Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f34ee6-af62-49c5-b7a6-a5b1ac35b48b/1/JZBtuJ5exBKUc5Kgc1VmnKQbJIM.roa
File: JZBtuJ5exBKUc5Kgc1VmnKQbJIM.roa (raw, json)
Hash identifier: 5CzRdmnZHX99E961HPEZKRdSTseALDzqWpuW5Blf3uk=
Subject key identifier: 25:90:6D:B8:9E:5E:C4:12:94:73:92:A0:73:55:66:9C:A4:1B:24:83
Certificate issuer: /CN=02ad21cf040c95a9d96d97f87a56cf54ee346b9c
Certificate serial: 018570DE2A65B5D1F4370E4E4B98CB0591E3
Authority key identifier: 02:AD:21:CF:04:0C:95:A9:D9:6D:97:F8:7A:56:CF:54:EE:34:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq0hzwQMlanZbZf4elbPVO40a5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f34ee6-af62-49c5-b7a6-a5b1ac35b48b/1/JZBtuJ5exBKUc5Kgc1VmnKQbJIM.roa
Signing time: Mon 02 Jan 2023 05:04:46 +0000
ROA not before: Mon 02 Jan 2023 05:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:2a:65:b5:d1:f4:37:0e:4e:4b:98:cb:05:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ad21cf040c95a9d96d97f87a56cf54ee346b9c
Validity
Not Before: Jan 2 05:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25906db89e5ec412947392a07355669ca41b2483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:6a:84:84:fe:d6:f7:47:7a:57:3b:a6:47:
6b:16:ab:1d:87:5b:3c:a1:f4:80:b1:bf:78:c8:64:
b3:24:53:44:9f:0c:d4:b7:97:a2:c2:9c:43:ee:9c:
5c:6b:dc:ea:e8:fc:ca:8e:3b:6a:8f:66:f8:e1:86:
98:e3:8a:d8:f3:1d:55:b0:62:06:60:d2:2d:01:dc:
a5:2b:43:e2:41:ff:fb:ae:bf:80:ad:20:43:e3:39:
1d:e3:e5:2c:47:ad:c4:0d:39:82:81:f1:3f:0c:0c:
80:37:7e:da:f5:d1:ee:da:66:54:44:fa:2e:61:6e:
78:7e:4a:30:59:fa:f8:57:3b:9f:77:dd:fa:f0:03:
5e:8c:21:95:a8:06:ca:40:61:90:0f:b0:fa:07:75:
e5:16:48:a8:c6:c7:dd:22:d7:d8:e2:3c:54:4c:53:
3c:83:9e:1c:24:ad:41:dd:bc:a4:f5:6c:92:83:cf:
72:e8:7e:8b:9a:7f:c7:95:d3:72:ba:8b:0a:76:bd:
cd:4d:ad:8e:c3:90:ee:f1:07:32:b7:08:71:bd:12:
3c:3c:0a:b1:37:d4:51:53:64:58:c3:30:40:55:77:
18:40:66:61:55:38:3a:d8:34:80:7e:79:13:8f:8b:
b4:fe:e2:ed:75:67:d6:f9:b9:d3:83:f0:55:57:a4:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:90:6D:B8:9E:5E:C4:12:94:73:92:A0:73:55:66:9C:A4:1B:24:83
X509v3 Authority Key Identifier:
keyid:02:AD:21:CF:04:0C:95:A9:D9:6D:97:F8:7A:56:CF:54:EE:34:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq0hzwQMlanZbZf4elbPVO40a5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f34ee6-af62-49c5-b7a6-a5b1ac35b48b/1/JZBtuJ5exBKUc5Kgc1VmnKQbJIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f34ee6-af62-49c5-b7a6-a5b1ac35b48b/1/Aq0hzwQMlanZbZf4elbPVO40a5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:37:86:11:22:7f:6e:a6:5f:39:0b:44:4d:5d:46:02:15:c5:
ff:29:54:0c:c5:52:d3:6c:43:2a:78:6c:b7:8d:91:19:74:6e:
d9:8c:02:5b:f0:98:01:d1:77:0c:b0:77:55:30:38:ae:f7:60:
ab:cb:a1:eb:fd:24:c5:52:b6:53:c6:c5:0b:e7:cc:a5:ff:26:
cf:c1:cb:90:54:24:f0:0c:a6:b0:a3:3b:98:50:1c:34:13:71:
b0:d9:fc:86:bb:68:a2:91:ed:fa:2a:70:12:df:90:39:a2:ee:
79:eb:60:8b:5e:31:dc:8a:c7:3d:79:93:17:83:ed:62:a6:2a:
94:41:c5:0b:ae:ce:d2:c3:74:5f:21:ff:21:6b:b1:5c:12:11:
e6:7b:b3:21:02:63:c7:0e:60:0a:9f:85:8b:1f:94:9b:66:7f:
eb:57:cc:97:a1:b1:f9:e8:67:64:c6:34:d2:45:e3:02:5f:90:
0b:90:2a:b2:28:59:0b:3a:5c:7f:fb:82:6a:b0:3d:66:df:d7:
f8:88:c2:ef:a6:79:d2:fc:e8:0c:a7:80:2f:27:2e:d2:1b:94:
9f:59:f5:69:25:34:7c:d7:9b:b5:f5:53:30:e9:27:51:53:b7:
9d:22:cd:3f:f2:44:e9:c0:53:48:cc:d2:24:2b:6d:c4:db:a0:
92:bd:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org