Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/ZhGRChiWPfOWg_QdP2G43gf4CyA.roa
File: ZhGRChiWPfOWg_QdP2G43gf4CyA.roa (raw, json)
Hash identifier: CvAOhQlQYXeudKTreBvAnGKxZ4eS/bMYdjW+DwmjQWw=
Subject key identifier: 66:11:91:0A:18:96:3D:F3:96:83:F4:1D:3F:61:B8:DE:07:F8:0B:20
Certificate issuer: /CN=17a8beb9b82d7b4f6b9e9c4367801c790a0e1447
Certificate serial: 0189B1308E0AC576785E10A15214E31D0272
Authority key identifier: 17:A8:BE:B9:B8:2D:7B:4F:6B:9E:9C:43:67:80:1C:79:0A:0E:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6i-ubgte09rnpxDZ4AceQoOFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/ZhGRChiWPfOWg_QdP2G43gf4CyA.roa
Signing time: Tue 01 Aug 2023 13:01:36 +0000
ROA not before: Tue 01 Aug 2023 13:01:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 146.19.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:30:8e:0a:c5:76:78:5e:10:a1:52:14:e3:1d:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a8beb9b82d7b4f6b9e9c4367801c790a0e1447
Validity
Not Before: Aug 1 13:01:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6611910a18963df39683f41d3f61b8de07f80b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:4b:1d:53:6a:cb:e6:09:ee:c2:7b:98:d7:
3b:bb:d9:92:14:d4:b1:3c:d2:8e:f1:a6:e0:33:7a:
2c:8b:f5:23:51:1a:74:51:ab:ee:ee:56:cc:e1:d5:
d8:df:cf:86:90:d5:ba:31:8f:48:7e:a5:6d:03:52:
d9:5e:bc:ad:59:03:9b:09:d4:59:5a:33:e9:d1:c9:
96:fd:e2:29:27:6f:56:45:df:a2:16:b0:f3:66:c9:
fe:7b:89:1f:9b:9d:8c:8d:c3:13:5c:c8:a1:35:47:
2e:86:0c:87:16:36:97:40:60:47:ee:3f:82:bd:6b:
a9:6c:5c:50:45:94:29:36:fb:a4:cf:61:79:2a:56:
8f:51:99:2a:de:4f:a6:14:4b:fa:6d:76:77:31:18:
b5:14:3a:72:e9:ca:b0:27:1b:b3:98:b8:48:f3:1b:
d2:7e:44:86:8c:11:e4:ef:c8:26:88:3b:dd:4b:96:
ba:23:6a:34:2c:58:43:23:d9:97:61:4b:17:3b:c4:
dd:71:f6:17:e3:d2:50:7f:07:13:6a:77:eb:e8:a3:
4a:92:1f:b2:88:0c:2c:d1:ac:9b:a0:5b:50:96:3c:
c9:30:06:82:3a:b8:c7:d5:9d:ac:1e:fa:ed:1f:97:
34:7d:74:40:e8:0b:fe:a9:a7:40:d1:f2:9b:f8:d2:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:91:0A:18:96:3D:F3:96:83:F4:1D:3F:61:B8:DE:07:F8:0B:20
X509v3 Authority Key Identifier:
keyid:17:A8:BE:B9:B8:2D:7B:4F:6B:9E:9C:43:67:80:1C:79:0A:0E:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6i-ubgte09rnpxDZ4AceQoOFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/ZhGRChiWPfOWg_QdP2G43gf4CyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/F6i-ubgte09rnpxDZ4AceQoOFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:38:5d:0a:8f:c2:c0:b7:c3:d7:4d:0b:61:1e:f4:f0:df:d4:
29:2c:dc:ad:2d:34:61:44:f3:87:a4:b4:be:9f:f5:29:65:c3:
79:4a:53:62:95:a7:e6:5b:fc:81:b8:db:15:02:17:e3:7b:84:
26:b5:7c:a5:42:8a:19:e1:b9:6f:1c:2a:33:57:34:5d:3c:15:
c5:6c:e5:40:66:be:7d:12:fc:7b:7b:02:33:f4:5c:ef:07:62:
b8:9d:ae:e7:11:27:d8:b5:f1:b7:e0:56:c1:1a:0c:20:e8:af:
2d:29:7a:d3:aa:af:21:cf:3c:53:b3:48:52:d0:c0:f4:1d:35:
43:d6:05:1a:f8:76:98:e2:01:29:bf:4e:5a:19:64:66:28:42:
0a:14:0b:f3:9e:d9:e9:7b:4c:69:f4:4a:a7:98:d1:71:57:1e:
86:42:7c:ab:1b:c6:38:1c:2a:f2:62:e3:78:79:b0:3f:5c:20:
c9:42:55:1d:9b:71:94:12:2c:62:d3:bc:89:35:b3:c4:58:8a:
60:76:01:0b:92:7c:93:c5:4e:2d:c5:b6:55:ad:6a:cf:df:42:
8d:7b:aa:f7:11:05:e8:2c:c0:19:3f:e3:19:f3:99:a2:44:e5:
5c:3a:a7:9d:2a:d0:af:19:e9:94:37:c2:0a:be:7d:66:e1:f8:
62:c6:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 10:22:00 2023 by rpki-client on console-fra.rpki-client.org