Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/_g4LKP7Du52wu9GA45ue3Erb2Zs.roa
File: _g4LKP7Du52wu9GA45ue3Erb2Zs.roa (raw, json)
Hash identifier: SLfKXgK+8HqFvRmXRQ2gjKOr78Dj8jAiUcYBgL/kB9I=
Subject key identifier: FE:0E:0B:28:FE:C3:BB:9D:B0:BB:D1:80:E3:9B:9E:DC:4A:DB:D9:9B
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 0185E07E674330624AD3F05EE5A4431FB2E5
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/_g4LKP7Du52wu9GA45ue3Erb2Zs.roa
Signing time: Mon 23 Jan 2023 21:17:38 +0000
ROA not before: Mon 23 Jan 2023 21:17:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15377
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:7e:67:43:30:62:4a:d3:f0:5e:e5:a4:43:1f:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Jan 23 21:17:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0e0b28fec3bb9db0bbd180e39b9edc4adbd99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:22:8d:bb:0b:d3:42:3f:b9:52:0c:2e:f2:
bb:3f:e1:69:11:2a:ce:8f:b5:23:cc:c8:78:77:00:
55:64:3c:a2:6e:a9:97:27:83:9c:9c:59:b5:6a:07:
2c:98:75:8b:8f:8f:ff:6d:35:5e:f7:3e:78:f3:0e:
69:de:c7:85:e9:41:67:64:14:f9:ba:82:d7:c8:17:
bb:6e:ef:e4:7e:f4:79:8f:c2:c6:21:fd:06:60:dc:
62:fa:27:4a:0e:e1:e2:c2:19:24:d4:6d:17:87:93:
c7:c5:34:25:05:50:cd:d6:5d:6b:17:e2:d9:e9:1e:
c8:0e:97:ea:04:60:b3:f3:ac:60:bc:2b:21:e4:9d:
46:60:05:4c:31:25:f1:2f:ff:85:db:34:ea:06:0f:
8c:b2:25:2b:ee:96:d0:a7:2a:77:57:f1:57:24:94:
a1:7e:63:24:5e:b1:82:ed:bc:55:c0:a7:6a:8d:88:
f4:cc:d4:46:cc:1d:f7:d5:0d:3a:5b:e1:51:1e:30:
1d:cf:4e:2c:b8:8c:2b:da:78:ea:1f:77:34:58:7a:
02:f7:52:68:bd:c0:b6:3f:ae:6f:8a:4d:56:c4:e0:
23:8e:9f:e8:7a:c8:03:48:8d:a0:01:62:06:68:70:
47:56:94:21:dd:ba:fb:a9:65:6e:3f:e1:53:4a:0c:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:0B:28:FE:C3:BB:9D:B0:BB:D1:80:E3:9B:9E:DC:4A:DB:D9:9B
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/_g4LKP7Du52wu9GA45ue3Erb2Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c1:41:ec:9f:2d:48:7d:19:25:5f:27:cc:06:44:09:72:cf:
15:f2:01:3a:b0:5f:f2:8c:95:38:b8:bd:83:56:dc:c2:03:6b:
27:0d:09:d0:6b:18:d4:43:55:cd:c7:63:68:62:cb:3f:f5:6d:
d1:6a:6d:79:39:cf:a1:8b:41:46:f4:8a:e5:19:c8:23:3c:7b:
d1:15:36:7a:41:71:a3:73:74:3f:1c:65:78:15:9e:46:e9:92:
81:a3:02:b6:a0:8c:d1:5e:1d:83:ce:3e:24:03:14:ad:89:11:
e0:6c:d0:f9:3f:96:cf:4d:27:cb:ff:2a:21:e5:1e:93:c3:e1:
08:bf:90:33:55:2e:71:93:51:9a:1a:02:3b:0b:dc:8b:06:ba:
88:4f:fc:10:71:17:f3:a0:69:57:11:4f:fb:5b:7e:d8:81:59:
e4:8d:c6:9c:92:e0:ac:02:24:ce:e7:0c:9a:e7:73:ff:05:77:
ea:ca:e9:f8:e7:4d:4c:af:30:d5:16:fe:e0:f9:df:4f:fb:87:
0b:9a:50:6b:85:a8:d9:63:fe:44:d0:f7:5c:92:15:6f:4d:6f:
07:d8:95:ac:e7:35:e5:33:25:c9:d4:bc:61:65:49:1a:cd:a0:
8d:4f:ce:cb:5d:c8:87:60:8d:35:4f:94:22:8c:65:5f:e8:df:
2f:c1:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org