Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/vsErZ4EpgJamXoleYuPq-8T7wfY.roa
File: vsErZ4EpgJamXoleYuPq-8T7wfY.roa (raw, json)
Hash identifier: XInsNoJtmV+OVJnQXnvUC6FqR41lVrD3Wh52K6oRXR4=
Subject key identifier: BE:C1:2B:67:81:29:80:96:A6:5E:89:5E:62:E3:EA:FB:C4:FB:C1:F6
Certificate issuer: /CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Certificate serial: 01857030536C9E4F7412E67CF9715593ADA6
Authority key identifier: 0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/vsErZ4EpgJamXoleYuPq-8T7wfY.roa
Signing time: Mon 02 Jan 2023 01:54:53 +0000
ROA not before: Mon 02 Jan 2023 01:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:53:6c:9e:4f:74:12:e6:7c:f9:71:55:93:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Validity
Not Before: Jan 2 01:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bec12b6781298096a65e895e62e3eafbc4fbc1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:e4:87:1f:c8:90:64:8c:38:28:e6:a5:cd:
b2:ed:b5:25:1e:9a:24:62:a5:27:4f:08:d6:e2:49:
9c:6d:07:66:e8:bb:00:85:40:1b:29:30:5e:8f:b8:
64:dd:c3:87:b3:eb:c7:e3:c1:0c:37:19:5a:dd:a5:
45:7c:13:3b:ce:58:d6:95:18:4b:fa:46:80:9f:9f:
10:8a:d1:61:8c:61:56:c2:a6:47:34:f0:ad:e2:d8:
e3:2c:70:07:b0:4a:7f:d9:41:94:a3:b2:b9:41:e5:
c3:0c:1b:ee:3c:5b:f9:99:c2:73:c2:87:09:f2:f5:
47:12:9e:e2:bd:c0:ab:4b:71:7e:41:cf:1d:11:81:
52:17:cb:d7:5d:c3:6e:3e:d9:cc:5b:3b:17:0f:b2:
52:ea:e9:b1:2d:9f:60:98:13:44:fd:2c:1c:02:40:
a4:d4:80:00:5f:64:28:9f:a9:fd:30:86:d1:a5:37:
91:22:0c:41:32:a9:79:fe:26:ce:92:49:26:3a:1c:
bc:4d:cb:8f:29:4f:60:30:82:66:81:b7:2c:40:00:
a6:17:49:db:79:93:09:be:f3:b8:26:f6:b0:f4:f8:
6f:b2:59:92:1c:6d:2f:aa:27:40:72:77:7d:54:b5:
5c:de:18:59:20:d4:48:cf:03:1b:97:40:1a:05:c5:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:2B:67:81:29:80:96:A6:5E:89:5E:62:E3:EA:FB:C4:FB:C1:F6
X509v3 Authority Key Identifier:
keyid:0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/vsErZ4EpgJamXoleYuPq-8T7wfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
82:01:e4:02:70:fd:30:d6:76:a5:25:6c:91:dc:a9:65:48:37:
9b:a5:a9:1c:d2:aa:af:2d:42:f1:d1:77:f0:c7:87:03:f0:94:
60:73:e9:a0:71:ee:8c:a0:aa:26:84:4e:7b:2b:1f:da:a0:4e:
52:6b:c3:26:11:e8:39:70:64:cb:93:bc:4c:cb:59:10:5a:b1:
2f:0e:98:f6:52:7f:64:b5:2d:2e:46:76:96:2e:09:67:d0:23:
c8:9e:19:fc:10:96:cf:51:6e:46:d1:24:c9:0c:ad:d2:b8:7c:
75:5a:5f:95:25:83:64:7f:2a:b7:8f:78:ac:80:88:7a:32:21:
f3:c7:82:28:9f:fe:c4:a7:6b:d7:92:95:d5:24:2a:ad:d4:0b:
89:7f:a2:78:e5:9c:ec:dc:d4:c9:e2:5c:54:1d:63:72:f9:f5:
db:0b:0e:99:3d:95:3d:7b:76:95:82:73:0c:bc:df:99:df:1f:
6c:37:9f:9e:4c:d3:91:ec:f0:21:10:7a:81:33:f2:2b:6c:6d:
f4:a3:0c:3c:98:44:70:03:87:99:29:62:a6:52:53:36:3c:55:
0b:86:88:9f:af:89:be:05:82:8e:a0:0b:5a:1d:09:7c:9a:99:
c7:e5:cc:2e:44:82:b9:59:41:68:b5:0e:f3:55:f3:3b:c5:53:
32:be:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-ams.rpki-client.org