Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/PcpsMb3h5MUPqwSRcFRItdEzEK8.roa
File: PcpsMb3h5MUPqwSRcFRItdEzEK8.roa (raw, json)
Hash identifier: jDCf9HlxPLeOqUlJHRVRn61TX5T3ObjhvfWc0lkwXoo=
Subject key identifier: 3D:CA:6C:31:BD:E1:E4:C5:0F:AB:04:91:70:54:48:B5:D1:33:10:AF
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 7805AF
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/PcpsMb3h5MUPqwSRcFRItdEzEK8.roa
Signing time: Sat 01 Jan 2022 02:54:55 +0000
ROA not before: Sat 01 Jan 2022 02:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133973
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7865775 (0x7805af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Jan 1 02:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dca6c31bde1e4c50fab0491705448b5d13310af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6d:5f:d1:70:ca:aa:43:95:b7:7b:69:92:0e:
5f:f6:2c:e4:07:3e:b3:ba:8b:ba:f0:94:e1:94:a8:
0a:12:d1:f4:91:75:0f:86:7e:db:68:64:52:c4:09:
37:e8:9d:39:19:fb:45:9b:e3:54:30:40:79:3f:6b:
fc:bc:5a:17:5b:6e:11:10:db:90:56:67:55:07:53:
23:87:49:82:af:49:19:03:69:38:4f:18:8e:39:91:
e4:c2:4b:96:b1:be:88:eb:a6:6e:fa:e6:10:88:df:
52:d7:43:d4:3c:98:86:cd:24:30:9a:07:44:00:5e:
24:3f:03:fc:37:e2:9b:2f:08:22:23:bc:c7:19:82:
e0:d9:9b:6e:21:7d:4a:1c:5e:b8:bb:e7:94:13:ec:
bb:b3:cb:74:5c:b8:ae:96:34:80:66:0b:5d:f0:bc:
c3:7f:40:2a:87:38:c8:8e:83:0a:14:77:6d:27:97:
bf:c6:af:21:5a:2f:eb:78:6e:37:e3:88:93:58:d8:
d0:40:2f:ca:3b:2b:66:2d:eb:fd:1d:0c:8b:ac:aa:
3c:36:d6:47:85:43:f1:63:cd:ed:45:d2:02:7b:ee:
c8:1c:72:98:f8:11:be:9d:bb:44:87:4d:02:7f:ba:
9b:02:5e:d1:3c:8c:3a:41:11:e0:a8:05:ee:c2:96:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:6C:31:BD:E1:E4:C5:0F:AB:04:91:70:54:48:B5:D1:33:10:AF
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/PcpsMb3h5MUPqwSRcFRItdEzEK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
10:86:ca:82:0d:80:84:15:65:f9:02:7f:60:99:1e:3f:09:48:
f2:7d:7c:54:bc:b1:a9:7b:0f:a9:16:3f:8a:25:fa:6d:58:c9:
4f:b7:48:af:ec:9f:aa:3c:20:93:c2:7d:9c:cd:2b:d3:a2:6b:
ee:58:70:cd:f6:21:c1:68:fd:44:35:fc:b5:fe:44:ff:5f:d1:
03:b9:a2:ac:36:6f:e5:2f:da:8b:fb:1d:47:be:a7:6d:3b:16:
9f:ce:e2:90:2a:af:57:16:fd:69:4b:47:cd:73:8d:5a:a4:e6:
7a:1c:60:fa:da:d5:10:03:3f:6d:e8:63:4f:e1:9e:84:2a:6b:
de:47:47:51:66:96:36:35:08:e1:43:db:99:a5:25:0b:25:03:
34:47:3b:f8:87:50:be:ee:72:d6:5f:1d:2c:3a:70:e4:cf:fb:
41:16:65:5f:ea:0a:39:f7:c6:03:23:ba:be:82:2c:30:b7:7c:
fd:9e:04:58:bd:f9:cb:48:a2:52:44:9b:bf:74:f6:38:07:46:
d4:0e:c6:ed:1d:3d:fb:63:da:a0:04:d1:ab:7d:70:2e:d5:82:
0b:51:49:b2:f4:35:bb:be:9b:fb:85:b9:d1:05:25:bb:12:f3:
9d:09:ca:d0:0a:54:7f:f5:dd:f8:12:22:02:55:38:49:ac:a5:
64:26:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:15 2023 by rpki-client on console-ams.rpki-client.org