Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/LwWL8e8XgEy-AiIRV3zaCPajzx0.roa
File: LwWL8e8XgEy-AiIRV3zaCPajzx0.roa (raw, json)
Hash identifier: TOihOpyee3H8JNBwExLO1mYFZLO6Vw8mv8dS5lt532c=
Subject key identifier: 2F:05:8B:F1:EF:17:80:4C:BE:02:22:11:57:7C:DA:08:F6:A3:CF:1D
Certificate issuer: /CN=8b10ac33e2036d2ab633417170fd546a86deb142
Certificate serial: 018820867402E2224EB4584D6E7BBB17E0CB
Authority key identifier: 8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/LwWL8e8XgEy-AiIRV3zaCPajzx0.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:74:02:e2:22:4e:b4:58:4d:6e:7b:bb:17:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b10ac33e2036d2ab633417170fd546a86deb142
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f058bf1ef17804cbe022211577cda08f6a3cf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:62:68:93:47:35:4f:55:50:09:c0:f0:4e:
aa:5f:4f:01:1f:93:45:eb:59:45:71:0b:95:01:ef:
2f:e5:15:05:8d:48:59:53:fb:f2:22:8d:3b:0e:ac:
e4:6a:5b:66:50:1f:19:80:94:c6:05:5e:b0:c7:5d:
84:29:5c:3a:c0:47:74:50:b6:51:dd:79:39:41:45:
3b:d6:f5:f6:26:c1:0e:ee:5e:c8:e5:19:ab:83:3f:
7b:30:a3:55:da:94:10:d6:1c:fe:64:5d:61:bb:c3:
4e:4c:60:ea:50:29:34:36:75:88:98:38:7d:c5:c1:
27:8b:75:08:fe:cc:93:82:51:f2:60:23:81:e1:f1:
8c:0a:75:c8:f5:0a:39:d4:d3:5b:90:7a:13:9c:d5:
23:6e:41:89:09:07:d8:f6:9e:91:3d:88:21:86:5e:
1a:a6:2c:4f:61:a1:44:b9:7c:b1:ac:f2:90:10:72:
2f:bd:10:66:cf:56:5c:03:26:4d:5b:82:69:8a:7a:
7e:18:62:22:c8:56:95:52:94:20:fc:9f:8e:86:7f:
82:a1:77:14:af:fe:50:e8:d2:dd:e8:f3:a1:99:b6:
bc:4b:34:51:5e:c6:4a:83:47:e3:21:b6:d9:15:b1:
59:1f:99:08:fd:b6:7e:55:01:bd:01:41:cf:d0:ac:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:8B:F1:EF:17:80:4C:BE:02:22:11:57:7C:DA:08:F6:A3:CF:1D
X509v3 Authority Key Identifier:
keyid:8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/LwWL8e8XgEy-AiIRV3zaCPajzx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:70:bb:aa:93:15:32:73:34:2c:e0:9b:f1:72:45:1f:c7:30:
17:1c:7c:1a:c1:b6:79:48:4a:a7:6c:5b:ac:ef:7f:46:a7:4d:
d8:3d:14:b2:76:3c:b9:ab:0d:89:6c:af:7e:52:7f:a1:78:e2:
2b:7b:14:a6:d4:c3:3b:ae:f4:0e:b2:0f:9d:36:58:a0:e8:7b:
6f:f1:0f:d9:68:c5:6c:38:ad:3c:c2:5f:02:29:f9:53:30:60:
b6:1a:ac:3b:49:7d:58:77:41:17:dc:b8:c1:31:72:23:62:36:
3a:e3:a1:41:6e:53:89:0b:fd:e2:d3:70:70:0a:94:e0:4a:95:
fe:a9:e5:1f:3d:71:9f:e6:2b:8d:5f:9c:9c:dd:eb:32:09:86:
a0:59:0f:86:99:d3:e4:f8:2b:ea:96:ed:27:7e:a3:57:10:44:
06:6d:f5:b8:2d:30:4a:68:7b:1d:08:b8:1c:c9:9e:b6:16:c5:
30:dc:97:1d:00:06:fd:1a:98:55:67:0d:09:68:18:5a:c7:de:
74:2a:59:9d:00:9d:29:ab:1b:8c:96:fa:e8:46:7e:d3:4c:6f:
5f:c2:90:24:03:00:ac:5b:07:d4:39:02:07:8e:f8:af:08:ed:
72:13:12:ad:e1:c5:b5:bf:2b:40:92:f5:14:fa:1f:4e:d7:0b:
4e:97:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:40:00 2023 by rpki-client on console-fra.rpki-client.org