Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/n4iSjStmFgf26p5MxReoNu31D3c.roa
File: n4iSjStmFgf26p5MxReoNu31D3c.roa (raw, json)
Hash identifier: Xgx7OKG0AV0Am28tPCHv+kisXJcTsdVG/n6qGmMZ9YU=
Subject key identifier: 9F:88:92:8D:2B:66:16:07:F6:EA:9E:4C:C5:17:A8:36:ED:F5:0F:77
Certificate issuer: /CN=3edffe7c02cc7ede5e589841cc82d644a4fdef25
Certificate serial: 01857102FB30B90F7F2AB8B27DB3816A6ABD
Authority key identifier: 3E:DF:FE:7C:02:CC:7E:DE:5E:58:98:41:CC:82:D6:44:A4:FD:EF:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt_-fALMft5eWJhBzILWRKT97yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/n4iSjStmFgf26p5MxReoNu31D3c.roa
Signing time: Mon 02 Jan 2023 05:44:58 +0000
ROA not before: Mon 02 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 146.19.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:fb:30:b9:0f:7f:2a:b8:b2:7d:b3:81:6a:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edffe7c02cc7ede5e589841cc82d644a4fdef25
Validity
Not Before: Jan 2 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f88928d2b661607f6ea9e4cc517a836edf50f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:11:51:68:de:0c:2a:23:e7:cb:1b:82:bd:
f7:e5:16:cb:56:44:d1:3a:e5:0c:f3:c6:fa:cc:c2:
8e:03:bb:ac:d3:20:27:66:28:f4:c0:ef:7c:55:4a:
45:fd:32:60:95:95:f4:6e:a4:3e:2d:c0:bc:4f:e6:
1d:c7:42:02:1c:46:9a:7c:ff:02:4b:6d:c7:d8:98:
29:dc:01:4c:c1:bf:a9:e7:e8:42:ad:e3:ef:50:4a:
14:9f:a7:36:66:bd:db:ce:85:09:cf:db:40:3c:5c:
81:15:70:5e:ae:dc:85:37:82:08:3b:14:d5:ba:ea:
3a:ec:7f:3d:13:5a:e0:10:9e:16:44:46:cc:f7:61:
dd:33:9f:18:f3:98:59:62:ce:c0:77:53:e4:c4:fe:
79:7e:5b:25:63:aa:9e:9d:0d:1d:88:5e:cf:71:9c:
3b:50:fe:a9:4e:73:29:cc:8f:4e:8f:63:26:09:dc:
a7:87:d5:3e:12:33:4e:c8:84:fa:bb:17:f6:bb:14:
62:0e:6a:58:c8:6d:0b:6e:0c:25:ba:66:77:1b:b7:
02:ac:ff:1a:21:8f:8b:ce:72:7e:ba:78:25:ae:2e:
fe:a6:a5:6d:cc:b2:63:02:fb:f0:a7:95:ad:93:69:
86:e6:ac:48:85:3b:e8:79:04:c3:97:a2:12:16:1d:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:92:8D:2B:66:16:07:F6:EA:9E:4C:C5:17:A8:36:ED:F5:0F:77
X509v3 Authority Key Identifier:
keyid:3E:DF:FE:7C:02:CC:7E:DE:5E:58:98:41:CC:82:D6:44:A4:FD:EF:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt_-fALMft5eWJhBzILWRKT97yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/n4iSjStmFgf26p5MxReoNu31D3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34a59e-02cd-4313-b61c-cf1f7d7ff7cd/1/Pt_-fALMft5eWJhBzILWRKT97yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.173.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3a:1b:5d:87:8b:d2:4c:0e:72:24:36:ec:9b:f5:24:83:67:
c3:68:93:39:49:2f:03:e6:f4:23:58:31:0b:d1:84:96:4e:8d:
0d:38:d9:13:f3:6b:e1:63:c7:fd:02:24:ac:17:89:66:eb:c7:
6c:72:af:a8:d4:ec:f6:6a:6c:3d:23:1a:58:d3:b7:3a:ab:df:
cb:d5:2c:65:49:23:54:97:83:07:f4:ee:b3:bc:28:1c:60:75:
2f:1f:03:a2:17:bb:2f:67:03:e4:e7:89:7b:2c:ac:db:57:3f:
6e:f2:59:0d:db:56:56:70:bc:c2:bb:bb:9f:73:e0:2b:79:55:
4f:50:51:15:ef:be:e9:45:15:52:29:75:60:cb:7c:30:29:25:
58:a7:5b:2b:51:6a:79:71:70:2d:85:b6:1d:00:2a:7a:da:03:
59:4a:0e:10:cf:9e:ca:c6:c9:42:59:72:b7:7a:6e:2b:a5:be:
ea:b7:a1:25:a2:a9:56:12:57:01:3f:54:ed:20:96:14:5b:7b:
40:f9:93:01:8f:44:ba:0f:00:54:58:a8:e8:85:9a:84:b0:0e:
02:54:c3:ab:64:30:ff:36:f4:64:7b:bd:49:69:b1:5a:ae:8a:
fe:cc:0d:7e:ee:7e:00:f3:6c:d3:8b:9b:b3:93:10:a2:59:d2:
2e:62:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:42 2024 by rpki-client on console-ams.rpki-client.org