Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/8dQTKoWBP1UJql_KpyDkWwuJBvI.roa
File: 8dQTKoWBP1UJql_KpyDkWwuJBvI.roa (raw, json)
Hash identifier: nTgQrmnuJcYX4Caw8Dtowu21d7KUPZdNTCeRCR/CcoM=
Subject key identifier: F1:D4:13:2A:85:81:3F:55:09:AA:5F:CA:A7:20:E4:5B:0B:89:06:F2
Certificate issuer: /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial: 0188D9300C2E650A3438D7611D4A1A0DD001
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/8dQTKoWBP1UJql_KpyDkWwuJBvI.roa
Signing time: Tue 20 Jun 2023 14:23:04 +0000
ROA not before: Tue 20 Jun 2023 14:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49304
IP address blocks: 146.19.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:30:0c:2e:65:0a:34:38:d7:61:1d:4a:1a:0d:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Validity
Not Before: Jun 20 14:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d4132a85813f5509aa5fcaa720e45b0b8906f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:de:ff:ba:3c:54:db:2b:4a:65:69:0d:f4:
f9:dc:51:58:1d:6d:4c:ef:74:bd:92:51:4a:8c:46:
8b:6d:47:6e:2e:c4:41:92:fe:3b:14:9a:e3:55:24:
f4:ab:20:7d:c6:d1:03:c3:8c:37:94:38:55:fb:9c:
d2:01:1c:ce:22:b4:b0:bb:a3:e3:db:56:48:d6:dc:
14:29:18:4b:41:78:51:05:79:9f:e9:f9:15:bc:16:
15:2d:fb:ae:79:12:0d:1f:04:1c:95:a1:26:36:c1:
58:b0:ad:3a:05:78:eb:11:e0:68:88:21:35:e4:61:
3c:d2:0c:e4:e0:f7:7d:3c:88:79:64:78:c6:ca:6e:
54:1c:0c:80:4a:c9:c6:28:b8:94:bb:21:49:92:9d:
68:4a:8b:09:73:56:2e:6f:32:bf:0a:e4:3e:9d:78:
00:da:84:1f:0c:e2:4a:f3:27:71:40:73:1e:12:77:
e4:c4:c7:18:ad:56:e9:a1:26:5b:b0:15:d7:e0:7c:
40:de:cf:29:83:62:bf:e7:86:13:02:d8:6b:5b:c5:
5c:a6:d0:73:66:05:c8:5b:80:ed:9d:d8:c4:0c:6c:
9b:30:78:09:02:14:2f:82:4f:e3:89:84:72:52:ed:
fa:82:cd:e3:5a:2f:73:6f:67:2b:79:49:03:dd:53:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:13:2A:85:81:3F:55:09:AA:5F:CA:A7:20:E4:5B:0B:89:06:F2
X509v3 Authority Key Identifier:
keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/8dQTKoWBP1UJql_KpyDkWwuJBvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.135.0/24
Signature Algorithm: sha256WithRSAEncryption
16:45:55:de:86:eb:6f:02:87:d7:82:43:30:86:93:ac:15:86:
f2:fb:07:14:86:48:ed:95:80:b2:d3:f8:15:0d:68:c7:22:da:
09:12:ef:c7:53:9a:bb:8a:f3:0e:c9:72:fb:02:3d:4d:78:58:
fa:51:67:03:ca:2a:8c:f9:5e:bf:31:d6:d3:e1:8a:21:60:19:
2a:e5:ba:0f:c5:08:a8:dd:6e:cc:85:a2:cf:f7:61:53:4f:47:
2f:9c:21:3f:b4:63:bc:4a:d2:58:25:aa:45:00:23:fb:8a:b9:
cd:11:62:9b:5e:03:93:4a:36:be:c6:95:33:d1:fd:85:98:a0:
96:33:ca:cc:84:90:ef:fd:d8:b3:9b:1c:6d:f0:8d:3a:6a:d1:
40:11:72:a0:e9:3b:9c:bb:1d:99:25:f5:74:5e:21:2c:cc:97:
ae:0f:29:d0:40:b7:aa:ef:f3:31:0f:52:ae:90:26:e5:e9:67:
08:58:b7:59:04:7e:7d:d5:cc:ae:39:c2:fd:a5:ae:da:42:7f:
c1:ee:5b:b4:5b:81:6f:93:d5:14:f5:8b:a9:e1:86:48:77:06:
08:23:7f:7e:b4:be:d4:2d:34:8d:9f:3d:e6:33:27:c0:f8:3c:
02:ea:17:75:18:db:b0:ea:3f:10:2b:5e:70:18:d0:cf:18:94:
8f:cf:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:41 2024 by rpki-client on console-ams.rpki-client.org