Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/mwAoQsGdpZXyeSd11kSv8JuKS4o.roa
File: mwAoQsGdpZXyeSd11kSv8JuKS4o.roa (raw, json)
Hash identifier: FZ5ck5BK8DVuxoKG4lchouZ8dRXnHRjyHjpTijLtKaw=
Subject key identifier: 9B:00:28:42:C1:9D:A5:95:F2:79:27:75:D6:44:AF:F0:9B:8A:4B:8A
Certificate issuer: /CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Certificate serial: 01891B2AD097B564CB5DD636FAADFE480801
Authority key identifier: 61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/mwAoQsGdpZXyeSd11kSv8JuKS4o.roa
Signing time: Mon 03 Jul 2023 09:52:18 +0000
ROA not before: Mon 03 Jul 2023 09:52:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 146.19.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:2a:d0:97:b5:64:cb:5d:d6:36:fa:ad:fe:48:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e10c5584ca6ffac82574ba34cf22bc030e1b4
Validity
Not Before: Jul 3 09:52:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b002842c19da595f2792775d644aff09b8a4b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:83:2d:2c:22:9a:8e:36:ed:3c:74:43:9d:
0f:e7:ea:47:77:fd:63:52:b1:4e:47:68:10:78:bc:
fc:a6:e3:9b:1d:e5:2f:5c:fc:64:b2:fc:3c:2a:a7:
c7:de:7b:87:47:bd:37:aa:6d:77:04:5f:0f:31:49:
f8:29:b1:9d:db:44:ac:2a:40:ac:26:57:5f:4d:4e:
bc:2f:c4:88:9a:3a:2e:0d:95:cb:ea:01:ad:42:f3:
46:ab:41:7d:8b:c3:6b:1d:48:7b:b2:b2:0b:bd:58:
25:13:5b:ae:c4:ff:f2:b5:88:47:b9:2b:c3:d8:44:
e0:00:84:1c:d6:0f:5f:dd:15:a0:0f:17:e4:0d:39:
b6:15:e3:49:73:49:2f:d8:2c:3d:d2:b4:f8:e2:fa:
d7:b2:ad:4e:e4:0f:6d:a4:32:a9:94:ab:83:29:ee:
b9:a6:e3:12:73:00:e8:0f:3d:77:d1:33:5a:af:46:
b8:57:b7:09:ed:8a:37:d9:1b:b4:55:2b:f3:03:ff:
fa:0e:dc:7b:91:f6:c6:00:e8:33:50:c8:12:29:d8:
33:a1:9c:45:f4:39:e6:1b:c3:a9:24:92:fc:7c:7b:
5d:5c:5c:1e:3d:d2:99:7d:d2:aa:27:57:8b:84:1b:
f4:ba:56:0a:04:a3:8a:44:65:a7:76:b4:02:61:5d:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:28:42:C1:9D:A5:95:F2:79:27:75:D6:44:AF:F0:9B:8A:4B:8A
X509v3 Authority Key Identifier:
keyid:61:4E:10:C5:58:4C:A6:FF:AC:82:57:4B:A3:4C:F2:2B:C0:30:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/mwAoQsGdpZXyeSd11kSv8JuKS4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/83c141-6c08-4635-9306-f21de4ee10f2/1/YU4QxVhMpv-sgldLo0zyK8Aw4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ef:ac:35:3e:96:a6:12:d6:90:89:8e:e4:4c:4c:96:fe:a0:
ae:a7:2e:0b:67:18:cf:bd:d8:56:8d:e8:e1:6b:e9:31:fb:56:
8a:6b:9a:c3:64:d5:e2:bb:df:f4:21:9d:f6:05:81:ea:ca:0d:
23:c8:00:7f:1d:f7:4a:59:11:dc:90:03:60:d0:56:c4:03:ca:
23:69:70:70:dc:27:50:01:86:4c:47:3a:fd:54:14:3f:b4:a4:
1f:ce:f1:10:60:56:d7:02:d3:d0:8d:83:7d:82:b6:8e:09:7c:
32:9f:fb:b4:8c:e1:33:a3:84:9a:81:2b:4d:aa:7e:25:cf:7d:
fb:43:34:0a:cf:92:e4:22:6a:65:9e:48:79:c9:5c:7c:53:88:
7c:71:03:d6:57:89:91:4b:93:aa:e3:4f:d0:94:ed:c2:05:fa:
53:f0:03:2f:70:37:74:a0:87:e1:da:58:f8:17:44:06:0f:2c:
e6:12:6b:8d:f0:3c:b2:1c:18:af:c2:a4:7e:cf:d7:c7:26:1f:
1e:7d:8e:c1:1a:87:76:02:fc:36:0d:e9:27:ff:49:c6:f2:39:
a5:a2:19:e4:cf:5a:30:04:e0:c6:7a:5b:f2:96:e5:7c:ec:80:
e6:7a:70:f9:b5:3a:aa:fb:b3:53:f6:ca:a6:0a:29:c0:78:97:
07:41:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:02 2024 by rpki-client on console-fra.rpki-client.org