Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/imP1vXCH92kCxoSAp91mByVdUKU.roa
File: imP1vXCH92kCxoSAp91mByVdUKU.roa (raw, json)
Hash identifier: fG+Z+ZaH/f/jUuKEECsViAMi9L8tJGn6EEleUXPuYpY=
Subject key identifier: 8A:63:F5:BD:70:87:F7:69:02:C6:84:80:A7:DD:66:07:25:5D:50:A5
Certificate issuer: /CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
Certificate serial: 01856DCAE8229DF3F52599814805025E5159
Authority key identifier: 74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/imP1vXCH92kCxoSAp91mByVdUKU.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e8:22:9d:f3:f5:25:99:81:48:05:02:5e:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a63f5bd7087f76902c68480a7dd6607255d50a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:6a:8c:51:09:aa:f3:67:61:68:0e:51:14:
f8:a6:01:a9:21:aa:c3:05:cb:84:ee:bf:44:fc:62:
4b:c7:fb:eb:d7:fa:fe:6e:9c:37:d3:81:9c:bb:3b:
73:91:51:fe:04:75:8d:4f:a7:1e:a9:81:00:83:9c:
34:6a:d3:e3:58:84:7e:11:38:fd:eb:9e:c9:99:08:
83:06:cb:7f:0f:da:a2:87:a9:ce:1b:f7:10:d8:5b:
00:79:7c:2b:c7:0c:37:75:b0:de:24:7c:0d:e9:b6:
b9:99:75:c7:ba:bc:10:64:4c:e2:82:c0:df:34:81:
c3:78:6c:8e:18:57:20:81:cf:cc:e2:eb:d2:e6:0c:
24:56:4f:08:33:ef:4b:8c:c2:48:f3:83:42:43:36:
fd:ab:fd:69:0c:21:5f:0a:c9:44:79:8b:3f:40:54:
cc:65:99:73:52:ee:b2:12:5b:f2:2f:f8:37:d7:d4:
3d:57:2f:cc:fa:6f:2b:ed:81:87:13:e6:92:fa:39:
46:23:7d:34:dd:3a:16:d7:af:7d:a5:f8:63:59:cb:
05:92:63:a3:c2:58:6c:54:7e:31:b3:db:7f:6b:38:
78:1a:d9:c1:cc:a2:2c:78:76:2e:dc:a4:73:9f:b1:
cc:ed:07:db:07:fb:77:fa:89:42:14:b6:34:d0:bd:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:F5:BD:70:87:F7:69:02:C6:84:80:A7:DD:66:07:25:5D:50:A5
X509v3 Authority Key Identifier:
keyid:74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/imP1vXCH92kCxoSAp91mByVdUKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.136.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:1d:ea:d9:88:a2:cf:7a:27:5a:af:af:f0:d6:85:ff:36:
97:79:57:d5:6b:16:83:93:e0:24:59:71:18:4e:23:36:2e:1c:
47:d8:cb:e7:f7:d1:83:55:32:e9:c0:14:06:1a:6d:2f:0b:5e:
f9:b7:6e:e4:94:e7:5e:95:24:9d:d2:95:2b:05:a1:4c:1a:ca:
d4:c6:9c:32:4e:42:b8:3d:dd:ce:73:a0:84:51:d4:3a:6b:ba:
13:51:63:a4:a9:6a:77:aa:82:03:ed:71:db:3a:db:33:40:89:
4f:6b:e5:1d:49:ec:3b:d4:43:42:02:e1:16:c6:56:16:e5:ae:
3e:cd:2e:a5:06:0c:04:49:28:89:d1:2d:9b:c2:95:b2:b1:30:
aa:0f:0f:90:49:46:a1:2e:e4:11:7b:89:98:35:c6:2e:0d:42:
9f:a4:c2:91:02:e3:3a:f6:d4:a7:bd:a7:75:c3:38:3c:1a:bf:
dd:22:fa:a8:f8:81:56:a2:ff:d1:d5:27:90:73:65:54:65:2c:
41:75:af:7f:bd:1b:64:de:12:70:76:8f:44:4b:11:01:5d:21:
eb:f8:66:eb:51:21:21:1e:0c:e0:05:dc:03:f8:35:c2:27:88:
fb:f0:f5:1d:c3:a0:be:8d:a4:af:47:08:82:b1:92:89:13:00:
b0:f6:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:52 2024 by rpki-client on console-ams.rpki-client.org