Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/SOiTtQ6iQJ8X7ro1QNXPF9iD_ag.roa
File: SOiTtQ6iQJ8X7ro1QNXPF9iD_ag.roa (raw, json)
Hash identifier: JFRjJxy/wIOupzpGhi7ac4xNwrqTujtJIZ/rqPLhl/A=
Subject key identifier: 48:E8:93:B5:0E:A2:40:9F:17:EE:BA:35:40:D5:CF:17:D8:83:FD:A8
Certificate issuer: /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial: 018BBCC2FD44FC688EB43764EE62DEFA1EAC
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/SOiTtQ6iQJ8X7ro1QNXPF9iD_ag.roa
Signing time: Sat 11 Nov 2023 05:02:57 +0000
ROA not before: Sat 11 Nov 2023 05:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 146.19.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bc:c2:fd:44:fc:68:8e:b4:37:64:ee:62:de:fa:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Validity
Not Before: Nov 11 05:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e893b50ea2409f17eeba3540d5cf17d883fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:37:67:3d:90:6f:00:a8:f0:a9:1e:0b:29:
9b:83:02:d9:ee:e4:f9:e1:88:46:4f:18:0c:52:28:
a8:93:bf:34:42:0d:8e:94:80:3d:00:7a:b3:25:90:
d6:b3:13:cb:ab:bb:2e:62:21:77:83:89:e7:7b:e8:
4b:0e:12:c7:ca:b2:92:7c:4f:8a:aa:de:35:7e:c4:
c8:3b:bd:65:c2:f4:e0:21:7f:5d:00:ec:69:9b:e8:
66:1e:37:61:5b:c9:4b:06:68:de:19:9c:c4:b1:4c:
db:06:6d:a1:ec:d6:69:ae:70:ab:4e:10:98:57:58:
75:d7:e2:22:aa:e2:1e:39:ee:92:fd:9c:0e:e4:99:
40:1c:a1:27:3d:d0:93:60:2d:a5:29:55:aa:1e:b4:
c0:92:02:8a:1a:b1:a8:57:6a:f5:9d:cc:49:34:89:
ff:97:34:5c:0d:92:2e:ca:fa:2c:ce:57:bf:20:71:
40:5f:ca:39:44:ba:d5:fd:b8:9b:4a:53:33:18:e5:
90:29:4d:96:6c:60:4d:2d:e5:81:33:5d:ff:0b:42:
c2:f7:da:bb:58:fd:c7:c3:13:b5:d8:2e:96:35:5f:
c9:a0:20:c5:54:fb:b0:ba:0e:82:46:fe:3d:bc:49:
00:ea:30:00:58:70:97:0f:9e:bf:62:52:fb:e6:bf:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:93:B5:0E:A2:40:9F:17:EE:BA:35:40:D5:CF:17:D8:83:FD:A8
X509v3 Authority Key Identifier:
keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/SOiTtQ6iQJ8X7ro1QNXPF9iD_ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
07:30:f4:a4:66:26:4b:4c:fa:2b:3f:88:f1:c7:f4:6a:05:65:
8b:a8:2d:f0:1d:22:2d:d1:24:ed:4c:7e:60:3e:fb:7a:98:4c:
40:d7:b9:ff:7f:3c:83:b0:18:c1:02:e2:ca:d7:2e:84:81:6f:
10:1c:74:f8:b9:c8:6a:bb:c7:6b:ae:4d:c9:63:cd:a8:84:c4:
0b:d3:1d:85:07:1c:ae:b6:88:c1:e1:55:ea:ee:c6:bb:14:8b:
c4:2e:3d:46:6c:43:a3:f2:67:86:09:29:8b:e2:ba:26:14:90:
0c:64:97:2f:09:8f:37:06:45:3b:31:95:25:05:ff:d2:0b:72:
01:46:76:95:b0:36:ca:62:6f:19:c0:73:be:4e:6f:69:18:f1:
a7:e2:15:d7:83:e7:fd:6c:09:f1:74:dd:29:f1:2e:37:c7:a9:
a8:7c:4e:47:f9:89:d4:bc:cc:9c:9c:91:a2:8d:93:13:cd:4d:
ef:f8:56:e7:35:88:f5:b4:8c:4c:cf:65:a0:dc:49:42:74:8f:
4f:f8:76:8b:22:d0:3a:ec:13:69:46:2c:ef:0b:97:5a:2e:d5:
5b:e7:a0:d2:f4:1c:74:a9:13:16:1b:ef:48:7e:80:f2:64:eb:
33:41:7a:8e:37:26:9e:dd:3f:74:0d:2f:3e:85:ef:fc:72:c9:
50:b2:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org