Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/eSv8_LUzKe_NjGGRagcyebZDwIg.roa
File: eSv8_LUzKe_NjGGRagcyebZDwIg.roa (raw, json)
Hash identifier: W64/cq0SVg3GOqp6ewdhndDVrl5sR8evn8zl+0xSPvc=
Subject key identifier: 79:2B:FC:FC:B5:33:29:EF:CD:8C:61:91:6A:07:32:79:B6:43:C0:88
Certificate issuer: /CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Certificate serial: 01856E8209689F9E8DE36B4C19673714999F
Authority key identifier: 50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/eSv8_LUzKe_NjGGRagcyebZDwIg.roa
Signing time: Sun 01 Jan 2023 18:04:53 +0000
ROA not before: Sun 01 Jan 2023 18:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 146.19.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:09:68:9f:9e:8d:e3:6b:4c:19:67:37:14:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Validity
Not Before: Jan 1 18:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792bfcfcb53329efcd8c61916a073279b643c088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:f1:82:91:4b:ba:b3:71:c2:67:ca:7d:a5:
f0:4a:95:d4:30:05:ee:77:48:41:42:34:da:bb:7d:
4d:d7:61:71:da:61:99:88:66:7c:96:7c:86:88:83:
a7:07:da:07:db:d0:56:f4:95:f1:8c:c3:cd:bd:9d:
eb:c3:54:d2:16:d9:f6:90:56:57:cd:a4:95:5e:10:
92:af:69:c8:34:aa:81:a4:53:0d:44:24:7a:b8:1a:
c3:92:1d:f1:46:6d:1d:4e:23:05:33:29:2e:dc:1b:
a2:f0:83:df:13:99:af:f4:4f:9d:22:98:53:4c:6c:
e7:01:18:6b:84:4e:44:2c:e4:e3:9d:16:3b:78:83:
82:c1:7d:96:80:53:fa:fa:88:fe:05:9d:73:49:f2:
68:79:27:95:fa:51:d9:85:15:d5:b6:fc:26:05:15:
40:4c:d4:2c:eb:02:99:95:40:d6:e1:dc:53:56:5c:
a5:a9:ba:00:1b:56:65:ba:78:f3:3a:9b:cd:dc:ab:
08:82:27:fb:f7:fe:81:d2:34:92:6a:fd:69:cf:58:
61:70:c6:f7:72:c1:63:39:e4:b7:f9:a1:e1:8e:be:
64:91:e2:42:64:a0:48:14:96:a8:72:be:5a:ac:15:
d7:e4:37:69:44:05:95:62:71:d7:ed:52:62:09:b3:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:FC:FC:B5:33:29:EF:CD:8C:61:91:6A:07:32:79:B6:43:C0:88
X509v3 Authority Key Identifier:
keyid:50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/eSv8_LUzKe_NjGGRagcyebZDwIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.71.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:14:19:22:05:a9:45:2c:25:11:94:82:0c:30:85:3b:73:
16:45:8f:29:5f:60:df:3e:54:06:3e:a8:5d:e3:40:92:1c:ef:
47:05:93:d5:c4:7b:ae:ff:ff:07:b0:f9:4e:da:60:59:85:f5:
bc:99:75:73:38:01:3f:d6:00:47:55:a2:3f:9b:35:bd:49:e8:
7b:bb:26:03:0d:91:58:1e:4d:f4:b1:4d:50:5c:1e:09:54:7d:
cd:48:16:fb:c6:74:e5:a7:3a:69:cd:dc:93:c6:dd:78:8c:1a:
9a:8e:1d:e5:e6:a7:f0:2b:8c:39:fb:be:8e:36:84:ea:43:8d:
9d:a2:b0:03:e1:d7:7f:87:02:f3:74:0a:29:13:7c:61:f0:9a:
36:54:0b:c3:e5:c5:ee:dc:46:6d:84:9e:44:59:65:24:4a:90:
44:e7:e3:ff:f4:7b:f4:03:b5:fe:c9:ee:19:f5:dd:e8:1a:b8:
6e:eb:d7:1a:69:04:30:27:67:4e:46:95:ad:eb:62:fd:7e:7a:
a6:59:2e:9c:9a:e6:16:b3:f8:64:51:2d:f7:66:57:78:7b:da:
ae:d1:5a:31:a3:8f:2e:83:30:74:a2:d7:fb:3c:cd:16:de:ea:
50:37:11:47:70:2e:ba:f4:d0:e5:be:6f:fb:5d:39:5d:0d:33:
78:a5:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:08 2024 by rpki-client on console-fra.rpki-client.org