Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/poiKWEfLDb__UwfyfxngVROZJT0.roa
File: poiKWEfLDb__UwfyfxngVROZJT0.roa (raw, json)
Hash identifier: 8oL2LfAXOgKyKA5gBf5cJim7BE8frUxbcWJ6W/w0blE=
Subject key identifier: A6:88:8A:58:47:CB:0D:BF:FF:53:07:F2:7F:19:E0:55:13:99:25:3D
Certificate issuer: /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial: 0185550139A05ED54E7FED04A5D2F65A61EB
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/poiKWEfLDb__UwfyfxngVROZJT0.roa
Signing time: Tue 27 Dec 2022 19:13:41 +0000
ROA not before: Tue 27 Dec 2022 19:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:01:39:a0:5e:d5:4e:7f:ed:04:a5:d2:f6:5a:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Validity
Not Before: Dec 27 19:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6888a5847cb0dbfff5307f27f19e0551399253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:1b:8c:90:23:c3:73:e4:32:95:12:38:a6:
8a:b4:1a:14:bf:4a:0b:ef:51:c9:cf:f5:63:b3:d0:
b6:25:6d:c3:8b:8e:f9:7c:14:36:5d:cb:0d:b3:25:
96:49:a4:bc:11:d2:a7:a7:ff:a5:1f:1d:4b:12:8b:
63:83:ae:c5:f6:a1:6e:59:71:ad:14:9b:ec:b9:77:
3d:e1:7c:a2:9b:06:da:2d:77:d1:bc:36:c7:87:e6:
64:30:7d:f7:30:16:c7:20:15:ad:82:eb:b9:b0:2c:
49:af:9b:75:c8:c8:0b:8b:00:e0:28:e8:96:75:4d:
3d:ff:75:78:be:0a:4d:43:40:09:c5:05:bf:ae:48:
94:ac:6d:96:b4:19:11:48:17:06:32:9e:3e:52:c7:
06:34:61:5c:6b:89:49:3b:3f:fc:a7:a0:fb:f6:0d:
6f:59:d7:bd:ef:8c:2f:e4:85:5c:e6:7b:8e:23:a4:
4e:2e:73:fa:02:32:20:f1:33:e8:e7:b5:e0:9a:b7:
40:c2:36:eb:57:7d:9a:3a:f0:c6:00:5d:db:7d:1f:
c0:af:b0:37:0a:8b:b2:86:d9:92:a0:59:6e:88:62:
3f:b3:fb:fb:3e:d0:31:31:f9:dc:ab:75:7a:f3:f2:
29:23:7f:57:20:9e:e8:19:e8:bd:03:ce:90:a8:ee:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:8A:58:47:CB:0D:BF:FF:53:07:F2:7F:19:E0:55:13:99:25:3D
X509v3 Authority Key Identifier:
keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/poiKWEfLDb__UwfyfxngVROZJT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2c:f0:80:bc:b4:36:b2:cb:c6:c2:9d:c0:54:17:be:41:18:
69:8a:eb:69:6a:71:37:b2:1c:91:90:e2:9b:6b:82:ab:a0:ea:
8b:53:7c:44:a4:9b:c8:ab:e1:5e:f5:bd:ae:25:40:7c:81:4f:
a5:2c:7a:9d:5d:c8:5e:e5:71:6d:24:18:04:46:fc:3b:4e:b6:
a5:b2:92:06:ae:c4:80:c6:8e:56:d1:56:71:be:ff:40:88:23:
00:ce:b1:8f:ec:6b:fe:a1:d5:0e:c0:aa:83:0f:ea:33:c1:8f:
02:38:99:dd:18:0b:6a:20:9c:ef:61:d3:a5:c3:3e:06:d2:d2:
ae:8a:dd:c6:52:b4:35:57:24:cc:8f:48:dd:f4:a1:6c:4e:55:
76:0c:21:6f:b0:b0:7c:e3:c6:4e:a2:ac:9c:46:70:91:f2:1c:
1d:a0:71:3d:4e:8a:42:5c:40:4f:61:e8:b3:92:e4:23:f9:0a:
d5:5e:69:e5:59:02:f2:d8:5c:09:f0:f3:c3:cb:7f:5a:13:96:
fa:70:4e:7b:1a:0b:1f:0e:f6:80:a5:11:ad:c9:e3:7f:3e:6f:
d6:dc:51:aa:58:91:2a:a5:fa:39:cc:be:4b:e3:ab:08:f7:75:
c0:89:83:cc:18:37:8f:d0:0e:7e:c7:45:44:b9:1c:49:ed:99:
3a:9a:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:48 2023 by rpki-client on console-ams.rpki-client.org