Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/YJob2Z1qoxlMvsj4yyC6RRJj9OU.roa
File: YJob2Z1qoxlMvsj4yyC6RRJj9OU.roa (raw, json)
Hash identifier: vD8uYGWiL+sol8t3jw2eRTuMU962I2go8SA32liGyWY=
Subject key identifier: 60:9A:1B:D9:9D:6A:A3:19:4C:BE:C8:F8:CB:20:BA:45:12:63:F4:E5
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 018A86109C3B3240FE11A0FE4F69787DD193
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/YJob2Z1qoxlMvsj4yyC6RRJj9OU.roa
Signing time: Mon 11 Sep 2023 21:05:50 +0000
ROA not before: Mon 11 Sep 2023 21:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:10:9c:3b:32:40:fe:11:a0:fe:4f:69:78:7d:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Sep 11 21:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=609a1bd99d6aa3194cbec8f8cb20ba451263f4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:a8:db:39:b7:fc:aa:67:a6:4b:21:c4:34:
33:66:48:75:44:b9:40:9f:6c:22:de:21:55:9d:c5:
49:af:44:5a:b3:87:ed:3a:8f:e9:b9:29:13:fc:b2:
e2:50:1e:8f:92:76:2d:7b:52:5f:1a:59:cc:c8:45:
9c:a7:be:83:df:40:7f:fc:92:15:13:df:68:4a:65:
e3:55:8c:9c:79:83:96:56:fa:79:bc:da:93:1c:10:
d0:28:10:50:3f:ec:53:78:50:a0:7a:8e:c9:83:fc:
ba:6a:13:c7:58:76:83:24:6d:dd:cc:ae:ee:e0:48:
c4:20:61:9f:71:03:58:57:2f:28:b7:47:c0:f9:f0:
60:5f:86:6d:35:41:0d:f9:4a:d7:fc:98:01:43:36:
a0:52:51:05:a2:85:04:2e:c6:ba:b6:f6:bb:3e:8b:
90:54:f5:4c:63:6d:76:65:94:d0:ec:d5:1f:ae:84:
21:0e:53:65:1d:e7:0c:9a:19:ba:96:6b:20:06:15:
22:39:33:b2:4a:28:ab:9b:ce:a8:9a:06:db:54:c9:
d0:df:15:fc:20:2e:93:a4:db:e0:25:bb:53:50:47:
c0:c4:19:69:93:39:08:15:ba:b2:b7:d3:97:58:16:
fe:69:47:06:b7:b0:f8:a3:07:f2:a4:62:1b:4e:be:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:1B:D9:9D:6A:A3:19:4C:BE:C8:F8:CB:20:BA:45:12:63:F4:E5
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/YJob2Z1qoxlMvsj4yyC6RRJj9OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c4:a1:82:64:c6:e4:07:4e:2c:86:93:7f:ae:86:b8:e6:f4:
76:b9:91:93:f9:aa:d7:51:56:f3:cb:96:cb:95:81:b6:d1:46:
0c:d7:85:b7:a9:35:18:0c:24:8f:06:a8:60:45:b4:44:fc:6f:
51:b8:7b:09:3e:8f:a1:dc:fa:62:64:a6:c7:1c:5e:da:0f:ab:
5b:bd:aa:b3:80:ff:55:a7:c9:b4:78:15:9e:1f:c7:dc:4b:68:
bf:79:b4:df:2d:a8:3a:94:a9:f6:d8:50:4c:0a:87:28:b3:61:
d1:8e:f1:bc:6d:4e:57:db:bf:51:9a:4e:be:6e:06:a7:4c:2e:
85:10:6e:ef:a3:0c:b0:74:09:e1:b7:07:dc:45:b2:fe:de:64:
19:11:7d:55:b8:ce:e9:82:92:17:30:84:1b:38:7a:3f:67:eb:
e7:4f:d7:f5:3f:52:62:7f:31:7d:12:6f:9f:f8:18:62:47:fe:
97:3e:75:6a:42:9e:35:e2:b5:7b:8e:94:07:4f:c9:e3:5f:d6:
70:3f:60:ac:80:dc:4d:3f:7a:fc:3f:c3:df:24:d6:59:98:7e:
79:a9:10:14:2a:99:56:50:c4:02:58:80:5b:f8:84:4a:87:2f:
89:b5:b5:c3:5c:b6:1d:66:23:3a:bb:07:fd:f9:51:27:a6:74:
d4:60:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:25 2024 by rpki-client on console-ams.rpki-client.org