Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/AYNbHHTsTw6R257lw8TOgNtWRmc.roa
File: AYNbHHTsTw6R257lw8TOgNtWRmc.roa (raw, json)
Hash identifier: njOdIGLib/R6xfVoBeh1vFseRx7DzepAlueT4cDBGkE=
Subject key identifier: 01:83:5B:1C:74:EC:4F:0E:91:DB:9E:E5:C3:C4:CE:80:DB:56:46:67
Certificate issuer: /CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Certificate serial: 018571555E3B01A333B914E59D9B71136647
Authority key identifier: E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/AYNbHHTsTw6R257lw8TOgNtWRmc.roa
Signing time: Mon 02 Jan 2023 07:14:57 +0000
ROA not before: Mon 02 Jan 2023 07:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:5e:3b:01:a3:33:b9:14:e5:9d:9b:71:13:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Validity
Not Before: Jan 2 07:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01835b1c74ec4f0e91db9ee5c3c4ce80db564667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:fe:ec:97:a1:a8:40:3a:72:e0:f2:3d:84:
ac:aa:26:16:42:4b:1a:81:e3:54:ac:43:5f:72:95:
cc:b4:6a:93:d7:aa:2d:c5:c2:32:d9:96:0a:18:97:
ed:34:41:eb:42:21:5c:0d:c2:0f:6d:d2:75:d4:b3:
d0:31:84:41:05:04:6f:b2:d2:5c:3e:e5:18:36:2a:
4e:fd:1c:b0:3e:c9:b8:08:c6:f8:49:02:7c:7d:57:
b5:f0:50:48:c1:a8:da:48:d3:9e:9c:a2:f6:cd:44:
e2:b8:9a:38:08:9e:96:8b:a0:e4:d8:b1:ef:72:38:
8e:ad:9f:e8:54:82:4e:b4:08:04:0a:dc:da:43:ca:
5f:12:69:02:60:03:8d:77:ed:f4:21:6f:81:51:81:
45:28:67:ce:4f:5c:f1:45:de:10:ad:6a:2c:3b:26:
ea:e4:db:aa:ca:36:f6:99:da:fc:1d:a0:0f:79:93:
fc:38:95:8b:fb:14:69:c5:c6:77:c4:77:eb:b4:ae:
2d:c2:10:d7:ca:63:55:06:52:4f:3e:51:60:72:2d:
27:8c:46:cb:21:e8:21:5c:10:04:a3:bd:34:3d:06:
e8:63:df:bf:c0:d7:84:12:31:e6:55:73:3c:3c:2a:
04:eb:32:93:86:98:d4:d0:5a:ad:e4:a4:09:74:a9:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:5B:1C:74:EC:4F:0E:91:DB:9E:E5:C3:C4:CE:80:DB:56:46:67
X509v3 Authority Key Identifier:
keyid:E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/AYNbHHTsTw6R257lw8TOgNtWRmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/6XDHfDzgTnc0mmQRy3PPUeTv0PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:25:fe:73:8c:a6:ec:b6:da:0f:01:5f:d9:30:a6:0e:bd:71:
7b:39:c3:6b:8c:32:6d:46:3d:02:c1:78:c5:ff:dc:2d:ea:cd:
26:40:ea:09:ea:32:47:b8:ad:a6:be:56:af:de:9e:ac:dc:61:
5d:ac:87:06:01:17:fd:c0:30:34:16:ed:75:89:79:b3:0f:51:
22:3a:ec:ae:c1:04:18:a3:1a:fd:2c:4e:ba:79:2f:8c:5c:31:
e0:d8:16:53:7c:31:be:0c:41:6b:39:c7:f5:33:3c:55:4d:e8:
9a:91:c5:53:23:c1:a0:48:ef:ee:60:50:94:82:df:41:56:43:
b1:72:20:a2:da:8d:3a:6f:7c:3e:45:0f:6e:0b:db:70:88:96:
80:eb:fe:22:82:49:d9:a4:5a:be:8b:38:dc:f2:a2:35:1a:c6:
9a:6e:00:0c:35:4a:77:de:0c:aa:43:3d:96:f7:b1:a5:6d:c2:
a0:f2:7a:f3:6c:2e:6a:43:41:0d:76:b1:fe:c0:ed:5c:6c:7c:
31:81:c6:59:7f:4c:d5:26:f7:77:f0:5c:4e:b2:fd:ac:23:12:
b2:5f:00:9f:af:d0:7d:f8:ee:02:cc:cd:9e:ed:40:47:30:c0:
ba:48:86:ff:03:31:06:14:2a:96:61:b0:f1:c5:f4:fc:5c:10:
30:56:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:57 2024 by rpki-client on console-fra.rpki-client.org