Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/5F-lY4N-mlPvVnex1XFVhETxzvw.roa
File: 5F-lY4N-mlPvVnex1XFVhETxzvw.roa (raw, json)
Hash identifier: Na2QLpU2NCMwz6XQUdFfAGye33xdungM8mE+J2Y0SPg=
Subject key identifier: E4:5F:A5:63:83:7E:9A:53:EF:56:77:B1:D5:71:55:84:44:F1:CE:FC
Certificate issuer: /CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Certificate serial: C88F67
Authority key identifier: 6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/5F-lY4N-mlPvVnex1XFVhETxzvw.roa
Signing time: Wed 02 Feb 2022 20:36:00 +0000
ROA not before: Wed 02 Feb 2022 20:36:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13143911 (0xc88f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Validity
Not Before: Feb 2 20:36:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e45fa563837e9a53ef5677b1d571558444f1cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:83:42:b2:39:b5:c7:ed:3a:2d:3a:86:dd:
ad:a7:88:e8:e7:58:b5:a8:16:2a:11:54:54:fc:8c:
a1:7d:f9:44:17:d3:fc:be:f2:49:0a:ed:0d:b8:1a:
71:e4:dd:e6:68:84:22:e7:f9:c2:11:f3:4c:2b:93:
8b:08:7a:27:d1:8c:af:44:b0:66:12:60:a2:3b:61:
da:85:56:d2:90:c4:16:27:0c:55:f7:50:36:c4:8b:
1c:b4:96:2f:f4:9e:3c:93:09:58:32:ed:1f:9c:b5:
78:ff:b2:44:5b:50:d7:85:37:fa:c5:1c:f5:5c:8c:
a4:bc:13:ac:84:09:30:cd:38:55:33:2e:5e:4c:0e:
64:8c:81:85:f0:cc:4c:dc:85:35:94:51:27:48:10:
be:56:f3:61:19:46:54:23:02:d3:6e:d7:ee:d0:8f:
9f:4f:2d:d6:f3:8f:53:4a:52:7e:4a:1b:0d:3b:46:
d0:a8:20:7a:99:16:63:42:75:7e:84:a3:9a:68:fc:
0e:aa:0f:b1:62:c6:2c:33:dd:a3:b6:41:d1:c0:2a:
86:3f:33:7c:60:b7:a6:8a:05:b9:e3:e3:28:5a:73:
a2:1f:06:9e:e9:91:b5:cd:9a:3d:fc:a7:d6:eb:b7:
2d:e4:31:b2:11:9e:a0:88:00:16:35:b7:59:c5:ae:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:A5:63:83:7E:9A:53:EF:56:77:B1:D5:71:55:84:44:F1:CE:FC
X509v3 Authority Key Identifier:
keyid:6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/5F-lY4N-mlPvVnex1XFVhETxzvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/b2JNCoXM2eltKNdslRZVtrBXgtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
80:70:61:65:9e:39:f5:50:b9:4d:9c:81:31:a0:ae:d9:30:c5:
1c:9a:18:a6:00:e8:e6:31:ac:ce:c7:42:95:20:96:77:72:86:
46:f7:f0:97:df:02:09:01:19:a4:b4:12:a9:87:1b:f5:38:46:
72:5f:57:31:66:6b:5b:3a:c1:90:16:3d:5b:9a:e7:7e:f3:eb:
73:44:f3:7f:11:8c:a9:0c:b4:79:3c:4e:25:3d:5d:3b:88:e6:
84:97:18:3d:7d:4a:b7:d0:c5:f1:98:33:a5:44:e5:fc:20:80:
30:b5:30:ad:34:d9:53:5a:e6:79:9a:0c:22:4a:7d:e2:5a:79:
df:6d:72:52:9a:93:dd:33:fa:94:44:79:32:57:fd:1e:a7:2e:
e4:1b:b0:3e:62:aa:4e:55:72:61:b1:19:17:d6:97:2e:b5:e8:
41:a2:6a:e9:10:6e:a1:be:12:0e:0d:89:fc:79:8a:5b:7c:b7:
35:0a:ec:ef:74:68:ee:53:b4:00:e7:5f:eb:2f:d2:5b:be:d9:
3b:af:3a:7d:70:42:e2:6f:bf:5d:f8:8c:d5:4f:4f:4c:0e:ce:
97:ba:2f:c0:f0:d1:e0:c6:11:77:8d:46:42:54:ed:67:21:05:
c4:7c:73:91:0d:80:f5:d9:1f:14:7a:e5:c7:71:bf:c7:71:32:
a2:ee:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org