Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/09a22c-f003-4567-ba6b-b5c70b8b9b5d/1/mLO_IDCDvt1uydaudSCZUtt0sK4.roa
File: mLO_IDCDvt1uydaudSCZUtt0sK4.roa (raw, json)
Hash identifier: X9Cp7SxVU585nIGbJmQ0jdt4oKNzE83Gev5ceoRkYhk=
Subject key identifier: 98:B3:BF:20:30:83:BE:DD:6E:C9:D6:AE:75:20:99:52:DB:74:B0:AE
Certificate issuer: /CN=97e441fae5ad25fcfe109de3270e250f0e789f51
Certificate serial: 018570306FCAFAA4CE06237096E0774F44EB
Authority key identifier: 97:E4:41:FA:E5:AD:25:FC:FE:10:9D:E3:27:0E:25:0F:0E:78:9F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-RB-uWtJfz-EJ3jJw4lDw54n1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/09a22c-f003-4567-ba6b-b5c70b8b9b5d/1/mLO_IDCDvt1uydaudSCZUtt0sK4.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6f:ca:fa:a4:ce:06:23:70:96:e0:77:4f:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e441fae5ad25fcfe109de3270e250f0e789f51
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98b3bf203083bedd6ec9d6ae75209952db74b0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:3b:4a:a0:4a:36:a1:c7:a9:66:ba:f4:f6:
93:5c:69:83:b3:d6:58:d5:a5:36:cf:5f:58:4c:b7:
a8:ca:d3:f4:34:49:df:d4:3e:12:7c:36:e6:a3:8f:
0d:e0:fa:d7:e5:db:1b:46:26:8e:1f:25:b2:32:12:
15:de:84:8f:0b:a9:0e:87:9c:98:cd:75:6d:2f:0e:
b3:5c:c4:6a:67:ca:78:39:1c:8d:49:c0:70:c0:a8:
87:d2:d9:08:c5:73:82:54:f3:62:b6:2c:9a:c4:aa:
39:0c:26:a0:2c:1f:9d:25:fe:97:8c:71:98:3e:00:
72:13:01:f3:61:a0:56:9e:fb:97:3f:54:cd:72:92:
c4:f8:7e:43:ba:2e:68:ad:f0:1f:38:5e:53:2e:24:
55:68:b3:2c:26:63:ea:39:ce:da:89:7d:5b:ce:a2:
31:b3:a2:e9:5c:89:15:29:ae:18:e4:7a:df:2f:3a:
94:3c:f8:0f:b1:cc:dd:a7:22:f9:88:7a:de:ee:dc:
4d:f6:26:1b:c6:1e:66:0c:7b:b6:16:b4:99:36:1e:
ff:85:e4:ae:26:0f:9c:d9:f5:51:7a:c6:a8:0c:e5:
0a:c4:92:1d:75:99:2c:89:18:a8:1f:8b:44:a6:b9:
df:1b:46:9e:29:21:40:c8:b4:0f:e7:d2:1a:fe:15:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:BF:20:30:83:BE:DD:6E:C9:D6:AE:75:20:99:52:DB:74:B0:AE
X509v3 Authority Key Identifier:
keyid:97:E4:41:FA:E5:AD:25:FC:FE:10:9D:E3:27:0E:25:0F:0E:78:9F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-RB-uWtJfz-EJ3jJw4lDw54n1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/09a22c-f003-4567-ba6b-b5c70b8b9b5d/1/mLO_IDCDvt1uydaudSCZUtt0sK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/09a22c-f003-4567-ba6b-b5c70b8b9b5d/1/l-RB-uWtJfz-EJ3jJw4lDw54n1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.64.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2d:23:21:f3:f8:3e:d7:e9:df:8c:2b:c0:7c:cb:95:6a:23:
56:b2:2b:d5:5c:88:05:b1:08:aa:60:fc:de:6b:29:8a:4b:f7:
e9:ee:53:9d:b2:1e:e7:fe:91:6c:37:e4:ae:0c:5f:77:dd:b9:
e5:83:11:7e:31:f5:a1:fa:4e:59:33:a7:df:91:d2:bb:12:f8:
16:aa:59:30:33:15:c5:32:ad:f5:7d:7c:a1:e0:4b:cc:ca:b5:
c7:43:77:b6:dd:8a:e1:41:40:2e:1b:02:65:0a:80:1c:f0:5c:
61:d3:2c:e3:cf:68:33:1a:9b:f1:d3:ab:8e:b1:cf:25:72:a5:
a8:f5:06:bf:13:e3:ad:b4:ae:dd:a6:7c:5d:fc:d4:8c:9f:f5:
27:2b:a5:f3:08:94:17:d2:a8:51:d9:b1:70:5f:fb:ff:4c:25:
e0:d1:62:bd:ec:72:49:af:f5:71:a6:bf:b6:88:eb:0f:51:ef:
39:f2:f6:53:c1:80:c1:69:1a:55:51:e8:61:ee:0b:56:1d:09:
53:76:51:00:8d:6b:fc:f3:6a:43:be:92:11:63:73:d3:d9:fa:
d9:6e:1c:e6:5d:97:ea:90:2e:87:65:92:69:57:f7:21:35:2f:
1f:a2:39:39:e3:ea:73:72:8d:01:10:a4:ba:0a:fd:0b:30:bd:
60:02:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:33 2024 by rpki-client on console-ams.rpki-client.org