Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/TnjbDyH2qZA4AvODAM5b5Dr4o18.roa
File: TnjbDyH2qZA4AvODAM5b5Dr4o18.roa (raw, json)
Hash identifier: Rebv94Gasuz0fehHH0qUaKwas2BWzzFT4sVdUP2LQ2M=
Subject key identifier: 4E:78:DB:0F:21:F6:A9:90:38:02:F3:83:00:CE:5B:E4:3A:F8:A3:5F
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: BF8F71
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/TnjbDyH2qZA4AvODAM5b5Dr4o18.roa
Signing time: Tue 01 Feb 2022 11:26:51 +0000
ROA not before: Tue 01 Feb 2022 11:26:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12554097 (0xbf8f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Feb 1 11:26:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e78db0f21f6a9903802f38300ce5be43af8a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:94:74:5b:0b:40:64:29:3f:e2:dc:fc:cf:
f4:9c:ef:ad:9c:c2:2d:ca:51:08:d1:11:c5:c3:89:
a2:ef:52:b4:cc:df:97:44:ab:df:5c:50:7b:5c:4a:
2f:80:dc:a8:1b:fa:61:4d:ca:a2:26:c9:74:b1:d6:
34:86:6c:e2:8e:ed:58:2e:68:93:f6:6f:12:68:5e:
77:a7:0f:31:32:e1:b4:11:32:dd:72:70:d5:30:a6:
6a:4b:e4:56:72:8e:6a:3c:6c:40:f8:c3:ea:82:70:
e6:48:32:02:00:e5:60:22:f4:f0:c4:a5:96:b4:0a:
a7:4f:00:9e:2f:c0:01:28:a9:61:bf:2b:73:38:92:
f9:79:45:d4:18:de:4f:87:d7:04:4a:30:89:e1:22:
04:4f:94:73:3c:a1:ad:30:f0:c3:36:75:84:d6:5b:
76:62:e4:9d:1b:18:22:f2:22:57:d1:a3:7d:f5:a7:
6b:6d:0a:b4:6e:10:89:7d:87:83:5a:00:e3:88:32:
92:68:78:58:6c:b3:e0:4c:0d:d9:ec:08:2c:f8:c2:
b6:94:9b:49:28:e2:90:6e:7e:b7:84:f8:8a:0b:7a:
35:fb:a4:79:18:b3:fe:ac:0d:74:85:d9:36:c2:d7:
b0:57:f3:90:22:1c:de:14:af:ed:b0:ee:a7:5e:9f:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:DB:0F:21:F6:A9:90:38:02:F3:83:00:CE:5B:E4:3A:F8:A3:5F
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/TnjbDyH2qZA4AvODAM5b5Dr4o18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
51:aa:ee:c5:a9:20:2f:e6:4e:32:4b:34:2b:45:de:63:40:b7:
28:4c:ca:85:de:7b:33:9f:ef:3f:5a:68:d9:57:4b:fa:61:07:
b2:85:da:ab:ea:05:39:5a:d4:cd:4c:c3:3d:b5:a2:df:40:85:
7e:5d:02:92:d9:27:2c:e2:6f:f9:aa:af:4d:11:8a:d2:96:9b:
2d:56:0a:81:93:ee:34:d4:7f:a4:36:ba:64:cc:6c:d4:59:dd:
9f:6a:a5:8e:c3:49:30:e9:47:c2:f1:74:f4:6a:33:bc:50:c3:
33:6c:8c:3a:1f:25:bd:12:59:ac:5a:17:51:eb:91:fe:f4:dd:
10:5d:cb:2e:ad:4b:69:0b:04:87:76:55:bd:29:7d:f0:42:90:
dd:15:8a:59:14:7f:14:83:d6:0d:5d:55:86:dc:2d:de:5c:1c:
f7:9a:0a:2e:34:e2:c9:69:05:65:58:fc:54:7e:f0:6a:bc:e4:
db:d5:9f:36:97:07:e6:6d:8d:ce:bd:38:e5:7f:52:ee:92:67:
ea:f4:de:9a:d8:66:80:94:29:a1:5a:be:ca:25:ea:8e:d9:49:
93:f6:0e:2d:a3:a4:cf:3d:5d:5a:07:b4:eb:65:18:85:d3:17:
fa:ad:2a:3b:6b:3e:48:5c:12:28:0e:dc:c7:fe:a3:5d:36:ec:
cb:2c:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:15 2023 by rpki-client on console-ams.rpki-client.org