Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/5T0c2zZ_uucIa43qW0TAbLbNrcE.roa
File: 5T0c2zZ_uucIa43qW0TAbLbNrcE.roa (raw, json)
Hash identifier: WHQVNXTz5Qrh6D0JR2XlUs1ZZxV6uHq8rpaKWTh6y8c=
Subject key identifier: E5:3D:1C:DB:36:7F:BA:E7:08:6B:8D:EA:5B:44:C0:6C:B6:CD:AD:C1
Certificate issuer: /CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Certificate serial: 018B011DFB6C9EA4E0E8AA52F0ED3A1CEBB7
Authority key identifier: 25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/5T0c2zZ_uucIa43qW0TAbLbNrcE.roa
Signing time: Thu 05 Oct 2023 18:33:43 +0000
ROA not before: Thu 05 Oct 2023 18:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 146.19.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1d:fb:6c:9e:a4:e0:e8:aa:52:f0:ed:3a:1c:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Validity
Not Before: Oct 5 18:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53d1cdb367fbae7086b8dea5b44c06cb6cdadc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:5d:5e:e9:3d:60:b8:e8:30:79:85:14:a3:
a1:4c:ce:9c:da:e5:1f:22:b1:c6:5c:03:eb:d9:11:
71:da:4a:88:70:39:51:0e:b8:1f:bc:0b:b4:50:83:
17:68:ff:a9:18:de:3c:e0:27:ef:24:5d:07:08:1f:
86:f0:e2:cd:ae:14:93:57:25:3e:6e:31:5e:22:c8:
7e:0c:e6:aa:2e:b2:74:67:39:43:52:0c:c8:34:ec:
16:44:bc:e3:9b:91:a8:3f:85:d9:cf:2e:22:b8:56:
6c:f2:4d:9a:8d:14:da:c3:4b:ce:30:85:37:b4:47:
1a:d3:f3:df:e5:d7:89:18:3b:78:04:2d:c7:84:9d:
25:3e:e1:7c:41:9a:9a:9e:ac:19:bd:91:a9:dc:9e:
03:02:bf:2d:34:42:88:2e:b1:b2:5e:99:ff:8b:01:
4d:7c:58:b8:3f:42:2d:b3:8d:1f:e9:c4:c1:3c:b0:
69:6c:8e:4a:74:00:15:13:03:94:55:54:5b:8c:51:
7e:e3:cf:11:67:74:ea:7a:c7:34:2d:1b:9b:37:88:
bd:6c:df:44:94:31:66:49:6b:bc:24:ba:c2:7d:d8:
48:20:8c:35:f3:cc:f5:cf:6b:f4:ce:b6:f9:a3:57:
e7:b5:e4:25:10:4c:3d:60:06:0f:25:9a:85:1c:42:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:1C:DB:36:7F:BA:E7:08:6B:8D:EA:5B:44:C0:6C:B6:CD:AD:C1
X509v3 Authority Key Identifier:
keyid:25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/5T0c2zZ_uucIa43qW0TAbLbNrcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:15:3c:6e:4c:ef:69:8b:2b:95:34:85:e4:75:1c:07:c3:0a:
ee:87:f0:b9:6e:df:2e:b4:1c:d2:2f:02:5f:6e:56:24:1b:68:
f9:c6:11:7c:80:5f:bb:f5:7e:a9:99:08:24:a1:ce:b4:7b:37:
ea:53:e6:d9:e8:f2:69:96:5f:8a:bb:3f:c8:60:cd:ff:74:16:
db:77:32:7b:a5:97:1f:dd:71:7f:4e:c6:c3:d5:2a:cc:5e:a8:
c5:cc:94:80:cf:e1:27:27:fd:e2:d3:62:32:df:c2:61:78:2a:
f1:2f:18:25:53:8f:a9:e5:88:bf:a7:4f:b5:26:75:e6:eb:e0:
9e:45:1d:31:3e:6c:34:67:e7:82:fb:8d:f7:16:f5:53:2b:05:
bd:c2:19:e1:8f:6b:49:35:d3:8d:7d:ed:89:42:ef:53:f2:8b:
cb:09:36:ca:2b:c8:01:14:36:24:43:aa:65:e7:a1:bf:84:55:
90:2c:ec:f2:58:2e:c5:b2:25:4a:f4:c6:7b:bc:c3:22:f6:aa:
3a:56:fd:66:69:e1:f2:cd:6b:59:9b:6d:7d:b8:bf:cd:f6:0e:
12:60:83:ac:f7:c1:66:57:67:57:c6:1b:72:11:85:de:21:65:
23:3a:92:df:dc:01:7c:ac:72:c9:7d:e7:0e:60:c0:0f:2c:3e:
d6:8b:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:45 2024 by rpki-client on console-ams.rpki-client.org