Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/6Y5yprBBESg4dBtNaCQBf1TIHjw.roa
File: 6Y5yprBBESg4dBtNaCQBf1TIHjw.roa (raw, json)
Hash identifier: 1GNNaIBPeHnyWtKl/9ROhahdOUv6vgR/HZbt9oP3PXA=
Subject key identifier: E9:8E:72:A6:B0:41:11:28:38:74:1B:4D:68:24:01:7F:54:C8:1E:3C
Certificate issuer: /CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Certificate serial: 01856C4A5907357A7DD6880B793840DCBBCB
Authority key identifier: 74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/6Y5yprBBESg4dBtNaCQBf1TIHjw.roa
Signing time: Sun 01 Jan 2023 07:44:49 +0000
ROA not before: Sun 01 Jan 2023 07:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 146.19.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:59:07:35:7a:7d:d6:88:0b:79:38:40:dc:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Validity
Not Before: Jan 1 07:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e98e72a6b041112838741b4d6824017f54c81e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:37:3f:2c:13:13:e6:8a:73:c9:f3:fa:07:
78:f6:ae:3d:5e:4c:94:c0:8d:cd:92:a9:5d:14:b7:
c9:47:ee:52:35:8f:cb:5d:4f:64:d3:a2:b0:dc:e1:
52:41:9d:d3:78:75:bb:7e:57:f8:db:40:df:da:09:
f1:46:57:84:6c:94:e9:a5:99:90:e6:26:d9:96:5b:
c7:fa:03:75:ff:6a:47:91:67:c2:be:2e:3c:10:e6:
f9:a6:04:c7:7f:7d:25:71:cd:35:99:de:53:62:23:
8c:1c:90:9d:05:33:cf:80:0f:ae:94:44:c2:fe:d9:
ab:32:79:8d:06:dc:41:3e:a6:e8:5c:bb:1e:36:d5:
32:4a:50:45:d9:51:84:bf:26:07:f2:49:1d:a4:60:
aa:6c:3e:fc:c2:0e:1a:4d:13:1c:47:2a:bd:c0:61:
07:c1:0e:a0:79:07:67:53:fd:d2:be:78:5c:98:b3:
17:26:a7:79:ae:e5:10:d3:fa:ae:f9:a5:fe:12:7e:
c0:9c:fd:2d:22:a6:ea:1f:d0:9e:09:fb:c7:aa:76:
1c:5a:0e:ac:5e:ca:63:8e:c4:ca:f5:5b:3b:b6:43:
0c:41:12:79:01:83:4f:55:67:cf:1e:c7:3d:2e:9c:
63:31:7d:46:d7:62:d9:c8:4d:3c:04:b8:20:5f:ea:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:72:A6:B0:41:11:28:38:74:1B:4D:68:24:01:7F:54:C8:1E:3C
X509v3 Authority Key Identifier:
keyid:74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/6Y5yprBBESg4dBtNaCQBf1TIHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/dPxkoG7mriXC0j1iVe0lQr9R2K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.233.0/24
Signature Algorithm: sha256WithRSAEncryption
51:85:7f:45:35:48:d6:e9:e5:6b:78:03:c5:07:63:f8:d2:65:
28:c2:84:46:ed:88:65:74:e4:24:ad:66:8d:a0:fd:53:4b:6f:
fc:bd:18:c7:b8:13:fe:e8:36:3b:c7:60:47:8e:bd:72:c4:5a:
d4:66:fa:66:56:a6:71:08:72:8e:66:da:7f:fc:27:a0:73:ed:
31:66:f2:4e:82:f6:06:f1:5c:1e:34:09:3c:49:37:af:7e:33:
b6:f6:10:f8:b5:e6:ac:56:35:fa:18:45:5f:4b:7d:b4:34:69:
7d:bc:58:1a:21:fa:49:50:e0:51:0b:a5:f7:ed:ee:9a:b0:e2:
d3:6f:3e:b9:67:8b:3a:52:62:be:39:94:34:79:20:f7:ce:77:
bd:83:e1:d0:5f:97:4b:15:5a:5c:2c:28:1d:c7:69:8e:9d:6b:
30:d2:e9:48:83:80:f4:a2:ca:05:22:f9:57:74:15:4b:4c:d6:
6f:da:3b:de:61:6e:3d:83:91:d7:99:1e:f9:a8:0b:e6:4b:29:
c9:45:40:a9:b8:d2:7d:a7:dc:91:c4:43:59:61:4f:0f:c2:a5:
5f:cf:f5:69:36:c4:7e:bc:55:6d:fe:1a:17:60:63:65:2b:4d:
da:91:51:e4:be:c6:a3:a6:c9:02:ee:63:59:51:f0:70:7a:98:
7d:78:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org