Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/yqp5g3I5FladAxqjXYtnCBVSnkU.roa
File: yqp5g3I5FladAxqjXYtnCBVSnkU.roa (raw, json)
Hash identifier: dHN3/uSk25I9e68DbIMfXUZKERzJr1mYJLI9RMj9kw0=
Subject key identifier: CA:AA:79:83:72:39:16:56:9D:03:1A:A3:5D:8B:67:08:15:52:9E:45
Certificate issuer: /CN=1050049b5d860eff9364b3fe4c33d325bdebba21
Certificate serial: 01856D13B819C7A959279A3FE82D9B8AB9B0
Authority key identifier: 10:50:04:9B:5D:86:0E:FF:93:64:B3:FE:4C:33:D3:25:BD:EB:BA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFAEm12GDv-TZLP-TDPTJb3ruiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/yqp5g3I5FladAxqjXYtnCBVSnkU.roa
Signing time: Sun 01 Jan 2023 11:24:46 +0000
ROA not before: Sun 01 Jan 2023 11:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:b8:19:c7:a9:59:27:9a:3f:e8:2d:9b:8a:b9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1050049b5d860eff9364b3fe4c33d325bdebba21
Validity
Not Before: Jan 1 11:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caaa7983723916569d031aa35d8b670815529e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:91:31:24:a5:89:93:4c:6b:ec:31:58:38:
3a:22:0d:92:99:c7:7d:e3:43:52:27:e4:7c:9c:6c:
1f:22:9c:83:df:35:a8:e9:42:e3:f7:fa:1e:cb:85:
d2:a9:a1:99:4d:40:a5:ba:e7:5b:71:d1:e1:19:0e:
3c:30:5e:d2:ac:74:38:2f:9d:f3:37:4c:e2:ae:a4:
af:be:b9:04:e0:b0:ad:9e:6d:97:f8:39:ac:aa:e4:
bd:9a:06:0d:ea:ef:68:2b:f6:f2:76:74:e9:98:6a:
5d:04:47:8a:e4:5e:91:95:21:e3:6a:a0:af:c7:28:
7f:ec:6a:18:9f:11:1e:38:6c:39:aa:d2:4f:47:2c:
94:d7:07:cd:2d:ed:8a:a1:36:46:9e:54:5f:d2:a5:
7a:69:1e:22:64:94:e5:6d:de:e6:4c:83:00:d7:74:
ba:a4:7c:5d:87:b7:07:34:4b:41:ef:b9:e7:f3:27:
b2:f2:5e:e3:5a:cf:f6:06:e9:9a:1d:37:3b:ef:10:
bf:6a:83:b2:d4:ac:3d:cc:1b:37:7e:55:3a:cb:bf:
99:34:fd:2b:4d:5a:f0:69:dd:2b:1b:50:79:50:47:
f6:29:4b:56:46:6e:35:1a:52:98:6d:94:17:71:68:
0b:4f:ce:1f:de:e5:20:1e:2c:a2:bc:0b:c7:2d:d0:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:79:83:72:39:16:56:9D:03:1A:A3:5D:8B:67:08:15:52:9E:45
X509v3 Authority Key Identifier:
keyid:10:50:04:9B:5D:86:0E:FF:93:64:B3:FE:4C:33:D3:25:BD:EB:BA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFAEm12GDv-TZLP-TDPTJb3ruiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/yqp5g3I5FladAxqjXYtnCBVSnkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/40cc36-e1f9-4d3c-81d8-96cac7e7f1f6/1/EFAEm12GDv-TZLP-TDPTJb3ruiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:98:e0:6b:ef:81:9d:4b:05:f9:e8:09:60:7d:53:e3:8b:82:
3c:e0:f3:b1:98:21:e6:90:e6:35:51:b0:a4:c1:31:8d:c0:2f:
92:21:e8:e6:8b:83:cf:98:03:1d:17:a4:7d:f7:74:ee:2a:a2:
b8:cc:4c:77:d0:fa:8a:71:7a:63:ce:27:f7:ba:65:c1:47:18:
44:fe:a3:9c:51:1e:86:ca:a2:21:37:0b:c9:67:29:c8:40:36:
7f:5f:14:95:88:55:53:a4:91:6b:38:f0:8e:71:c3:45:b0:13:
8e:a0:9c:cc:9e:ff:18:0e:c5:b0:f8:4a:54:15:12:7c:8d:ff:
5f:a2:15:a5:91:2e:9d:8c:72:67:54:d4:3c:ab:dd:f4:65:e6:
8a:0d:23:d5:61:98:f5:e9:ce:01:6b:c9:63:d1:00:db:95:00:
ef:6c:71:2b:3b:c2:7c:91:3c:2d:8a:1f:46:b9:e1:8e:86:05:
de:b2:16:15:f3:f6:cc:b1:4d:0b:b5:ce:3f:b1:9d:44:59:c5:
2a:d5:98:43:c2:dd:73:76:67:c6:e1:ef:04:07:ad:1e:45:6d:
99:4b:16:ed:20:f3:03:48:0c:10:0e:e2:66:08:bb:e9:a0:6e:
0c:90:8c:3c:4b:3e:d5:fd:4d:f1:24:74:3c:d4:3f:00:0f:60:
09:02:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:46:43 2023 by rpki-client on console-fra.rpki-client.org