Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/DFx9lTbljdVNyYgJAuLOmFP3eYQ.roa
File: DFx9lTbljdVNyYgJAuLOmFP3eYQ.roa (raw, json)
Hash identifier: RDAQK1KKyYeiNgsmKzg8J/sHtqKUCS9Gs4IUOpTZEm4=
Subject key identifier: 0C:5C:7D:95:36:E5:8D:D5:4D:C9:88:09:02:E2:CE:98:53:F7:79:84
Certificate issuer: /CN=8ccaedf2b9faac0c292f8e5ad47093140f385da0
Certificate serial: 01073E
Authority key identifier: 8C:CA:ED:F2:B9:FA:AC:0C:29:2F:8E:5A:D4:70:93:14:0F:38:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMrt8rn6rAwpL45a1HCTFA84XaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/DFx9lTbljdVNyYgJAuLOmFP3eYQ.roa
Signing time: Mon 03 Jan 2022 10:32:37 +0000
ROA not before: Mon 03 Jan 2022 10:32:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 146.19.206.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67390 (0x1073e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccaedf2b9faac0c292f8e5ad47093140f385da0
Validity
Not Before: Jan 3 10:32:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c5c7d9536e58dd54dc9880902e2ce9853f77984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:a9:5c:84:6c:da:64:f3:fe:6e:d3:b5:cf:
70:0e:6c:63:95:3b:86:bb:76:a9:33:04:11:dc:e2:
81:a9:e2:27:85:36:41:48:35:d2:03:53:e1:50:61:
bf:8a:8e:6e:da:96:7d:d3:aa:13:9f:86:71:2b:24:
14:9c:33:fe:1e:2d:fa:a7:8b:d7:0f:ff:ba:ef:09:
42:ed:03:20:37:17:d3:bb:3b:21:5e:d4:62:37:0f:
27:19:9c:d5:45:e9:2a:af:a5:a6:aa:15:2c:40:d3:
1c:c8:79:75:e7:36:27:50:50:53:e0:ef:18:06:da:
4b:73:6c:5d:10:a9:f9:9f:5a:ce:43:61:eb:91:71:
7e:e6:15:71:b5:d9:48:36:61:99:26:10:a5:bf:88:
85:e4:53:a6:6b:04:f4:35:46:b0:bd:91:cf:ae:55:
3b:c7:d4:bc:ae:62:01:c3:6a:42:c7:e5:82:a5:0d:
20:db:bf:95:57:77:b3:53:22:bd:f9:88:43:1f:41:
71:e5:25:5a:30:0c:41:20:d3:24:d7:39:2c:60:0c:
41:8d:83:79:16:3f:00:6e:9b:f7:ea:25:f0:1d:85:
dc:85:6d:13:62:63:11:70:cb:ce:45:d3:93:07:60:
97:e7:9a:05:41:b0:90:37:8a:d5:87:a8:b1:1d:a9:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:7D:95:36:E5:8D:D5:4D:C9:88:09:02:E2:CE:98:53:F7:79:84
X509v3 Authority Key Identifier:
keyid:8C:CA:ED:F2:B9:FA:AC:0C:29:2F:8E:5A:D4:70:93:14:0F:38:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMrt8rn6rAwpL45a1HCTFA84XaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/DFx9lTbljdVNyYgJAuLOmFP3eYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/jMrt8rn6rAwpL45a1HCTFA84XaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.206.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f8:97:cb:99:0a:89:25:89:59:34:6d:ea:b8:b4:e0:24:8f:
8d:85:ed:10:ba:dd:07:08:54:8f:12:12:75:2a:89:46:0a:5f:
26:ea:24:54:c0:59:1e:aa:e0:07:cd:d6:77:7a:df:fd:5e:c2:
98:14:28:5b:ff:b5:2c:3d:0c:61:27:e9:12:d2:63:6e:c8:3f:
57:b7:94:79:cd:bd:d9:a8:69:1b:7e:b0:d4:ae:06:9b:70:68:
72:e1:83:de:da:c7:71:9b:82:c6:ec:30:35:c9:ae:3c:8f:08:
5d:43:a4:78:1c:16:11:3f:8e:db:cd:a1:93:d5:e7:70:02:e7:
30:ba:25:38:46:e8:f5:d3:c6:05:2e:b4:d8:01:4c:eb:4a:00:
9f:14:05:b7:c3:ce:a7:d3:13:34:a6:56:a1:2b:f1:1f:02:c2:
96:1a:4c:c2:4f:41:03:53:2b:46:2f:5b:d6:5d:9b:24:f1:1d:
09:58:fa:79:f7:fd:3f:eb:45:f4:53:eb:66:0f:4f:5d:dc:39:
85:b4:2f:ed:9d:5f:a7:25:bb:95:83:d0:b1:9e:58:15:4c:9d:
d8:15:13:b0:3d:3d:cc:6d:f0:d4:b5:2b:51:cf:7c:b1:b0:d6:
93:d3:77:cc:7e:1c:d1:d0:36:20:2b:f3:b9:3e:ec:ed:8f:bd:
56:de:93:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:00 2024 by rpki-client on console-fra.rpki-client.org