Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/v1Cp2GsrC0v0Ya035Li3DqNnpkE.roa
File: v1Cp2GsrC0v0Ya035Li3DqNnpkE.roa (raw, json)
Hash identifier: LE1DHBm6YmKL8pXSFSRZ10Q6yAMtwtJSY287BJAnXJI=
Subject key identifier: BF:50:A9:D8:6B:2B:0B:4B:F4:61:AD:37:E4:B8:B7:0E:A3:67:A6:41
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: B30C0F
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/v1Cp2GsrC0v0Ya035Li3DqNnpkE.roa
Signing time: Tue 01 Feb 2022 09:31:54 +0000
ROA not before: Tue 01 Feb 2022 09:31:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11734031 (0xb30c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Feb 1 09:31:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf50a9d86b2b0b4bf461ad37e4b8b70ea367a641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:2e:59:3a:07:da:29:72:7d:19:25:6a:8e:
1b:45:60:b0:97:7c:ba:0d:d5:36:ec:3e:6e:08:52:
65:8f:26:8a:80:53:e6:74:ac:fd:64:37:e1:02:5b:
70:b2:aa:c5:8e:01:71:4f:74:93:f5:7f:3a:1a:ef:
1e:61:a3:a3:8d:3d:8b:d7:19:43:cc:ab:23:15:8a:
41:0d:1a:0a:a5:22:71:f7:85:fa:f8:18:52:44:e2:
5f:77:a2:27:73:55:7f:8a:14:cb:05:e1:6d:56:56:
d0:ca:06:42:59:66:d2:4c:27:a2:7e:fb:94:7f:64:
d3:a4:0c:3a:b3:1c:f8:72:ad:e5:c8:71:a5:73:d3:
9a:f8:d2:75:36:3b:73:33:4c:3f:ec:a6:de:2a:bb:
eb:94:aa:7c:77:5a:b3:1f:e1:36:fc:66:a2:15:f7:
48:60:48:69:98:7e:f1:a8:db:28:bb:cc:6e:c2:5d:
9b:91:46:cf:1a:52:0d:7a:d9:6d:bb:b1:e9:4d:cf:
fb:40:f4:bf:42:a8:e6:c5:56:24:8d:bc:18:13:b0:
72:5c:08:ac:38:8c:b3:3f:5d:ce:f7:53:41:81:36:
3f:07:f6:15:5d:88:63:b7:bb:2c:e1:ef:91:e2:e7:
47:2b:24:ec:49:40:9a:6b:b7:2c:df:0a:8e:05:39:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:A9:D8:6B:2B:0B:4B:F4:61:AD:37:E4:B8:B7:0E:A3:67:A6:41
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/v1Cp2GsrC0v0Ya035Li3DqNnpkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
03:64:1b:31:e3:f5:de:54:33:4b:ed:f1:90:60:50:90:d0:1e:
22:53:56:03:e7:24:e9:b7:0e:d7:cd:16:f8:d7:dd:c1:78:bf:
41:ba:5e:bf:bc:64:07:9d:2f:c2:bc:cc:0c:00:e9:b6:63:61:
e0:7d:52:2e:31:3d:6c:6b:25:22:c8:5d:c3:d4:43:41:8b:56:
f5:64:49:82:98:d3:db:28:29:9a:01:56:db:6b:ba:1f:b0:24:
b8:2a:d8:be:44:5c:6f:f7:34:80:7a:4b:6b:fc:b9:d7:f5:fb:
4a:48:16:d7:7d:18:05:31:8c:c2:27:3b:c0:f8:50:f0:fd:00:
69:43:1b:82:95:9b:ac:b1:1f:38:cf:96:8d:eb:75:12:bd:8f:
7b:8a:b3:f4:80:ca:c5:d6:61:99:98:0d:63:18:9b:ab:b1:5f:
af:36:c3:eb:76:f3:75:47:1a:9b:27:51:cb:cc:47:4b:11:4b:
44:ba:84:97:41:84:ad:8d:dc:6b:d8:aa:24:79:c5:f2:98:78:
9b:b2:f3:59:81:b7:9d:09:66:03:a6:88:b3:a0:ad:a4:91:72:
0a:87:1e:0f:74:ec:7b:7a:9c:d1:67:7c:15:48:d8:ae:f8:a9:
fd:f7:60:dd:f8:98:59:04:61:63:8e:a3:b0:d4:70:35:c7:18:
f0:ea:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:16 2024 by rpki-client on console-fra.rpki-client.org