Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/ILCTPzgJ3vFE5FnFvRB4vCBXE_4.roa
File: ILCTPzgJ3vFE5FnFvRB4vCBXE_4.roa (raw, json)
Hash identifier: uEpzqJtD+wjAKzUr56D+R4nwcz2bRD+Uf24l6XYZG28=
Subject key identifier: 20:B0:93:3F:38:09:DE:F1:44:E4:59:C5:BD:10:78:BC:20:57:13:FE
Certificate issuer: /CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Certificate serial: 018682F059E59275083F6AEC2CC8CFD53335
Authority key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/ILCTPzgJ3vFE5FnFvRB4vCBXE_4.roa
Signing time: Fri 24 Feb 2023 10:20:35 +0000
ROA not before: Fri 24 Feb 2023 10:20:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f0:59:e5:92:75:08:3f:6a:ec:2c:c8:cf:d5:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Validity
Not Before: Feb 24 10:20:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20b0933f3809def144e459c5bd1078bc205713fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:40:2c:88:5c:79:a1:57:79:af:57:12:a5:
58:24:0f:4a:45:a0:bb:f1:a6:35:ee:4c:20:30:94:
40:ab:d3:11:d3:6e:d2:6d:cf:c5:72:d6:22:33:ac:
07:4d:d1:d2:ee:80:91:6b:12:9c:90:90:46:13:9e:
82:20:b6:d2:4e:9b:b6:03:3d:eb:1c:a0:93:15:cf:
6a:d7:4e:b0:68:17:33:47:b6:ad:64:95:8d:d2:44:
e4:2b:90:b6:42:b5:d0:70:b6:a8:cd:d0:27:0e:79:
42:f5:bb:59:0b:6f:ba:8a:f6:f5:e1:77:d9:a4:3f:
e3:50:3a:dd:38:62:15:25:69:37:d4:f0:91:cf:5b:
12:51:d4:9b:84:b0:ef:16:cf:d4:4f:47:7c:cd:2a:
8a:70:fd:c8:58:4a:9b:b9:7c:13:30:27:8d:aa:5b:
92:3b:7e:d6:03:47:fd:07:c2:06:ef:38:19:35:50:
19:a4:7f:52:86:74:8b:8c:24:e4:0f:ae:4b:11:3c:
8f:52:a7:85:eb:c5:e9:0a:4b:90:2f:d4:cc:1c:f2:
b1:03:9c:74:a9:90:30:6d:5e:38:f5:e4:5a:78:70:
fc:15:e4:c9:3e:17:ba:98:d8:b0:9f:6a:4b:e3:b7:
0d:a3:0d:d9:f0:28:5e:24:a0:61:70:9f:73:fb:1b:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:93:3F:38:09:DE:F1:44:E4:59:C5:BD:10:78:BC:20:57:13:FE
X509v3 Authority Key Identifier:
keyid:B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/ILCTPzgJ3vFE5FnFvRB4vCBXE_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:be:2f:a2:bf:f9:26:73:f6:33:8d:5b:da:c2:e4:f3:8b:40:
31:58:63:48:4d:ab:5f:40:93:31:0a:bb:16:44:84:45:cd:d3:
6c:f0:8b:08:a9:89:30:fb:86:9a:cf:74:4d:8a:ef:5c:f5:e5:
57:1e:cf:c9:be:8d:ff:32:c7:86:dd:d6:f2:4d:c5:ca:72:79:
0f:25:8d:78:1d:c4:37:ca:6f:f4:9a:b1:df:dd:ee:84:78:ad:
59:24:c6:7c:67:77:f2:d0:1f:d9:8e:ed:fc:a5:9f:7c:5e:13:
53:5c:ff:2d:4d:7b:e9:87:3d:f6:c7:b4:ca:b8:d5:f7:bc:ea:
e2:f1:7f:5c:b7:11:a4:1d:30:3a:81:16:26:63:c0:5e:00:3d:
7e:1d:da:dc:aa:a8:73:8f:2a:74:85:88:d1:dc:c3:69:40:f7:
05:ff:df:bd:f6:78:83:c9:d0:01:5a:1f:b1:44:d3:fd:84:de:
c6:46:91:8e:df:25:90:52:58:4d:e8:97:58:d2:b2:30:65:39:
5f:1d:24:ab:14:4c:a7:bb:56:e6:2d:f7:74:1d:34:53:b0:c5:
f6:f5:18:b6:1a:30:0d:79:c1:cf:36:0e:e0:c9:91:23:46:22:
79:e6:52:e7:4f:0b:a3:7b:22:07:2a:6f:ef:19:cd:1e:54:42:
70:c4:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org