Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/i3pmyTaq0a1UgJ8lZD9zTbasdZ0.roa
File: i3pmyTaq0a1UgJ8lZD9zTbasdZ0.roa (raw, json)
Hash identifier: CzmCBdkB/dw6ZsfLsmkWa+un8zU1l2qQj0LlKQ7UhXY=
Subject key identifier: 8B:7A:66:C9:36:AA:D1:AD:54:80:9F:25:64:3F:73:4D:B6:AC:75:9D
Certificate issuer: /CN=445cb7e2560de294a49a6370f742589ddcbcde74
Certificate serial: F8CCFA
Authority key identifier: 44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/i3pmyTaq0a1UgJ8lZD9zTbasdZ0.roa
Signing time: Mon 07 Mar 2022 17:31:19 +0000
ROA not before: Mon 07 Mar 2022 17:31:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16305402 (0xf8ccfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445cb7e2560de294a49a6370f742589ddcbcde74
Validity
Not Before: Mar 7 17:31:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b7a66c936aad1ad54809f25643f734db6ac759d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:67:88:80:45:95:87:35:14:89:ed:80:1f:
b7:29:ec:0a:92:a3:1e:df:0b:c5:d5:11:22:1f:7e:
c6:98:b8:4e:ba:b2:6a:e3:cc:be:44:f2:7b:a4:f3:
e5:da:cb:b5:fa:b5:6e:31:bf:c1:d0:f2:33:1b:49:
e2:d0:79:93:f7:ac:90:37:ba:2b:4b:02:29:9d:4d:
79:a5:88:50:83:29:f9:56:ff:cb:91:85:bc:79:64:
dd:15:1c:92:ef:42:b6:87:25:8d:db:74:c6:1d:13:
8b:2d:8a:f8:c6:db:5a:dc:04:fb:e5:12:19:14:a3:
8e:54:d2:88:f7:dc:c5:ac:62:25:0f:46:42:22:06:
65:02:e3:ad:97:36:c6:9f:9c:4c:e3:6e:bf:6f:4d:
bd:16:0d:b3:c9:8b:ce:dd:0f:80:1c:a9:b4:7e:8b:
0c:7a:db:3f:95:3e:17:ac:01:65:1a:86:96:af:a3:
e3:99:6a:46:5c:04:1b:b2:16:7a:8e:d8:eb:ce:00:
bf:b6:60:15:15:ac:a5:71:0e:5f:02:13:70:da:27:
56:bf:68:03:cc:ca:b4:7d:c3:72:3b:00:68:ce:3f:
44:af:4e:25:21:26:57:8d:7a:42:6a:f0:28:d5:de:
b6:89:1b:e6:73:68:0d:fd:f3:02:4f:69:2e:94:dd:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:66:C9:36:AA:D1:AD:54:80:9F:25:64:3F:73:4D:B6:AC:75:9D
X509v3 Authority Key Identifier:
keyid:44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/i3pmyTaq0a1UgJ8lZD9zTbasdZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.221.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:7b:93:d4:3a:22:6b:3c:13:39:3e:b5:f1:c9:56:5a:7e:11:
f4:55:2f:8f:1e:a3:ee:2c:ed:56:3f:49:3c:ff:5c:31:75:75:
c6:88:5f:b8:16:35:6d:eb:0c:85:d9:56:ef:f6:68:a1:69:a2:
ca:d7:05:d9:d4:01:8f:29:60:9a:d1:d1:42:3e:92:9c:14:38:
63:c8:1e:ef:68:2f:70:44:06:89:8e:11:e7:11:27:49:61:e4:
f7:b3:1e:11:23:5f:7b:7b:c4:79:67:6f:04:d2:e4:26:dd:fb:
4f:a1:d2:98:db:ac:91:37:b6:34:ce:ca:1d:51:f0:c0:b4:e4:
d0:a2:f2:a3:02:46:e0:f4:68:54:5e:ce:e5:be:ac:47:bc:d2:
25:a6:47:6b:2b:b0:3c:97:b7:3c:8f:f5:8f:c9:2d:69:f0:7d:
84:e5:c3:99:4f:a1:ae:05:1b:0d:3f:c3:11:a7:3e:6b:ac:6b:
a8:8f:06:ae:57:32:38:8f:94:a4:d3:29:9d:b0:f9:9d:27:4a:
5f:9a:49:ab:fe:89:52:89:c6:77:16:22:c9:0a:2e:3a:69:f4:
bb:48:f0:d6:d9:6a:51:c2:8e:da:08:b9:b3:43:cb:52:d5:30:
d2:e6:28:2e:bc:4a:cf:ab:7b:60:b9:0e:ef:50:4f:89:57:5d:
7f:57:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:29 2024 by rpki-client on console-ams.rpki-client.org