Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/72U5zJYaB9W3EoYhRZS691DK7ls.roa
File: 72U5zJYaB9W3EoYhRZS691DK7ls.roa (raw, json)
Hash identifier: ZNRrzMv0hNt068+oYV2ZB0JUjaQ5dkBRtPsLxVRy9TY=
Subject key identifier: EF:65:39:CC:96:1A:07:D5:B7:12:86:21:45:94:BA:F7:50:CA:EE:5B
Certificate issuer: /CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Certificate serial: 01856F1D838A8E9BB24254EAE354BC314530
Authority key identifier: E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/72U5zJYaB9W3EoYhRZS691DK7ls.roa
Signing time: Sun 01 Jan 2023 20:54:43 +0000
ROA not before: Sun 01 Jan 2023 20:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 146.19.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:83:8a:8e:9b:b2:42:54:ea:e3:54:bc:31:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Validity
Not Before: Jan 1 20:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef6539cc961a07d5b71286214594baf750caee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:f6:44:3f:4a:79:6f:ef:79:78:97:da:bc:
ad:8a:39:3a:15:d0:8d:8a:ab:a9:cd:ed:ee:fb:e8:
e2:b0:c4:23:61:45:00:e8:55:16:b5:09:0c:e2:f0:
53:39:c1:0f:75:14:57:69:6c:64:5a:65:78:4b:7a:
d3:92:c4:b0:fb:c2:19:b5:6c:5b:a2:18:86:c3:19:
9a:e2:24:43:3e:64:3e:d5:b0:29:f6:ed:94:6b:a2:
97:10:a3:44:13:6f:8d:76:8a:83:d1:d2:98:d4:bf:
4f:69:b1:65:b9:95:96:ee:e6:41:f0:87:ae:e6:44:
27:28:eb:31:97:14:93:94:3a:6c:2b:6c:87:5b:eb:
85:77:29:e2:4a:f1:f5:92:7f:ed:44:e3:12:f5:18:
0d:97:56:30:1d:86:22:aa:0f:27:ef:0c:3c:62:08:
21:aa:83:12:ed:df:ba:02:fa:07:27:be:d8:7b:b8:
54:ee:8c:6b:59:88:aa:81:2e:81:87:db:7d:fa:76:
a4:40:d6:8e:ec:80:28:49:79:75:67:36:f1:81:df:
6d:9b:a2:8d:25:2d:10:ec:5a:52:07:33:d2:df:06:
f8:be:45:2c:24:cd:35:a5:cc:77:bb:f2:2d:d1:7d:
a9:84:03:82:74:f6:07:b4:14:6a:76:30:f6:e3:a1:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:39:CC:96:1A:07:D5:B7:12:86:21:45:94:BA:F7:50:CA:EE:5B
X509v3 Authority Key Identifier:
keyid:E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/72U5zJYaB9W3EoYhRZS691DK7ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e7:0a:a3:e9:ab:21:1d:c1:7f:01:c0:57:58:df:71:28:c7:
fc:0a:e0:3f:8a:fc:98:8f:10:0d:81:4e:6c:ea:14:a3:ef:20:
38:d1:5a:20:97:2b:d8:cf:6b:1b:ac:4f:74:66:f1:68:f4:13:
6a:db:ab:90:04:52:a6:8e:e1:7e:c8:b8:d6:e1:42:bb:98:51:
03:4c:6f:e0:0a:01:04:da:54:b0:d8:cb:c5:a6:7c:b7:bb:6e:
77:2b:50:14:61:52:79:66:84:ba:51:bd:83:10:96:20:e0:b2:
0e:94:c9:ff:db:a4:76:a2:59:98:78:42:19:ce:61:be:39:7b:
ef:eb:c2:f3:bf:4d:79:9c:e4:ae:4a:24:0f:ac:82:11:0b:f7:
f4:7d:9f:5e:8e:5b:dd:fd:21:57:95:80:57:30:ed:ee:5f:ae:
53:5c:1f:e8:53:cb:8e:d4:88:91:18:7a:9a:fc:00:39:a0:7d:
55:5f:4b:b2:e5:e5:f0:95:90:a6:3d:6f:e8:f3:62:b5:a1:42:
1b:9c:9b:0a:bf:01:8f:bf:db:ef:1a:02:3d:fe:ee:41:9c:23:
ce:ba:4b:dc:3e:15:b2:94:2e:0a:a3:c1:61:79:cd:b4:b6:32:
30:13:9b:79:53:1c:00:b5:2e:fd:29:3a:28:bc:07:86:7d:b5:
a9:79:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 12:31:58 2023 by rpki-client on console-ams.rpki-client.org