Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/qVvr9y9CqR8bYOLh3cUZgBHqBnw.roa
File: qVvr9y9CqR8bYOLh3cUZgBHqBnw.roa (raw, json)
Hash identifier: vkOjTVqPcdqvLoIBBdAQqJ4LYtBistL54vif7T/Q3hc=
Subject key identifier: A9:5B:EB:F7:2F:42:A9:1F:1B:60:E2:E1:DD:C5:19:80:11:EA:06:7C
Certificate issuer: /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial: 0185E0CFDE3D12A18AAD01F91DDCCF88007F
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/qVvr9y9CqR8bYOLh3cUZgBHqBnw.roa
Signing time: Mon 23 Jan 2023 22:46:37 +0000
ROA not before: Mon 23 Jan 2023 22:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 146.19.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:cf:de:3d:12:a1:8a:ad:01:f9:1d:dc:cf:88:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Validity
Not Before: Jan 23 22:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95bebf72f42a91f1b60e2e1ddc5198011ea067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:dc:ac:20:52:ca:2b:72:ce:0c:48:77:5a:
04:1b:97:88:f8:de:41:6d:a0:ea:f3:76:d0:49:0b:
2a:a6:8c:04:3d:90:56:23:10:55:88:ea:bd:1a:03:
95:63:e5:fa:7d:af:fd:60:70:c7:7f:9a:67:7b:ae:
36:fe:8d:78:56:fb:e9:e3:ad:42:e9:20:24:49:ea:
ba:dd:0f:9b:df:c0:96:37:eb:64:79:ec:cc:d5:19:
2c:04:74:a3:ea:86:18:c9:a3:04:65:f0:91:01:84:
fa:2e:43:91:dd:dd:30:71:c9:16:51:a2:a0:64:69:
8f:39:66:e5:28:4c:23:95:ab:be:f9:f8:a8:a5:0a:
fd:39:8c:59:f5:f2:74:c8:87:cf:14:64:c0:b5:0f:
a1:2e:58:6b:f2:10:f1:27:a9:d0:48:2d:56:42:51:
b7:ca:e3:5c:23:cf:c3:76:03:39:af:2e:c7:5c:cb:
85:58:51:ae:8d:22:bb:4e:18:ba:f1:73:0f:04:bb:
9d:c4:62:89:e8:09:32:6d:83:2c:bc:e7:4e:4b:55:
78:21:86:fc:6d:2f:6e:f8:dc:59:24:b3:36:c5:9a:
4f:d0:91:dc:3d:e1:fc:38:a8:18:10:eb:23:fe:86:
c9:c6:3b:03:54:ea:e7:6d:a3:fa:ee:fc:d5:36:c4:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:EB:F7:2F:42:A9:1F:1B:60:E2:E1:DD:C5:19:80:11:EA:06:7C
X509v3 Authority Key Identifier:
keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/qVvr9y9CqR8bYOLh3cUZgBHqBnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1b:82:ec:4e:31:76:8d:86:7b:21:cf:bf:09:f6:36:91:24:
7c:42:cd:ed:88:99:cd:e1:36:65:33:b2:f7:4e:4f:d4:4a:80:
79:cc:9d:aa:4e:67:73:45:28:d1:c8:f8:15:d3:62:a2:e0:8d:
75:90:90:d4:0e:76:b2:62:5c:40:2e:49:59:f3:e1:3d:80:64:
50:2e:6d:08:34:f3:6d:12:0f:75:6c:b6:04:8a:b1:64:5e:46:
40:dc:14:e0:3e:12:01:bb:48:e9:f0:64:b9:16:d7:da:5e:47:
07:11:3d:63:21:09:07:f4:8e:1e:3b:a0:95:2f:69:9d:bc:49:
89:2d:69:12:4e:ac:4d:ab:aa:fa:ab:39:3f:9a:65:ff:34:5f:
da:5a:81:cd:75:b4:df:7f:18:a0:f0:04:f3:ca:78:04:87:b2:
0e:22:1b:52:7a:43:de:41:1a:d8:9d:08:61:aa:11:e5:ea:57:
96:54:10:63:d3:49:09:60:c9:ec:e4:0d:f8:2f:eb:e1:c8:89:
d0:eb:99:66:1c:be:07:c3:a3:7d:92:bb:8f:2f:2e:b6:84:e4:
b4:f2:50:5c:3b:a9:21:6c:f0:d4:51:25:98:82:36:ee:59:ce:
04:29:70:86:cc:08:ea:f5:05:bc:0b:47:96:bd:3b:f3:26:75:
33:8b:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:51 2024 by rpki-client on console-ams.rpki-client.org