Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/TfGxDFZMmzM7vEIYnw0r3LEzoDA.roa
File: TfGxDFZMmzM7vEIYnw0r3LEzoDA.roa (raw, json)
Hash identifier: rcE5zvkewjT5zBJObbt+7B8Cjmg/nSfxOXCbuTCjlNY=
Subject key identifier: 4D:F1:B1:0C:56:4C:9B:33:3B:BC:42:18:9F:0D:2B:DC:B1:33:A0:30
Certificate issuer: /CN=7a216261df2a50fc560487abedb9f83dc4530400
Certificate serial: 018C0884FA3BB54EE47EFB92AC77D20F66C5
Authority key identifier: 7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/TfGxDFZMmzM7vEIYnw0r3LEzoDA.roa
Signing time: Sat 25 Nov 2023 22:06:21 +0000
ROA not before: Sat 25 Nov 2023 22:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 146.19.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:84:fa:3b:b5:4e:e4:7e:fb:92:ac:77:d2:0f:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a216261df2a50fc560487abedb9f83dc4530400
Validity
Not Before: Nov 25 22:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4df1b10c564c9b333bbc42189f0d2bdcb133a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:48:f5:81:ff:63:f8:d7:85:e1:b9:a4:d2:
26:d6:b1:82:46:08:91:63:87:b0:51:57:b0:59:73:
4e:15:d4:a9:0e:43:48:d5:99:f8:26:fd:5e:a9:1b:
03:e5:44:f3:06:18:c4:dc:ff:b0:c9:59:8f:61:85:
c5:6e:b4:8f:8e:88:b4:eb:6d:54:1e:4c:1c:ee:c0:
ee:d3:69:aa:b8:7e:9e:b8:e8:a7:7d:1a:fb:0a:37:
97:12:3a:69:98:c1:f8:aa:2f:48:ec:db:af:73:d5:
77:89:47:a2:b7:0a:c4:c7:ea:ca:f7:67:6c:f4:8d:
da:3e:31:50:84:6f:9d:f5:09:76:c2:2a:4b:f2:bf:
a3:ba:cf:a2:cd:be:c6:08:12:0b:8a:4f:96:e2:dc:
c1:ab:b0:20:42:66:17:96:cb:19:92:f0:ae:5f:ba:
fc:da:a8:a8:3f:77:f9:be:8e:10:23:82:59:ee:81:
ad:d2:11:da:33:ce:f4:4b:c6:bd:96:80:24:58:a5:
03:0e:ef:5b:7c:7b:d4:99:85:d7:13:b4:84:ce:c7:
66:3e:83:1c:fe:e1:ad:14:da:c0:e9:8f:a7:7e:34:
02:85:ba:0b:01:4b:71:d0:5e:60:84:e8:4d:cb:cd:
15:8f:f2:5b:ab:28:04:05:aa:1e:8d:33:f1:04:f1:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:B1:0C:56:4C:9B:33:3B:BC:42:18:9F:0D:2B:DC:B1:33:A0:30
X509v3 Authority Key Identifier:
keyid:7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/TfGxDFZMmzM7vEIYnw0r3LEzoDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:cc:16:48:85:76:46:ed:b3:5e:3b:e5:30:83:f3:05:bb:
14:df:6a:99:d5:d0:06:8e:36:10:82:19:37:a8:50:a8:d7:62:
6d:eb:5a:1b:c3:31:ee:c9:54:63:9b:d1:2b:d5:f0:b2:3c:45:
79:97:65:0a:36:65:7e:1c:90:29:bd:2a:a9:bb:e9:77:76:3b:
a3:df:79:2c:5b:19:b8:da:bf:ff:2d:a7:6a:82:fa:b5:f3:2e:
8f:0d:8e:5c:3b:5c:08:26:c4:4c:cf:f9:6a:90:f1:ab:41:89:
06:d9:06:41:81:de:6d:ca:b1:f3:17:b4:65:b5:27:b7:2c:02:
21:de:53:3a:ce:8a:fa:dc:8a:56:cc:a1:f3:0a:ca:9c:95:ec:
8e:a2:bc:20:2d:8d:49:9c:f9:ed:f1:d5:c9:0a:dd:04:7b:17:
df:46:b2:e2:41:0f:2d:fd:fd:fb:dd:c2:83:41:e9:eb:0e:bb:
85:8f:fa:ae:b5:4c:60:63:06:ef:48:6a:1a:bd:03:44:16:84:
64:93:49:e5:63:f7:42:2b:6e:e6:4c:0a:65:18:fb:10:c0:ff:
13:dc:13:ad:9b:0d:49:e4:71:d3:c2:e6:e6:3b:7f:c1:30:85:
b7:5e:94:c3:b9:75:a2:3c:0e:a0:0e:62:e5:b7:a3:9e:a8:f2:
ac:2b:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 14:10:04 2023 by rpki-client on console-ams.rpki-client.org