Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/DUkmISbySWVFevF43TDuzysjyX4.roa
File: DUkmISbySWVFevF43TDuzysjyX4.roa (raw, json)
Hash identifier: cKnyXkl7gjB1o6UxgMZ6O2hCGS1stwCeCkumBgFbFKY=
Subject key identifier: 0D:49:26:21:26:F2:49:65:45:7A:F1:78:DD:30:EE:CF:2B:23:C9:7E
Certificate issuer: /CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Certificate serial: 0182CB64C77C54C321B0A2AFBD323D90B6BE
Authority key identifier: 61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/DUkmISbySWVFevF43TDuzysjyX4.roa
Signing time: Tue 23 Aug 2022 15:49:15 +0000
ROA not before: Tue 23 Aug 2022 15:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 146.19.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:64:c7:7c:54:c3:21:b0:a2:af:bd:32:3d:90:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Validity
Not Before: Aug 23 15:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d49262126f24965457af178dd30eecf2b23c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:34:ad:77:97:a8:b6:84:77:88:d2:e6:fd:13:
b5:69:a3:f9:ed:24:bb:87:f7:99:84:5a:bb:cf:f7:
62:3a:eb:d7:5f:17:4c:b4:c7:f4:c7:81:5e:fb:e2:
18:cd:ee:85:d8:54:2c:fc:cd:d3:fd:b9:07:cd:90:
d8:13:aa:cb:3e:ea:bd:e5:ab:f9:1c:41:49:2e:87:
cf:48:44:61:65:74:9a:f0:a9:3b:7d:da:01:5c:2c:
93:39:01:10:25:cf:c5:38:c4:34:68:8d:59:e2:c0:
43:f8:07:fa:bf:4d:05:83:53:0c:03:88:fc:18:cd:
af:a8:c7:f4:42:89:b9:2f:11:de:f3:93:b4:0e:a8:
5b:96:d5:b5:c2:a3:ef:39:cb:bb:27:64:a2:09:ef:
b1:8b:29:46:9e:a9:cf:5c:0d:4b:6b:dd:00:c0:0f:
c8:ba:c7:a5:b0:fb:4e:96:a1:c4:48:ee:72:41:10:
2f:09:42:f4:d4:85:0d:6e:a2:fd:f8:6f:8b:c7:56:
64:ed:bb:c8:12:a1:b6:e8:18:b8:bd:3e:c6:bf:d1:
bf:cc:6e:8e:51:fa:26:b9:5b:5a:25:01:a5:b6:55:
12:1a:1f:6e:3b:63:e2:24:8c:61:e3:a6:d2:3b:88:
6e:68:92:b5:17:b4:26:3e:55:06:b0:5a:b2:49:5d:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:26:21:26:F2:49:65:45:7A:F1:78:DD:30:EE:CF:2B:23:C9:7E
X509v3 Authority Key Identifier:
keyid:61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/DUkmISbySWVFevF43TDuzysjyX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.154.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ee:b0:d0:c0:ad:b4:f5:f8:aa:93:51:3e:b5:43:67:c7:f0:
e3:4d:c8:7d:97:df:fe:a4:cc:8a:a0:dd:d7:d3:e9:7f:7b:f2:
5f:fa:47:14:cc:73:cb:ad:ab:24:81:bf:75:ce:47:db:9f:4d:
5c:0a:7b:6a:0e:80:3e:ff:99:f8:8e:14:b3:93:dd:2b:35:94:
90:03:c3:62:be:45:37:9a:6b:81:32:4d:77:9c:6c:2d:f2:ac:
f5:d7:79:f9:f2:b2:e9:9c:7a:d4:04:7e:41:8f:16:5b:5b:8b:
58:00:b0:cb:55:6c:98:f3:66:0b:d3:4e:2c:ff:bf:4a:f6:cc:
f1:f7:50:1f:60:d2:e9:d7:b0:31:c6:72:46:9b:9c:51:c4:18:
5c:b6:43:00:e1:9b:41:18:70:a5:b2:fc:a5:6b:58:a7:4c:5b:
dd:cc:45:6a:fe:b0:16:d9:0b:54:aa:6a:54:80:a1:df:65:fc:
cf:23:7c:75:bf:bc:81:be:8b:23:6a:7d:e9:65:2a:d9:e8:9b:
84:86:b1:98:91:48:4b:67:dc:f8:ba:e5:9f:82:b4:f3:d2:a3:
59:43:ef:a5:5c:64:0a:0d:ea:a4:d8:b6:3c:7a:6e:c5:0d:e9:
67:c8:c4:f6:be:aa:3b:d5:70:db:98:e9:d2:00:f8:6c:73:41:
db:63:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:05 2024 by rpki-client on console-ams.rpki-client.org