Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/BoDKaaoKGrLsZ2MW4-cATRn0HAY.roa
File: BoDKaaoKGrLsZ2MW4-cATRn0HAY.roa (raw, json)
Hash identifier: dr23tYeSpfReQtb78UZpSuGAyucuYp0pwpdty4p7Gio=
Subject key identifier: 06:80:CA:69:AA:0A:1A:B2:EC:67:63:16:E3:E7:00:4D:19:F4:1C:06
Certificate issuer: /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial: 018401EE65D09ECA66383CF766B9A090A509
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/BoDKaaoKGrLsZ2MW4-cATRn0HAY.roa
Signing time: Sat 22 Oct 2022 23:01:51 +0000
ROA not before: Sat 22 Oct 2022 23:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147287
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:ee:65:d0:9e:ca:66:38:3c:f7:66:b9:a0:90:a5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Validity
Not Before: Oct 22 23:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0680ca69aa0a1ab2ec676316e3e7004d19f41c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:c9:24:c0:c3:43:d4:db:7b:2e:73:78:8b:
55:55:0f:7b:c5:73:91:58:7c:54:0d:f4:42:91:00:
24:73:04:7a:48:3a:2c:02:16:23:71:a3:97:22:6a:
a4:fb:1d:43:bc:b5:7f:89:c3:2d:a9:63:34:98:b5:
9c:75:24:03:05:e9:17:99:ea:bd:c2:54:dc:7a:72:
69:ff:38:ac:c8:35:5b:82:23:21:de:6b:be:c8:85:
bc:e6:5e:34:b6:47:75:49:64:10:b9:f1:52:94:96:
7f:89:d2:9a:f1:cf:1f:ac:07:88:bf:a2:f8:d4:aa:
02:b6:15:4a:99:0b:49:37:da:fd:d4:4a:a1:9d:1a:
c5:b2:86:06:79:85:f1:bc:ce:fe:82:7a:a4:68:d8:
06:5c:88:43:3c:8a:d2:cf:1b:62:e7:36:40:e1:0f:
54:72:92:64:f6:52:d2:07:79:d6:9f:a8:91:ad:6e:
48:f7:c3:69:97:ad:7e:fc:44:c3:63:31:5e:d0:3d:
d6:8b:55:14:9a:43:40:38:d2:b8:2d:3f:dd:0d:cb:
a9:f9:eb:b8:f6:b9:d7:0c:3d:cb:33:fb:3c:d9:f7:
6b:41:9c:1e:cf:6d:3a:ba:5d:07:a5:ef:57:cf:03:
34:6a:a6:83:48:a5:9e:89:71:15:a3:c6:7e:16:b7:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:CA:69:AA:0A:1A:B2:EC:67:63:16:E3:E7:00:4D:19:F4:1C:06
X509v3 Authority Key Identifier:
keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/BoDKaaoKGrLsZ2MW4-cATRn0HAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
40:37:39:22:30:3b:b4:a1:56:bb:6a:ae:eb:e4:2b:6b:9b:e2:
93:34:b6:7d:86:bc:a0:a7:76:e9:d4:12:98:26:d0:7a:02:ce:
74:fe:ff:79:b4:08:89:cb:57:a8:89:54:db:91:b1:70:83:18:
29:70:40:3e:39:21:15:17:7d:f9:7b:9b:03:f1:ee:57:43:cc:
ef:32:e3:1c:73:d5:1d:6c:50:9c:1e:e5:a5:d2:4d:49:4b:98:
be:eb:7d:de:c5:a8:86:25:cd:6f:26:ec:a3:74:64:7d:2c:50:
f5:e6:6f:f5:fe:d4:66:64:df:4d:ee:56:bf:43:f8:a2:ce:17:
46:e1:4b:8b:82:73:4e:64:60:e8:25:92:03:60:91:bc:1a:52:
ea:8b:57:c4:60:ad:48:02:7d:70:4e:b4:f4:37:c5:8a:64:45:
b5:59:26:e5:1d:84:2a:31:76:6f:29:e8:f0:a4:94:e3:e2:75:
4a:53:62:ef:62:52:1b:0b:6d:af:a7:a0:4c:42:ea:d8:c4:40:
18:32:a4:1d:ef:97:03:54:db:96:30:62:8c:c1:4a:20:25:17:
02:7a:f1:4d:ca:99:b4:cb:c0:53:26:6d:96:98:1e:c9:d3:bc:
dd:34:7e:81:e4:8b:97:09:ac:47:ea:25:60:d3:98:fd:e6:fc:
aa:15:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:26 2024 by rpki-client on console-ams.rpki-client.org