Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/rIHNQpYcPEpvjs0E3x3HY-aCuwY.roa
File: rIHNQpYcPEpvjs0E3x3HY-aCuwY.roa (raw, json)
Hash identifier: HjLp3OoL+YT77gnKYZajbgeScOnKEAwm8CGesbtYtnY=
Subject key identifier: AC:81:CD:42:96:1C:3C:4A:6F:8E:CD:04:DF:1D:C7:63:E6:82:BB:06
Certificate issuer: /CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Certificate serial: 0185703052604A5C9211E4D6C3026F50E29D
Authority key identifier: 0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/rIHNQpYcPEpvjs0E3x3HY-aCuwY.roa
Signing time: Mon 02 Jan 2023 01:54:53 +0000
ROA not before: Mon 02 Jan 2023 01:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:52:60:4a:5c:92:11:e4:d6:c3:02:6f:50:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Validity
Not Before: Jan 2 01:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac81cd42961c3c4a6f8ecd04df1dc763e682bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:ff:a5:43:70:4f:81:42:20:5d:31:fd:98:
6e:35:a6:49:95:b2:32:11:7d:9b:a7:5b:04:5e:42:
ac:fe:b4:73:64:a1:cc:f7:0e:2b:85:b4:10:e8:91:
40:13:3f:bd:77:fd:e8:08:9a:29:8c:66:d7:48:18:
62:66:92:93:27:2b:da:bb:89:a6:55:5c:88:62:8e:
c8:2c:a5:3c:f8:28:20:bc:b9:ce:f9:42:54:26:65:
40:70:e0:ea:b4:ff:42:3a:e4:db:0e:83:57:63:fe:
69:4d:76:00:52:7c:ee:4d:f8:4b:4a:7f:32:7c:8f:
3f:17:30:73:bf:16:3c:ce:72:08:fd:3c:c3:9d:62:
ba:d4:85:62:4f:6a:16:69:df:bd:31:b7:48:9c:ae:
9f:80:8d:96:11:de:21:d8:b2:15:4f:b2:29:3d:ca:
5d:93:d2:8c:d3:00:55:18:d0:35:f8:b8:97:c0:ea:
e3:fb:ba:ff:de:39:a7:a6:69:82:27:24:7e:12:1d:
1d:4b:ce:be:2a:dd:17:8c:9d:a2:9c:9e:8f:75:bb:
b5:6a:f6:7b:4d:00:21:f6:48:0c:f5:c8:76:75:aa:
0b:e1:34:e4:6b:f6:de:b8:b2:75:c6:23:1f:f3:52:
7a:e6:9b:c8:68:21:ab:93:30:bc:1d:0c:39:8e:10:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:CD:42:96:1C:3C:4A:6F:8E:CD:04:DF:1D:C7:63:E6:82:BB:06
X509v3 Authority Key Identifier:
keyid:0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/rIHNQpYcPEpvjs0E3x3HY-aCuwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
61:59:5b:ea:b6:e7:a4:9d:90:69:8e:b6:d6:01:03:31:24:d2:
fa:e3:b5:4d:c8:d4:aa:67:bf:5e:65:a6:bd:87:09:28:e4:12:
07:13:fd:a7:e5:ea:c4:1c:4b:95:27:74:14:3b:4e:d7:3e:4a:
e9:d3:fc:cb:13:4a:cc:74:5d:2f:fd:71:04:a5:c1:2a:a5:8c:
4c:99:3a:ed:6e:c6:ea:89:3d:68:78:c6:b1:90:9b:df:96:21:
e4:f0:cf:c4:b4:1c:2c:61:f7:57:92:d6:db:42:3b:59:20:49:
f6:0b:72:ac:e2:e1:39:f7:be:36:da:b8:ff:30:e4:13:ff:d6:
3e:e9:14:08:6f:ec:23:15:6a:4b:4c:9a:bf:6b:40:6d:25:05:
2e:14:33:21:8b:48:d9:af:a5:1a:f1:e8:95:b1:2f:78:ac:19:
c9:50:8b:63:39:f1:a7:21:b6:13:59:4b:c7:05:b1:a1:32:39:
2c:26:75:44:13:93:14:90:8d:4c:49:42:1e:13:77:54:cb:3f:
17:77:42:9b:b8:0e:20:5b:37:3c:5f:24:72:78:5e:8c:09:8b:
a6:e4:6e:50:ff:5c:02:dc:a7:9a:ec:cc:b5:3c:ce:4b:75:1c:
51:89:10:61:e6:ca:2c:d2:9e:0e:c1:d2:ba:04:3f:35:08:00:
f7:94:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-ams.rpki-client.org