Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/l5ZHh9uGa1N4MTqjR0pnk3_LFJI.roa
File: l5ZHh9uGa1N4MTqjR0pnk3_LFJI.roa (raw, json)
Hash identifier: yWsB//Z952HyEAlOpxAcj3PHFL5wbd9Zjw1ZoeqoqqE=
Subject key identifier: 97:96:47:87:DB:86:6B:53:78:31:3A:A3:47:4A:67:93:7F:CB:14:92
Certificate issuer: /CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Certificate serial: 0185C60F74E09878AA62117505B5CD0F278D
Authority key identifier: 34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/l5ZHh9uGa1N4MTqjR0pnk3_LFJI.roa
Signing time: Wed 18 Jan 2023 18:06:19 +0000
ROA not before: Wed 18 Jan 2023 18:06:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:0f:74:e0:98:78:aa:62:11:75:05:b5:cd:0f:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Validity
Not Before: Jan 18 18:06:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97964787db866b5378313aa3474a67937fcb1492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:31:ad:d1:1c:24:82:1f:13:0d:97:1f:47:
c5:13:9e:dc:eb:2f:0c:e7:8b:22:72:96:73:54:af:
45:91:01:86:18:7f:30:75:ca:57:73:4a:a5:d1:25:
0b:50:fa:1e:2f:f7:89:ba:5c:02:1a:ff:39:80:e4:
4e:98:98:fd:a0:cc:a9:95:9a:78:8f:b9:a2:ac:e1:
ea:c8:90:f8:25:14:e9:3a:80:77:75:f3:9c:75:69:
6b:2f:3f:02:6b:43:13:c7:c8:71:a1:c3:71:ca:74:
30:a1:14:e9:d4:f2:fb:f5:de:8c:9b:d6:26:bd:f3:
07:98:e3:c3:96:8a:1c:11:3e:88:ff:48:33:9b:c7:
4d:bf:1a:8a:1f:44:4b:29:12:a3:9e:0f:e3:38:39:
39:04:b5:bf:63:ee:0f:9f:14:b3:87:26:e1:a5:1f:
e1:70:be:97:62:06:81:8a:e0:c8:87:95:6a:89:d2:
da:f6:72:5e:1b:73:04:e7:7d:c2:b0:5f:87:39:22:
d8:87:eb:87:24:34:59:9e:2c:95:72:73:b0:1f:b7:
02:5d:27:cd:37:33:4e:2e:86:c4:df:a1:a4:7f:cb:
31:b0:e8:af:6f:d4:f5:a2:93:1a:ad:27:15:ee:22:
fb:30:ff:c0:8d:91:61:2f:96:61:c7:cb:6f:6a:33:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:47:87:DB:86:6B:53:78:31:3A:A3:47:4A:67:93:7F:CB:14:92
X509v3 Authority Key Identifier:
keyid:34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/l5ZHh9uGa1N4MTqjR0pnk3_LFJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b0:9e:20:a9:ad:26:17:29:5b:79:87:3c:69:4f:44:9e:4d:
6b:6e:6b:5f:86:17:c7:99:2c:04:30:f7:7b:76:33:90:7e:6e:
9d:4c:80:5a:24:b0:b5:e0:fd:36:34:fa:44:02:3d:f0:48:38:
b4:1a:c3:4d:6f:4a:70:55:57:e2:f2:6a:c1:52:0e:2b:a0:e7:
d9:0a:fe:37:fa:de:26:14:c7:9d:f7:21:5b:71:24:01:56:63:
c6:14:cb:ba:99:f8:99:79:d2:c9:b3:ac:d3:c5:ea:36:cd:d4:
ac:ed:ca:13:78:b4:08:80:13:95:8f:32:b4:dc:c5:9c:36:d4:
02:c0:8a:af:74:ca:1b:9a:22:54:82:8b:00:c4:ec:8c:36:9c:
50:6b:16:e1:a9:5d:24:b1:0b:06:08:4a:22:26:d0:42:3c:34:
67:4e:b7:96:29:cc:c8:ab:7e:36:1c:70:2b:91:74:9e:57:ad:
c5:a0:56:0f:09:cd:a4:0c:27:e7:1c:0c:e6:2d:cc:16:e8:0c:
02:59:e9:0d:e6:29:b9:cf:b3:59:d5:5e:06:0c:b9:30:e8:e0:
5b:1b:55:f6:63:3f:70:61:98:50:77:f2:79:04:3f:4a:ad:1f:
ab:dc:01:15:bb:fe:02:c8:8c:b8:d5:d4:7f:09:70:a0:1f:22:
05:41:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org