Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/d-ear5CTQbby_BN39hw7gOwEwZU.roa
File: d-ear5CTQbby_BN39hw7gOwEwZU.roa (raw, json)
Hash identifier: pwPwhLEFYG9pjiSLALoqRhEbMGhJ86Sf5bEr/SNpNsA=
Subject key identifier: 77:E7:9A:AF:90:93:41:B6:F2:FC:13:77:F6:1C:3B:80:EC:04:C1:95
Certificate issuer: /CN=4737263af544e1bba5dec5e988896b69884e08b4
Certificate serial: 5EC797
Authority key identifier: 47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/d-ear5CTQbby_BN39hw7gOwEwZU.roa
Signing time: Sat 01 Jan 2022 01:53:40 +0000
ROA not before: Sat 01 Jan 2022 01:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211479 (0x5ec797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4737263af544e1bba5dec5e988896b69884e08b4
Validity
Not Before: Jan 1 01:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77e79aaf909341b6f2fc1377f61c3b80ec04c195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:e0:aa:6f:5b:c8:90:23:59:34:73:79:32:
73:68:c1:34:95:32:02:65:95:e7:b0:b1:f4:ea:a9:
d2:c4:1b:26:53:38:61:81:4e:15:f7:fb:0d:e6:fd:
b9:0e:af:3c:96:a1:8f:41:c2:65:8b:b3:57:2a:24:
63:9a:cf:d0:61:f7:89:c8:1f:ba:86:a1:d7:2e:0d:
1e:c0:d5:b0:0b:2d:86:29:05:5b:2c:44:0a:09:40:
85:c3:3f:e4:3a:0f:da:e8:04:f2:4f:1a:ee:3d:fc:
b8:83:f1:ef:c0:16:5b:33:29:c1:dc:aa:66:c7:d2:
53:02:dd:89:b1:21:d5:f5:90:29:be:4a:13:cd:ed:
2e:22:af:d3:b0:3d:b4:de:68:f7:09:1c:36:5e:eb:
0d:9a:fa:1e:8d:c5:79:38:d7:b1:95:b4:ce:b9:f3:
ef:b9:7f:d5:fb:0b:b9:6e:a0:37:6d:b5:68:68:71:
c3:f1:a2:89:e6:14:16:a7:9d:97:c1:e5:7b:cf:6d:
89:6f:42:0c:a4:d0:9f:c5:2c:e9:17:a4:99:b6:32:
e6:d2:8f:25:e7:a4:e4:ac:e4:31:0e:71:af:b6:4c:
a7:03:50:21:4c:aa:f7:dc:2b:65:1a:23:9a:81:af:
3c:cb:23:76:c5:e4:7d:69:2d:98:1f:47:c5:0f:68:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E7:9A:AF:90:93:41:B6:F2:FC:13:77:F6:1C:3B:80:EC:04:C1:95
X509v3 Authority Key Identifier:
keyid:47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/d-ear5CTQbby_BN39hw7gOwEwZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/RzcmOvVE4bul3sXpiIlraYhOCLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.230.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b4:48:5b:1e:75:ee:e7:db:45:6b:dc:be:24:94:2a:78:61:
28:bf:7a:29:d2:9f:11:80:25:81:15:67:b6:1d:6b:3b:8b:31:
c6:4e:e6:88:67:3c:1f:8d:24:04:44:23:50:d9:66:bd:c8:14:
76:17:cc:d3:43:33:82:44:b9:6d:42:2a:26:5a:02:0a:bb:3b:
fc:89:49:e7:11:54:c1:22:ba:32:2d:89:01:52:1c:0f:51:d2:
7e:c2:1f:b0:65:86:51:0f:39:7b:30:45:6a:14:bc:41:77:90:
ef:b2:f5:07:8f:87:a7:27:ed:2d:8e:3a:ce:47:bd:be:27:3c:
84:de:6f:d3:b1:5f:f0:28:f9:1f:6f:5b:04:81:7a:71:12:c5:
52:d4:b4:89:39:61:a8:8c:32:73:42:91:b6:07:08:a9:6b:90:
d3:99:e1:f8:8e:18:23:bd:b1:ec:ef:ba:e6:5a:3b:6c:b3:56:
cd:d0:0e:53:5c:fb:0d:7b:d9:d3:0b:d2:de:f1:c2:ef:03:6e:
0f:a9:a1:22:74:c6:2d:a5:86:f2:ee:aa:77:53:66:fc:ca:d8:
89:81:68:fa:b6:78:d9:4b:f3:10:36:7d:8d:dc:b8:c2:b4:bd:
8b:92:af:d6:29:d7:ac:89:8a:8b:a9:0b:9e:4a:b2:24:5d:2b:
34:ba:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:00 2024 by rpki-client on console-fra.rpki-client.org