Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Bpt_7WSZPkzI4bnFpunLhUXJ_kU.roa
File: Bpt_7WSZPkzI4bnFpunLhUXJ_kU.roa (raw, json)
Hash identifier: oxEPWbaAYq7HpJZSUbOnXqCKpRsDON98PBLjgz+zv7Q=
Subject key identifier: 06:9B:7F:ED:64:99:3E:4C:C8:E1:B9:C5:A6:E9:CB:85:45:C9:FE:45
Certificate issuer: /CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Certificate serial: 018967D2BC90DF20B2667ED83E18E597781A
Authority key identifier: 14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Bpt_7WSZPkzI4bnFpunLhUXJ_kU.roa
Signing time: Tue 18 Jul 2023 07:06:51 +0000
ROA not before: Tue 18 Jul 2023 07:06:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 146.19.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:d2:bc:90:df:20:b2:66:7e:d8:3e:18:e5:97:78:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Validity
Not Before: Jul 18 07:06:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=069b7fed64993e4cc8e1b9c5a6e9cb8545c9fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:06:a7:f3:1b:b6:58:3d:18:a4:b6:f4:f7:
ea:54:bc:29:74:5c:64:5e:c5:0a:67:cc:46:63:ff:
f1:0f:21:33:b9:d7:2b:a6:fa:a0:94:81:fb:4e:19:
e7:53:82:9a:86:b4:a4:d7:76:53:a4:56:3d:d6:5d:
17:87:33:39:6e:5b:e9:37:b4:15:ab:48:c3:0f:98:
6c:7a:b7:37:6b:08:84:e9:bf:45:36:a2:37:fb:3e:
ea:6e:e0:06:e8:d8:58:0f:da:6b:0e:d2:c4:b6:79:
d6:a6:76:79:28:05:62:73:71:90:bc:8f:85:d5:4e:
9b:aa:e8:c5:9d:0e:f4:f5:fe:09:79:b1:5a:00:8e:
3f:e8:c7:7c:f0:36:e0:c6:4a:f7:d9:4e:42:40:26:
e7:7d:44:76:a7:fa:57:4c:c3:c7:9d:fc:bb:b6:d8:
ca:d6:ba:e2:5c:aa:01:bd:ef:c2:e6:80:de:06:c7:
a9:89:de:0f:e9:da:cc:88:cb:c5:82:7c:fa:43:24:
2a:7b:99:9d:e7:9e:71:57:31:5d:82:66:c2:8a:e5:
ec:f5:ca:b6:9e:99:06:9b:89:fc:08:1e:0f:ff:ef:
34:fa:18:59:22:a8:c6:82:c4:fb:c7:62:82:6f:0d:
5c:4c:97:23:12:d6:d0:88:3d:87:69:2f:1c:91:74:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9B:7F:ED:64:99:3E:4C:C8:E1:B9:C5:A6:E9:CB:85:45:C9:FE:45
X509v3 Authority Key Identifier:
keyid:14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Bpt_7WSZPkzI4bnFpunLhUXJ_kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
Signature Algorithm: sha256WithRSAEncryption
16:dc:02:5d:5e:41:b7:46:41:f4:d3:c6:04:6a:f9:7f:6e:16:
81:72:85:44:83:03:b6:98:23:01:fa:e6:33:32:5b:fa:ab:4b:
e5:29:b1:25:96:fb:bf:0d:54:c4:18:d9:65:98:6a:bf:ff:b8:
1c:5e:a1:23:46:6a:ce:d5:be:02:ba:37:8b:34:64:a2:6f:ec:
a6:38:4c:98:30:83:07:36:ab:c5:01:8a:5f:7c:12:f0:53:b5:
42:5d:30:6c:88:77:8f:81:2c:de:e0:e4:37:62:02:85:44:25:
84:6e:52:4e:51:27:a7:1a:a8:cf:66:ca:fc:4b:7e:62:4d:72:
03:ed:ea:69:22:9c:89:1d:aa:42:d8:64:5c:ba:29:3f:65:42:
fd:55:94:0f:92:dc:39:31:b9:65:32:b3:4a:99:f3:db:70:9e:
6e:7b:84:c8:a1:f6:be:d4:98:cb:0f:66:39:2b:ec:5d:05:d8:
bc:49:7d:c6:6d:62:52:88:ea:c3:fd:ac:fb:26:e0:c6:db:3b:
93:af:62:d1:4c:ad:7b:d5:76:11:5f:ea:38:a4:18:21:6a:3c:
ed:2f:44:7d:f1:3b:d4:a9:95:90:46:a9:8a:21:7f:d1:a4:6e:
50:bc:d2:2b:01:88:92:3c:9e:fe:7f:9f:78:4a:dd:be:60:bc:
01:7d:96:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:04:10 2023 by rpki-client on console-fra.rpki-client.org