Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/R2Pkki6ZeEDeDhyBXJpDvzrNXkk.roa
File: R2Pkki6ZeEDeDhyBXJpDvzrNXkk.roa (raw, json)
Hash identifier: bcD1hFwD0XSPTIXHOyeJvk7x9mBSejBW2joKFWlrhOY=
Subject key identifier: 47:63:E4:92:2E:99:78:40:DE:0E:1C:81:5C:9A:43:BF:3A:CD:5E:49
Certificate issuer: /CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Certificate serial: 018621042E518EE254A9ABE6EC3AA6125749
Authority key identifier: D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/R2Pkki6ZeEDeDhyBXJpDvzrNXkk.roa
Signing time: Sun 05 Feb 2023 09:59:27 +0000
ROA not before: Sun 05 Feb 2023 09:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212982
IP address blocks: 146.19.59.128/25 maxlen: 25
146.19.59.0/24 maxlen: 24
146.19.59.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:04:2e:51:8e:e2:54:a9:ab:e6:ec:3a:a6:12:57:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Validity
Not Before: Feb 5 09:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4763e4922e997840de0e1c815c9a43bf3acd5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:45:04:9c:58:56:f5:39:af:4d:c6:6f:ad:
00:70:3f:0e:7b:a9:84:db:3d:f8:e0:75:9a:c3:15:
7e:23:a0:5a:a5:4d:ca:f8:e3:61:79:ed:1f:53:93:
eb:3f:b7:5d:c8:d7:e9:e3:69:fe:02:e8:0d:c3:ed:
39:65:31:2c:f4:bc:84:14:50:5e:0c:2d:b2:c2:44:
2f:fd:b4:80:1e:36:5c:68:d3:a7:14:96:00:65:15:
fd:73:7f:03:69:95:5b:fe:ac:42:9c:24:d9:55:b7:
63:f7:0b:ed:b9:cb:25:83:e1:83:1f:3f:4d:de:e6:
49:7f:ae:55:56:e6:8c:6b:a6:19:49:69:3b:a9:76:
39:a8:cd:0e:b7:ec:e4:18:f1:72:79:00:ed:d8:60:
fa:00:bf:2c:07:4d:79:76:6c:8d:c4:6e:52:76:bf:
53:bf:56:79:7a:c6:91:87:40:4f:6e:bc:59:3d:fc:
4d:2f:4e:ec:14:24:06:2a:5c:43:80:a1:01:67:f4:
f6:15:77:44:3f:a7:f9:8b:94:24:5b:5b:b4:53:47:
39:62:8f:5f:01:db:40:19:cb:3d:58:cc:47:42:88:
a6:59:3d:25:cc:65:f2:26:ca:74:be:5f:1f:51:8b:
66:b2:be:70:72:31:76:0c:25:98:6c:10:b8:1e:af:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:E4:92:2E:99:78:40:DE:0E:1C:81:5C:9A:43:BF:3A:CD:5E:49
X509v3 Authority Key Identifier:
keyid:D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/R2Pkki6ZeEDeDhyBXJpDvzrNXkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:67:5b:3a:82:e1:e7:ca:c9:a7:f1:42:fb:01:26:fe:f9:50:
ed:40:ef:2e:1e:c5:53:53:c1:fd:93:e8:98:b6:92:3d:69:46:
93:08:5f:c0:cb:c4:27:f0:ca:e1:3f:34:6d:b8:3b:19:3a:ee:
53:de:af:ed:c1:09:a6:9b:e6:39:f4:ef:43:c1:7a:35:8a:c8:
7b:a2:51:18:85:b4:50:54:b3:62:42:d4:ca:6d:a1:6c:2e:81:
d3:54:8d:f8:e7:99:5e:4c:78:c2:6c:e8:74:ac:58:a6:65:a9:
2f:85:80:26:b9:ce:e9:74:01:a6:b5:61:3f:6a:89:bc:bf:75:
0f:2a:20:64:78:45:89:4d:98:83:cd:6a:d9:dc:eb:a9:10:71:
41:48:5f:06:ec:79:ef:c0:a1:a3:66:78:ce:44:c0:83:73:e4:
5d:36:30:16:14:70:14:49:26:dc:30:12:4b:d5:d8:ae:42:7b:
ef:87:1e:c2:a2:1c:2f:2b:46:f1:eb:e3:6a:e7:b6:eb:09:26:
62:52:63:01:d1:7c:ec:d0:9f:8d:b1:7e:4d:65:d4:d7:f7:13:
15:a6:da:45:45:11:34:92:fd:9d:68:c1:d6:56:fa:7c:ca:78:
f8:b7:af:4f:cf:0f:26:52:f6:6b:f3:3e:66:b0:13:99:c4:e1:
87:91:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org