Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/dfecf4-0732-4c78-b4be-4627488b14b3/1/Z40Kx2b5Gq0uN_DT4S1E6J5zLt8.roa
File: Z40Kx2b5Gq0uN_DT4S1E6J5zLt8.roa (raw, json)
Hash identifier: 3i4WIT18c+ieiLY8pc1p6ZTdyoB2yGCp+XoR0KVebT8=
Subject key identifier: 67:8D:0A:C7:66:F9:1A:AD:2E:37:F0:D3:E1:2D:44:E8:9E:73:2E:DF
Certificate issuer: /CN=82f3badae9fd81c9bceeb8b0f51f4d37e62e0a40
Certificate serial: 01856DC1B6457E551D69B577817589EA30D9
Authority key identifier: 82:F3:BA:DA:E9:FD:81:C9:BC:EE:B8:B0:F5:1F:4D:37:E6:2E:0A:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvO62un9gcm87riw9R9NN-YuCkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/dfecf4-0732-4c78-b4be-4627488b14b3/1/Z40Kx2b5Gq0uN_DT4S1E6J5zLt8.roa
Signing time: Sun 01 Jan 2023 14:34:49 +0000
ROA not before: Sun 01 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53363
IP address blocks: 146.19.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b6:45:7e:55:1d:69:b5:77:81:75:89:ea:30:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f3badae9fd81c9bceeb8b0f51f4d37e62e0a40
Validity
Not Before: Jan 1 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=678d0ac766f91aad2e37f0d3e12d44e89e732edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:81:1f:f6:01:b2:8d:33:ee:c1:d2:1b:f9:
34:53:90:c4:d8:71:17:6e:59:c8:d0:3c:04:84:95:
df:6a:09:a3:06:94:e3:3f:d2:25:6c:b4:ff:47:d1:
78:93:b2:11:5a:4d:2c:2e:58:e7:fc:d9:00:8b:ac:
31:47:ea:ca:b7:37:ec:fc:6f:56:0b:6c:a8:27:8a:
dc:63:03:69:43:8d:56:dd:de:c4:69:9c:34:5d:de:
3e:d9:09:2c:20:74:f9:52:9a:5d:bb:21:d7:b9:95:
0a:51:f5:d7:fa:59:be:ac:a3:bb:94:56:96:35:29:
a5:72:61:44:7b:be:f3:b6:38:78:e0:af:fd:c5:6d:
95:7e:92:ae:83:5b:25:f9:9b:aa:bb:31:50:f8:76:
67:40:7d:71:24:82:f4:9c:b9:e5:1a:42:a2:ab:38:
57:08:03:55:91:ee:c4:a1:85:84:c3:e1:b0:28:a7:
30:f8:74:d1:d2:a7:88:29:61:8e:4f:ea:7a:7b:93:
c4:16:78:f8:e7:1a:07:f3:92:91:5e:4f:6e:46:a9:
16:35:43:20:f5:df:dd:1f:29:e9:cd:fa:b3:94:91:
b8:54:64:35:25:94:b9:cd:1d:d0:3b:2b:d6:f5:9a:
07:b8:ce:88:3a:f6:45:7e:84:58:0d:30:c0:b8:57:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:0A:C7:66:F9:1A:AD:2E:37:F0:D3:E1:2D:44:E8:9E:73:2E:DF
X509v3 Authority Key Identifier:
keyid:82:F3:BA:DA:E9:FD:81:C9:BC:EE:B8:B0:F5:1F:4D:37:E6:2E:0A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvO62un9gcm87riw9R9NN-YuCkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/dfecf4-0732-4c78-b4be-4627488b14b3/1/Z40Kx2b5Gq0uN_DT4S1E6J5zLt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/dfecf4-0732-4c78-b4be-4627488b14b3/1/gvO62un9gcm87riw9R9NN-YuCkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a1:15:dd:99:56:f7:75:f7:c7:e8:28:e8:06:41:08:53:3c:
32:cc:e5:df:d1:5f:aa:96:83:a7:94:1e:50:c3:1c:55:5f:0a:
be:ba:41:1b:fb:13:25:d6:63:1e:49:05:a1:b1:31:c8:52:85:
33:43:85:4f:9a:5c:24:89:87:51:51:19:30:d3:97:af:2f:84:
e9:cf:80:36:12:e9:a9:46:c2:f9:cc:26:e9:e0:5d:00:3d:ce:
a0:8e:f4:17:b2:d1:2f:1d:30:0e:99:d9:41:c2:54:99:b1:45:
e5:1a:d1:d8:39:bd:70:9a:7c:4c:6d:4c:bf:b6:a7:07:49:d7:
76:7f:67:86:08:c1:8a:5a:9b:ff:66:5d:0b:2f:9d:5c:f7:b4:
a7:03:67:b3:f9:48:80:28:5d:e9:96:53:0f:c2:1e:5d:7b:15:
57:84:39:48:a2:0a:37:a1:c0:78:51:a4:ba:15:d1:e2:f7:01:
8c:49:bd:9f:89:a5:68:63:af:d5:de:37:5f:97:88:f8:c3:db:
d1:20:e6:81:56:ec:1a:c1:51:8c:db:6a:09:a8:17:4f:b4:9f:
cd:4e:27:20:ec:50:b6:dc:a1:1b:af:bd:f3:29:74:f8:3a:37:
61:11:48:cf:de:82:f4:5a:f8:14:0d:a5:66:a0:31:51:98:07:
35:8a:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:43 2024 by rpki-client on console-ams.rpki-client.org