Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/009asZzHGkLLSBqxwBoYmbxFqOc.roa
File: 009asZzHGkLLSBqxwBoYmbxFqOc.roa (raw, json)
Hash identifier: /rpkRtolZb9O93+pzRWP+BpU+YhPGGKeA73fp2DciU0=
Subject key identifier: D3:4F:5A:B1:9C:C7:1A:42:CB:48:1A:B1:C0:1A:18:99:BC:45:A8:E7
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 0183583E6EF21C92DC9EA3AE9C705AA40E6A
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/009asZzHGkLLSBqxwBoYmbxFqOc.roa
Signing time: Tue 20 Sep 2022 00:13:50 +0000
ROA not before: Tue 20 Sep 2022 00:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:58:3e:6e:f2:1c:92:dc:9e:a3:ae:9c:70:5a:a4:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Sep 20 00:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d34f5ab19cc71a42cb481ab1c01a1899bc45a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:92:ca:ba:55:0f:f1:cf:12:d9:10:6a:40:
32:29:99:61:33:83:3a:d8:c4:f0:ed:3a:1c:76:d8:
82:96:63:d6:f2:77:e3:af:6f:9c:8d:21:87:85:91:
4c:d5:c1:fd:95:fc:5d:59:10:f2:e5:92:c0:5a:8d:
01:cf:70:8d:c1:03:70:68:7f:d9:89:3e:9f:dc:dd:
3e:b2:a2:b9:3f:67:6c:3e:00:2d:a8:10:a1:cd:bc:
46:fa:d8:94:64:dc:09:0b:8e:f1:92:1a:27:cf:54:
25:36:ba:18:fa:88:4b:fc:39:40:4d:e3:9a:5e:01:
29:70:d0:66:75:2d:f9:44:97:92:eb:73:b6:4b:01:
cc:2c:45:02:84:39:b7:07:77:53:7d:b6:9a:64:b7:
c2:70:c8:8f:95:f7:09:db:da:46:1e:b1:5b:9d:c3:
04:d1:f6:5d:c9:d1:e9:1a:64:90:89:6c:22:b5:d0:
f7:58:bd:40:fb:aa:2a:a1:93:28:50:85:af:80:cb:
93:ec:7e:67:8a:77:ed:c6:95:dc:f1:37:0a:42:7f:
c6:ea:02:b7:56:51:e4:5e:d0:e3:39:3a:a0:99:6a:
84:c2:de:33:c1:b0:27:49:1f:d6:d3:d4:e8:6b:cd:
07:f2:4b:ca:dd:76:e6:6b:60:e7:c6:60:91:7e:52:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:5A:B1:9C:C7:1A:42:CB:48:1A:B1:C0:1A:18:99:BC:45:A8:E7
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/009asZzHGkLLSBqxwBoYmbxFqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ea:bc:f5:e0:50:7b:dc:0d:5f:21:b8:46:31:ef:30:cd:93:
e4:05:bc:15:2d:69:dd:b3:0d:09:cf:6b:9f:76:2f:75:bb:cf:
ee:84:f6:4a:3e:61:ed:5f:62:f8:51:3f:75:5f:9a:a8:91:f4:
b8:44:39:e9:20:c3:c8:9d:4d:70:bd:3d:85:8d:75:80:73:d7:
5c:12:04:56:58:ce:4e:b0:57:4e:41:0e:8c:a8:b5:f6:c2:fc:
b5:7a:8b:c4:40:ca:e5:a5:b9:92:00:f1:6a:5f:de:7c:34:1e:
95:fd:8c:95:f8:9a:62:56:ee:83:92:76:f2:5f:d1:e1:14:08:
c3:8d:c6:03:a3:a7:7c:9f:a7:54:6a:56:64:2c:0a:3b:77:a5:
6e:d3:8d:5a:61:09:8d:03:48:72:b1:35:b3:b7:27:24:f7:69:
97:17:00:5b:fe:49:a6:da:ae:cf:7b:20:26:8d:b7:f1:28:55:
31:e0:3d:a4:07:a4:1b:da:e8:5f:fe:64:e3:22:9c:23:86:ec:
1a:df:c9:a8:10:e3:53:51:47:b8:54:a0:c4:c5:a3:a8:70:d0:
6a:f8:4e:cb:7b:f0:a7:d4:c2:e0:8c:f0:41:33:0d:e9:c9:28:
c9:51:cc:d5:22:ef:31:16:fc:0d:ff:4d:51:1c:d5:20:55:d0:
93:3a:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:15 2023 by rpki-client on console-ams.rpki-client.org