Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/w3s-9VDlsrb2Gem9DwnmSY2gaxg.roa
File: w3s-9VDlsrb2Gem9DwnmSY2gaxg.roa (raw, json)
Hash identifier: 4931ZhYJCSmb6ez39RMgxXScbwBe8KkmqApcNy/R0uw=
Subject key identifier: C3:7B:3E:F5:50:E5:B2:B6:F6:19:E9:BD:0F:09:E6:49:8D:A0:6B:18
Certificate issuer: /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial: 898472
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/w3s-9VDlsrb2Gem9DwnmSY2gaxg.roa
Signing time: Tue 11 Jan 2022 22:18:21 +0000
ROA not before: Tue 11 Jan 2022 22:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9012338 (0x898472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Validity
Not Before: Jan 11 22:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c37b3ef550e5b2b6f619e9bd0f09e6498da06b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:0c:00:d1:ac:40:3b:65:73:fd:69:9e:2f:
29:d1:b8:8b:b4:2d:55:5c:62:0a:52:ad:17:80:7d:
9d:d7:bf:ca:38:97:49:5a:65:01:18:0b:d0:3c:3d:
07:d0:2f:dc:f4:b4:64:7d:20:b3:3a:14:3e:5e:9d:
c6:45:29:33:eb:45:a7:e4:5a:aa:ff:8a:23:77:5a:
55:c6:b2:10:49:d5:c3:64:32:17:45:8e:89:39:80:
7c:9f:ce:ec:c5:fb:ca:66:78:c1:bf:09:48:3a:82:
c8:b8:81:ee:c5:3f:6f:ad:15:3c:a4:2d:bf:b7:06:
5e:ba:bd:a8:73:25:16:84:8d:ae:2a:97:3b:45:a6:
a9:3d:95:a0:c5:e3:aa:a1:2c:5c:0d:48:6d:8b:7b:
69:3e:87:5f:e4:df:57:19:b9:a6:a1:09:b1:8f:94:
8f:e6:6b:05:1f:d5:fb:68:a3:3a:c6:d4:27:bd:c8:
41:b8:9f:fc:3b:a0:9b:1e:64:82:ae:cf:8f:ce:14:
a9:a0:b6:0d:83:85:25:22:d9:2f:3b:87:10:5a:94:
05:98:de:36:a6:3b:a7:5e:7f:f9:19:26:5f:b8:3b:
e5:0a:2d:64:64:72:13:3b:36:01:f2:1f:a0:2e:53:
11:5a:b4:08:ce:1e:86:b1:9c:9a:80:77:f5:06:8f:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7B:3E:F5:50:E5:B2:B6:F6:19:E9:BD:0F:09:E6:49:8D:A0:6B:18
X509v3 Authority Key Identifier:
keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/w3s-9VDlsrb2Gem9DwnmSY2gaxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6f:4c:22:37:a4:26:e8:0a:61:a7:ea:2a:05:a9:5b:49:d6:
28:13:54:e3:79:93:f9:7a:45:3b:10:b8:8a:23:d4:ee:27:c9:
94:fa:8e:6b:b0:58:54:70:40:eb:e4:10:b3:b1:d2:96:0a:ad:
26:cb:38:55:db:6f:ae:c5:58:06:d8:61:74:48:72:1d:72:cb:
41:e3:96:69:48:38:10:a9:da:fc:0b:81:a8:3f:18:14:af:ed:
1a:ee:7f:33:bd:7c:c8:f8:d5:07:78:42:85:0f:b8:1e:c1:5c:
2b:22:1a:de:8b:07:14:2a:26:b4:e4:e2:e6:71:d5:b1:8b:47:
b5:e4:52:0b:c9:99:3a:94:45:3b:ab:d5:da:b8:4a:aa:f8:32:
31:e4:43:dd:08:9b:33:5e:59:1e:81:b9:53:58:35:5d:a3:f8:
f7:64:aa:89:02:92:4e:c5:9c:05:a0:a3:cb:52:b7:11:25:9d:
02:cf:7a:f0:18:fc:13:01:58:2c:e3:bb:9c:e1:90:81:da:db:
09:35:7d:de:fa:c9:32:8d:03:6c:e8:62:d4:ab:b4:57:20:f4:
5a:85:14:fb:40:04:bb:34:c5:27:61:3f:78:8b:86:b3:a8:9d:
16:1a:15:be:09:3d:28:ac:c2:3e:35:86:de:09:17:65:df:a5:
24:79:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org