Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/uNB7w2dyNpS0talCysI9f3sG2M0.roa
File: uNB7w2dyNpS0talCysI9f3sG2M0.roa (raw, json)
Hash identifier: nSNKqImTrW09c7+D+aI4r2kdXF2n7wCe++BM1+REdVg=
Subject key identifier: B8:D0:7B:C3:67:72:36:94:B4:B5:A9:42:CA:C2:3D:7F:7B:06:D8:CD
Certificate issuer: /CN=d18d6eba06834a86c3db30ce0d939b7bea8e2837
Certificate serial: 017C4F
Authority key identifier: D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y1uugaDSobD2zDODZObe-qOKDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/uNB7w2dyNpS0talCysI9f3sG2M0.roa
Signing time: Mon 04 Jul 2022 14:50:25 +0000
ROA not before: Mon 04 Jul 2022 14:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 146.19.97.0/24 maxlen: 24
2a13:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97359 (0x17c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18d6eba06834a86c3db30ce0d939b7bea8e2837
Validity
Not Before: Jul 4 14:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8d07bc367723694b4b5a942cac23d7f7b06d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:42:fe:46:ff:34:4c:73:c6:c4:65:43:2f:
e4:4a:26:32:64:f7:74:81:7f:87:88:d8:86:d7:55:
be:34:1c:ac:27:97:2a:d8:b0:24:6e:bd:87:17:cf:
ed:d3:66:2b:06:c8:a5:5a:ad:3c:a6:98:94:a2:e5:
67:ba:0c:e6:b7:36:9e:c7:a0:58:b0:52:6f:ce:1e:
a0:45:fe:28:c7:ca:c9:a3:54:27:25:3b:2a:80:c1:
28:4c:37:58:90:4d:cf:49:4c:f5:0d:7d:27:5f:9e:
dc:1a:ec:28:79:94:53:cf:ec:c8:3c:d6:98:a1:6f:
e8:c1:42:f5:36:14:25:41:f1:3b:42:d8:27:5d:3e:
02:2d:fb:d1:4e:67:53:3a:53:d9:e4:c3:d6:30:ce:
0f:bb:24:bc:c2:20:7c:b6:3d:ad:eb:0e:d9:be:b2:
ae:ab:66:ec:d4:4a:dc:8a:74:6e:4b:18:fd:e5:01:
9f:0e:d7:2a:51:36:61:d6:df:ae:3e:98:92:9f:f5:
c9:e0:98:24:b2:d3:a8:ea:b8:c0:a7:22:0c:dc:6e:
d4:c0:05:0f:a2:63:4d:3e:c4:84:91:a9:95:2c:a8:
3e:e4:1e:c9:e4:e3:8d:5e:88:17:9b:a6:16:16:f0:
62:b4:54:d1:e4:de:8f:22:93:e9:ec:b5:04:40:0b:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D0:7B:C3:67:72:36:94:B4:B5:A9:42:CA:C2:3D:7F:7B:06:D8:CD
X509v3 Authority Key Identifier:
keyid:D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y1uugaDSobD2zDODZObe-qOKDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/uNB7w2dyNpS0talCysI9f3sG2M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
6a:5b:2a:9b:0d:2b:7e:b1:d0:79:db:3a:92:f6:aa:db:7d:14:
50:38:a5:bd:dd:84:f7:32:91:d2:a2:56:bb:16:da:fb:58:03:
2e:43:39:f1:dc:9c:19:3b:fd:0c:08:4e:8d:4d:0d:97:86:4a:
61:4c:a9:45:99:e0:4c:cf:49:22:fd:30:ee:ca:3d:67:bb:af:
f2:15:be:6e:4f:18:79:c7:5a:5b:ae:53:7d:96:87:aa:d2:fb:
49:cf:36:81:d6:8b:97:ae:55:19:04:4c:96:70:51:2c:8f:bb:
32:7d:d1:db:8b:21:c3:b9:a4:b9:4c:f5:2c:90:4a:f0:f1:7a:
b0:17:d9:66:06:5c:6c:7b:26:bb:26:82:35:90:c8:78:2d:5e:
2a:a7:e6:14:3b:ae:25:ea:49:5a:26:59:86:b6:3a:fc:1d:eb:
95:be:d9:a8:4c:7d:9a:6d:51:09:6a:66:73:ff:79:8f:21:ed:
ea:31:25:57:30:2c:37:56:e7:dc:9b:aa:63:bc:9b:13:18:0b:
0e:60:72:bf:20:7c:77:26:22:3c:0d:27:4f:67:41:3a:23:34:
d6:23:93:27:46:c9:3d:78:e8:e5:1e:e1:d6:09:a8:6b:a7:96:
14:eb:10:a4:c0:d0:08:8c:08:e0:17:77:37:e0:f5:e9:9b:1e:
56:0d:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org