Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/ExJigYcFzMlatEGFPwZyhc48X1U.roa
File: ExJigYcFzMlatEGFPwZyhc48X1U.roa (raw, json)
Hash identifier: xhoMUcW/V5y5Ih6V+nS0cGKJq7KAGJQldKEwPqyAmao=
Subject key identifier: 13:12:62:81:87:05:CC:C9:5A:B4:41:85:3F:06:72:85:CE:3C:5F:55
Certificate issuer: /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial: 01855F63F894509D48028D8E58D2289C7E4C
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/ExJigYcFzMlatEGFPwZyhc48X1U.roa
Signing time: Thu 29 Dec 2022 19:37:45 +0000
ROA not before: Thu 29 Dec 2022 19:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:63:f8:94:50:9d:48:02:8d:8e:58:d2:28:9c:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Validity
Not Before: Dec 29 19:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=131262818705ccc95ab441853f067285ce3c5f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:de:ea:1a:e8:f4:d9:39:c0:8a:3e:b1:38:
e2:c8:b4:ba:a4:50:93:48:36:d5:fc:c4:f8:47:8e:
17:34:4c:b6:42:c8:22:83:68:28:e5:8e:e4:7c:81:
16:a1:79:83:04:0f:ba:b4:ff:46:67:47:64:48:03:
62:ea:f9:be:9b:75:0b:2d:be:ea:68:cb:ab:97:ec:
d0:9c:6d:9e:1b:60:48:60:9e:17:03:81:8f:84:78:
0b:6c:00:60:0e:c8:ba:95:75:d8:33:8d:59:1e:7c:
0f:74:a1:de:79:ea:e5:90:c8:fd:57:50:fe:1a:ca:
52:47:f3:52:cb:be:31:33:7e:ed:33:51:20:a6:d9:
1c:98:b8:14:c2:dc:7b:3b:33:15:d9:bf:09:a0:9f:
7c:70:7a:4a:26:9a:3a:6d:06:ab:5a:37:b2:bf:cc:
21:44:3b:c4:6b:e8:ec:ea:ab:d9:b2:bd:00:6c:3b:
ac:a8:62:66:06:11:09:68:91:66:15:c6:fb:e6:a8:
e6:01:2d:63:57:17:13:6d:1f:f1:92:77:5e:c7:6c:
bc:cd:a8:c5:36:65:f4:f3:de:99:1a:7c:be:6f:59:
df:12:a4:b4:d7:dd:27:5f:f0:31:f7:43:76:5c:e2:
a8:d4:79:ce:5e:9a:af:c3:cd:6c:77:a7:c8:21:81:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:62:81:87:05:CC:C9:5A:B4:41:85:3F:06:72:85:CE:3C:5F:55
X509v3 Authority Key Identifier:
keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/ExJigYcFzMlatEGFPwZyhc48X1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4c:a1:3b:c1:79:1d:80:c0:07:8f:80:19:7b:06:f3:52:45:
30:9b:8d:f0:3a:7f:dd:12:46:b7:fb:ac:f1:d1:96:3b:e8:7d:
6c:88:dc:d9:f6:ba:b7:0b:a9:ae:28:6e:54:55:3a:bb:be:e9:
79:d5:33:ec:a8:58:a7:e8:4e:7f:84:13:70:0c:5e:e6:d4:29:
bb:0c:0c:92:d7:19:2d:00:8f:20:12:c0:dc:58:97:d5:fd:99:
15:66:22:d5:cd:47:05:51:77:5d:7d:90:06:b6:25:31:4d:43:
f4:2a:6d:bd:19:6e:f7:a6:36:d1:1f:42:18:b0:1b:15:ab:85:
32:18:c5:9c:43:2e:d8:68:2a:3b:91:a9:c7:18:4b:63:02:91:
a3:3c:1e:75:54:49:38:a7:80:9b:2c:f7:89:c4:4d:ed:d4:93:
cd:36:5e:f1:a1:e5:85:e8:35:b3:9d:36:dd:f8:20:74:11:72:
d0:50:fa:94:f3:bb:4a:ea:51:00:55:ec:ff:39:9e:dd:aa:d4:
f6:c6:7b:84:32:a3:3e:1d:1e:5c:5b:0b:cc:16:90:a8:bf:1b:
eb:5f:14:d7:63:5e:6b:42:90:12:33:0c:89:4a:d8:13:ae:e9:
49:43:37:b0:7e:43:90:e7:39:15:5e:d1:2f:bd:84:48:0a:12:
44:b7:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:26 2024 by rpki-client on console-ams.rpki-client.org