Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/IRUSEvGvssaKPin_2m92zDGCb3s.roa
File: IRUSEvGvssaKPin_2m92zDGCb3s.roa (raw, json)
Hash identifier: VCwGiXE+ONiD+7xPjbQktgO6pEdSjwP2le0KOvu3sIs=
Subject key identifier: 21:15:12:12:F1:AF:B2:C6:8A:3E:29:FF:DA:6F:76:CC:31:82:6F:7B
Certificate issuer: /CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Certificate serial: 01345962
Authority key identifier: C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/IRUSEvGvssaKPin_2m92zDGCb3s.roa
Signing time: Wed 30 Mar 2022 16:12:41 +0000
ROA not before: Wed 30 Mar 2022 16:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20207970 (0x1345962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Validity
Not Before: Mar 30 16:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21151212f1afb2c68a3e29ffda6f76cc31826f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:ea:6e:b6:ab:cf:94:8f:fc:62:75:4b:95:
03:db:61:af:5d:e2:90:fa:2c:2d:9f:be:1c:b2:b6:
5a:ba:dd:4d:f3:a4:f5:af:f9:2f:36:61:4c:b5:6f:
1f:89:4c:e8:44:4a:41:70:2e:34:43:53:76:29:5c:
70:a5:64:f0:34:27:d9:b5:7f:7e:61:af:ce:c8:7d:
45:a2:c4:38:5f:ee:fa:d0:97:f0:92:67:2a:db:dd:
10:0d:40:bf:c6:48:e3:ce:b1:03:1c:7a:13:ce:d7:
b1:c7:35:cb:13:a9:55:92:95:fd:19:00:cc:5e:49:
38:a1:8b:68:a9:2e:f8:7d:db:86:97:5a:ed:a4:09:
05:b6:a9:70:21:c9:87:71:ce:a3:17:cd:fb:69:88:
66:ba:9b:0e:3b:d5:54:63:26:31:70:d8:8a:24:4f:
1c:b8:dd:e8:91:b2:97:df:af:22:96:e8:47:6f:7a:
dc:c9:81:4e:96:28:f7:20:33:25:38:04:d7:2f:de:
a0:06:d4:59:45:11:ae:b9:4f:a1:a6:42:4e:01:a8:
47:bb:2e:25:f1:93:27:18:c8:99:ed:b0:2b:63:cd:
06:e9:ba:f8:7f:f7:ff:5d:6d:88:54:fc:b5:99:07:
22:4f:bd:67:fe:db:11:5f:37:96:4c:0a:b3:a3:94:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:12:12:F1:AF:B2:C6:8A:3E:29:FF:DA:6F:76:CC:31:82:6F:7B
X509v3 Authority Key Identifier:
keyid:C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/IRUSEvGvssaKPin_2m92zDGCb3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:92:82:b0:69:02:96:fe:45:5a:b5:e0:74:b1:b2:dd:65:5a:
f8:ee:4b:34:21:0c:63:16:61:7a:2f:7b:e2:01:58:3c:be:58:
0b:64:b4:b0:4c:db:25:57:00:b5:14:1f:60:5e:31:44:b7:f0:
4f:8e:a3:00:38:4d:1b:59:4c:33:3d:7d:9c:13:df:db:bd:b8:
fa:1c:87:92:95:be:bd:21:e0:8d:02:be:49:c8:48:a4:1d:28:
99:66:b3:dc:c2:ce:88:12:4d:74:07:50:4f:1d:9b:ca:eb:7b:
b8:43:83:c5:b8:18:b1:47:25:5c:2a:15:78:af:11:33:80:f8:
16:ac:53:9d:f6:be:ff:7f:22:22:a4:0b:53:cf:29:60:7f:63:
cc:69:94:f0:83:29:a8:06:27:39:7b:f0:a1:8c:a8:38:ee:01:
63:9d:b4:e5:43:e5:bd:df:92:5d:25:57:a2:d2:b5:cd:85:06:
cf:81:48:b9:67:bd:d5:be:06:f3:b2:9b:b8:f5:29:fc:2b:7b:
6e:ca:d2:c6:60:07:f0:2b:98:6e:08:0a:11:2d:91:81:9f:62:
81:89:24:19:04:76:d3:b2:bc:2d:83:da:b4:73:2e:7f:b1:96:
6f:be:c8:f4:f9:27:46:e9:4c:6c:a2:cc:18:1a:64:67:cc:22:
23:ae:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org