Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/99_muVZdbqU-w24phLDCaW_q12o.roa
File: 99_muVZdbqU-w24phLDCaW_q12o.roa (raw, json)
Hash identifier: /yyFgJA8Gwx86IxdpQfle1wPUiFYiEMvDR4JNhxijds=
Subject key identifier: F7:DF:E6:B9:56:5D:6E:A5:3E:C3:6E:29:84:B0:C2:69:6F:EA:D7:6A
Certificate issuer: /CN=88fe82b5548f3bf1d159c85c7ec96f4f0cb75e8c
Certificate serial: 018A1F0A6D384FB81B3DFB3F5C7C1B387E16
Authority key identifier: 88:FE:82:B5:54:8F:3B:F1:D1:59:C8:5C:7E:C9:6F:4F:0C:B7:5E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6CtVSPO_HRWchcfslvTwy3Xow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/99_muVZdbqU-w24phLDCaW_q12o.roa
Signing time: Tue 22 Aug 2023 20:58:11 +0000
ROA not before: Tue 22 Aug 2023 20:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136787
IP address blocks: 146.19.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:0a:6d:38:4f:b8:1b:3d:fb:3f:5c:7c:1b:38:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe82b5548f3bf1d159c85c7ec96f4f0cb75e8c
Validity
Not Before: Aug 22 20:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7dfe6b9565d6ea53ec36e2984b0c2696fead76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:ed:d3:ee:97:f1:61:c0:42:03:63:43:48:
20:80:50:7f:cf:c7:cf:3a:d8:b8:68:ca:9d:06:6c:
bb:bd:70:64:e9:e7:fe:6c:14:6e:1b:bb:56:82:0d:
d5:2f:3b:c5:ff:f0:0b:a8:9c:19:aa:1d:9e:1c:84:
d5:73:86:83:23:9a:39:f3:8c:64:cf:f6:61:ef:57:
0c:82:89:d7:48:e8:6f:2e:0e:f9:e4:65:a7:7f:50:
c3:e3:c6:07:5a:08:63:a5:96:49:5d:37:be:58:cd:
4f:b8:79:2e:a5:e0:a9:2c:02:2e:2b:2f:d1:3f:cc:
69:58:81:7b:69:74:a5:8e:99:9a:6d:8e:77:f0:de:
ad:aa:1b:fd:0c:8f:34:b6:f4:53:3b:74:0b:7b:57:
79:94:79:5c:90:2d:b6:2d:71:d3:67:0f:99:0d:ea:
4e:a8:f1:0d:4a:d9:b1:8f:c5:72:86:b4:2a:d9:e9:
a0:22:1c:e4:02:20:f9:2a:1b:57:6b:5d:be:98:af:
9e:09:56:61:39:7c:41:bf:8b:66:b3:e2:e7:30:10:
7c:a6:e1:51:50:4c:3c:c3:d1:51:7d:98:23:23:2c:
73:7c:fe:97:ee:f0:de:93:62:3f:23:d8:dc:a3:4e:
d0:da:53:23:af:20:b3:d3:87:d4:a9:b3:c4:74:61:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:E6:B9:56:5D:6E:A5:3E:C3:6E:29:84:B0:C2:69:6F:EA:D7:6A
X509v3 Authority Key Identifier:
keyid:88:FE:82:B5:54:8F:3B:F1:D1:59:C8:5C:7E:C9:6F:4F:0C:B7:5E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6CtVSPO_HRWchcfslvTwy3Xow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/99_muVZdbqU-w24phLDCaW_q12o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/481de0-8664-4413-ab87-03937a9ca018/1/iP6CtVSPO_HRWchcfslvTwy3Xow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:22:e0:7c:ec:fa:e7:17:3c:c5:f0:c5:fa:e7:36:49:b5:67:
3e:dd:b6:07:98:41:b1:06:3c:60:ed:2c:35:8c:20:8e:b9:39:
33:bc:84:8f:3f:42:03:2c:3d:d6:a5:20:8a:87:8f:43:b7:cd:
e2:1e:16:e6:40:bb:af:70:4e:71:a9:54:1a:45:7b:d9:70:8a:
55:f5:89:61:66:24:5e:22:99:c1:11:07:2d:fa:08:99:73:55:
e0:27:5c:a1:8f:90:d4:97:30:1f:a6:c1:42:b6:8e:9d:f8:bd:
e3:44:f9:5a:36:94:15:7a:cc:52:14:46:be:7a:5a:af:06:8e:
3f:5d:35:fa:a6:f6:29:e2:b3:9b:3e:63:a3:d9:3f:9e:b3:2e:
b9:53:ec:3c:84:ac:7c:da:e8:f7:20:2c:c4:45:1d:95:04:6b:
53:87:0c:f5:a2:72:90:7b:e5:28:d2:83:c5:46:12:72:ee:b2:
9a:bf:57:0b:03:0a:2a:64:ec:d0:88:c6:3e:e9:aa:5d:49:13:
3f:1d:7c:e4:07:08:d9:3f:e3:75:d0:22:9f:66:1c:38:81:5d:
55:38:49:e6:d1:2d:26:31:0e:ee:0b:65:db:1d:8f:64:fd:bf:
ec:6b:a7:16:1a:01:ab:f6:f9:f5:d4:79:4d:f5:a0:67:00:eb:
ae:51:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 15:01:45 2023 by rpki-client on console-fra.rpki-client.org