Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/eZ6Nuh3V3Gn7OyspOuIwk_CU3TY.roa
File: eZ6Nuh3V3Gn7OyspOuIwk_CU3TY.roa (raw, json)
Hash identifier: aBPKGptRDKAiD5OBJOYCYepdS8Lwdg2NYrcnZ/1yOx0=
Subject key identifier: 79:9E:8D:BA:1D:D5:DC:69:FB:3B:2B:29:3A:E2:30:93:F0:94:DD:36
Certificate issuer: /CN=3f486112a026f37ba1b30a1fef568fd36215d28c
Certificate serial: 01857321DDA9933B149E2EC7AE2F5430D306
Authority key identifier: 3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0hhEqAm83uhswof71aP02IV0ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/eZ6Nuh3V3Gn7OyspOuIwk_CU3TY.roa
Signing time: Mon 02 Jan 2023 15:37:57 +0000
ROA not before: Mon 02 Jan 2023 15:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:dd:a9:93:3b:14:9e:2e:c7:ae:2f:54:30:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f486112a026f37ba1b30a1fef568fd36215d28c
Validity
Not Before: Jan 2 15:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=799e8dba1dd5dc69fb3b2b293ae23093f094dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:b1:b2:0d:2a:90:37:cb:bb:5f:55:d1:0d:
c3:24:e2:c8:1f:0c:6c:ee:9a:90:ed:f1:b0:c0:0e:
6a:94:d8:81:73:5b:3c:be:ad:3f:49:8e:1a:4f:a7:
23:85:a8:51:ba:2b:d6:60:aa:02:63:7a:94:a2:04:
ee:9b:80:5b:05:b7:55:29:d3:d9:30:78:db:f7:2b:
a7:e3:dc:1d:66:99:e8:83:c6:11:f2:72:0d:18:74:
f4:5d:43:a9:5f:2a:ec:d7:1f:28:29:5b:41:7a:f0:
81:1c:0b:2d:3b:b5:ba:2c:0b:d7:dd:d1:f0:6f:95:
bd:e4:d7:0b:fa:0a:db:f0:b5:11:b8:6f:6d:7b:b9:
5e:fc:a2:35:41:1e:fc:b1:cc:54:2f:26:90:f1:e3:
c5:a7:dc:ee:89:8a:d1:d8:03:63:25:8f:5f:0c:88:
5d:2f:be:04:29:9a:c1:67:85:ba:05:21:ab:4c:f3:
3f:1c:9e:cf:1a:84:d7:db:d4:ab:74:af:46:f3:e2:
28:9c:48:6a:01:87:a0:dc:a0:ca:54:29:84:de:e6:
a7:4c:bc:06:fa:ff:9b:7c:ca:f0:4a:5a:47:72:31:
a1:b4:e8:78:71:c8:2a:d6:df:7f:a7:d1:20:d3:d8:
1b:e3:a2:79:f1:9e:58:0c:82:f5:e0:d4:e5:87:be:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:8D:BA:1D:D5:DC:69:FB:3B:2B:29:3A:E2:30:93:F0:94:DD:36
X509v3 Authority Key Identifier:
keyid:3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0hhEqAm83uhswof71aP02IV0ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/eZ6Nuh3V3Gn7OyspOuIwk_CU3TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.126.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3b:af:4c:6d:0c:0f:7b:e2:a3:37:b4:97:5f:a1:50:dd:25:
0f:0a:a8:c0:dc:43:cd:65:a9:bf:64:4a:d1:0c:01:07:11:ff:
53:05:76:9f:78:b2:39:d6:78:a1:81:03:99:e0:65:31:f1:8f:
f3:97:ec:0e:36:12:58:b4:a9:f7:b5:9f:55:62:52:98:0e:ad:
16:40:26:ba:df:bd:d0:25:eb:f2:d6:68:25:73:f6:ae:78:9f:
87:5d:24:92:62:84:67:57:54:dc:a7:c1:17:bc:af:29:88:0f:
a7:19:10:5e:2c:d9:82:15:7e:fe:bf:fd:b3:c1:83:d3:c7:da:
e2:1e:c1:82:ee:b8:22:47:61:9d:06:76:bc:b5:88:be:d6:b2:
65:08:84:6e:c9:8f:f9:ef:66:1b:1a:40:af:6d:96:f0:65:3d:
7a:e9:1d:c0:20:15:0b:cf:5b:67:a8:f6:6e:73:dc:85:d3:dc:
c4:27:b4:cd:1b:04:02:bd:7d:a5:85:86:95:2c:74:66:17:d2:
c4:c5:d4:66:67:c6:a5:e4:06:32:d6:ba:36:e2:ce:25:26:1b:
21:85:a1:a4:7c:85:28:b8:33:31:1e:82:d2:18:d7:50:50:5f:
f0:c9:77:99:a5:f5:1d:77:59:90:1e:f2:0b:b6:0a:0d:b4:bd:
75:a9:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 10:49:32 2023 by rpki-client on console-ams.rpki-client.org