Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/Qaw-ASpcHexGtlTlRV0eI7LSNY8.roa
File: Qaw-ASpcHexGtlTlRV0eI7LSNY8.roa (raw, json)
Hash identifier: 4HbFDUHb/iyZExDgusJui4J92VtKXdQsf6I1UsIwKfE=
Subject key identifier: 41:AC:3E:01:2A:5C:1D:EC:46:B6:54:E5:45:5D:1E:23:B2:D2:35:8F
Certificate issuer: /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial: 53B2AC
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/Qaw-ASpcHexGtlTlRV0eI7LSNY8.roa
Signing time: Sat 01 Jan 2022 01:52:38 +0000
ROA not before: Sat 01 Jan 2022 01:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 146.19.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5485228 (0x53b2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Validity
Not Before: Jan 1 01:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41ac3e012a5c1dec46b654e5455d1e23b2d2358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:5b:ce:f0:fa:9c:37:22:b0:a3:f1:e2:61:
86:6d:88:0f:d8:b6:2a:5c:0e:ed:30:3b:b6:ec:96:
5f:8f:74:cb:1b:11:bf:64:9f:01:22:4a:28:3f:36:
1f:b1:a8:77:0d:ea:67:b5:e7:7d:de:d0:b4:ef:41:
23:da:47:af:c8:43:32:01:d4:37:4d:8b:60:f2:b6:
83:3d:b5:3d:7a:82:6e:9d:13:c2:1f:49:e4:bb:cd:
85:01:7c:b6:69:3c:8d:5f:b8:93:dd:e4:2b:9e:19:
11:75:51:7d:4a:31:9a:ec:3f:5e:a6:2b:b2:40:8a:
9f:7d:e9:37:0e:2f:9c:db:70:6a:43:7f:b4:b7:86:
c3:d6:35:f6:c4:1f:be:72:bd:36:bf:ba:a1:11:64:
57:58:8d:30:bb:0d:6a:2a:5e:0f:d1:7b:63:aa:5d:
fe:3b:e0:33:fe:f4:bd:80:db:be:b6:12:85:57:59:
05:06:d3:c4:be:fd:7e:73:02:1b:17:a4:09:42:c1:
7c:2b:db:3d:f6:df:b6:42:ec:3c:59:72:ec:7c:d6:
da:02:b8:be:ae:5e:80:d7:b9:bb:d5:ec:4b:1f:f9:
0d:39:38:95:d5:a8:b0:51:4a:e4:a7:8c:64:a3:d7:
3c:2e:07:b6:96:93:7f:d1:67:ba:27:c8:43:8d:27:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:3E:01:2A:5C:1D:EC:46:B6:54:E5:45:5D:1E:23:B2:D2:35:8F
X509v3 Authority Key Identifier:
keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/Qaw-ASpcHexGtlTlRV0eI7LSNY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.135.0/24
Signature Algorithm: sha256WithRSAEncryption
66:24:d1:86:96:9f:5d:d5:24:1d:63:6e:ea:5e:be:cf:5a:4f:
46:04:ab:62:4e:b5:ef:46:ac:6a:1b:59:57:b2:e1:e3:7b:e4:
8b:6a:97:57:40:bd:2f:45:c8:66:d7:f8:74:b8:8e:2c:92:7e:
ca:0f:39:ae:4c:8e:b0:db:8d:5f:b8:8d:99:a1:d4:9f:89:92:
e6:12:ee:e3:ea:3c:c3:62:c2:91:3e:a5:4f:72:a6:f0:22:7f:
7f:c5:0e:8d:5c:73:fe:c0:03:02:ad:41:b6:1d:9a:d3:d0:db:
a7:05:2c:c8:bf:d8:73:52:12:6d:06:9a:b3:9f:b3:29:15:1b:
9a:f2:eb:4f:19:d7:4f:32:2b:e8:e0:01:4a:16:13:e9:be:a6:
57:be:01:a4:f4:de:f0:fa:f9:ba:fb:ac:05:b6:63:bb:2b:d3:
9d:ab:41:13:41:e7:7d:d8:08:9c:7e:e6:aa:3f:f6:8e:50:8e:
f5:c8:4c:a3:00:d7:4b:9f:75:dc:c7:7d:f4:0c:4c:48:19:2b:
d5:ce:19:0a:4e:a7:a6:69:bb:c3:83:cb:aa:d4:a7:52:07:80:
bf:58:8a:6a:a2:5c:0b:ec:2e:3c:5c:83:24:39:ea:5c:ae:12:
61:0d:d8:94:5c:e6:a2:1e:86:93:88:e1:93:38:94:d1:30:07:
1d:c7:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:41 2024 by rpki-client on console-ams.rpki-client.org