:b0:27:5d:f6:d4:93:fa:78:fb:e4:a2:bd:15:
10:8f:bb:75:77:01:d3:a0:ef:7e:1c:f6:b5:d2:4d:4c:4c:cf:
4f:54:5f:01:76:dd:de:5d:4c:ad:50:1e:be:83:85:1a:52:51:
0b:69:f7:73:12:1a:d0:b7:59:e8:d2:43:21:5e:1a:6a:9e:29:
ab:30:b7:62:27:be:5a:64:04:cd:01:0a:90:3a:68:32:b2:76:
f2:60:31:64:46:9e:1e:a8:18:03:b6:3c:00:d6:50:89:e6:4d:
34:85:42:88:59:60:81:c2:06:e4:38:58:0a:4b:e0:6e:bb:54:
a9:a9:77:13:bb:82:39:59:8d:e3:57:a3:f1:ec:23:6e:03:f2:
97:7e:f4:fe:73:3d:03:2f:3e:7c:79:f9:20:fa:af:f3:ad:66:
4f:60:fe:96:39:09:f0:e2:a0:e7:2e:50:90:29:d9:cb:42:98:
26:b1:e5:9a:01:4c:90:17:9b:b7:1d:d5:a7:f3:ed:f9:44:b7:
e4:1e:d2:61:d9:a1:5f:cf:90:f6:fe:f6:5d:d5:d3:aa:b7:d0:
ab:b3:b6:ef:ad:2f:45:b6:9a:34:e6:fd:36:2f:6f:57:0a:7c:
95:d5:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:34 2024 by rpki-client on console-ams.rpki-client.org