Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/iyA7uMl2BhNIYFUfqi80RJaKX2M.roa
File: iyA7uMl2BhNIYFUfqi80RJaKX2M.roa (raw, json)
Hash identifier: JryiEeLuuup0qrv2SbMCKmY/0liemErgT4ZAkGwv/uM=
Subject key identifier: 8B:20:3B:B8:C9:76:06:13:48:60:55:1F:AA:2F:34:44:96:8A:5F:63
Certificate issuer: /CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Certificate serial: 018636C07575034D655B7FC7898496F1E473
Authority key identifier: D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/iyA7uMl2BhNIYFUfqi80RJaKX2M.roa
Signing time: Thu 09 Feb 2023 15:17:08 +0000
ROA not before: Thu 09 Feb 2023 15:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49778
IP address blocks: 146.19.59.0/25 maxlen: 25
146.19.59.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:c0:75:75:03:4d:65:5b:7f:c7:89:84:96:f1:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Validity
Not Before: Feb 9 15:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b203bb8c97606134860551faa2f3444968a5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:a2:8c:68:d2:f6:4b:0f:07:22:d6:d9:31:
c3:26:e9:49:5c:99:0d:5e:98:33:5c:1a:36:48:c9:
b0:8c:1c:1b:b8:2f:f1:0e:f8:2c:8c:ac:d7:a5:34:
99:63:ae:9a:06:28:b5:65:1d:41:39:0c:f2:67:e9:
09:ec:78:9b:24:6c:20:39:13:5d:ef:60:08:f7:42:
0c:d7:61:ee:6d:66:f8:b8:bb:0c:e7:3b:1f:1c:10:
fd:9f:d1:9e:29:55:c0:6b:b6:f0:48:18:d2:3c:99:
e2:e5:a9:1a:c1:9a:c9:95:1b:ac:77:d1:60:03:69:
b6:e0:75:15:6d:f2:7a:93:2f:29:0a:eb:f8:ab:8a:
0e:69:56:96:66:83:c9:dc:00:f8:cf:b2:8e:f4:0c:
8f:90:05:e3:62:7c:7d:89:64:41:21:8c:cc:b9:c3:
60:cb:51:54:c3:5e:de:94:af:9e:3f:e7:7b:11:b5:
b6:82:a2:aa:c8:3e:22:cb:30:c6:70:6e:ea:cc:86:
b2:0e:18:8e:b4:2c:74:62:b1:16:09:a8:49:6f:b0:
09:b5:a5:c6:13:e0:56:e7:77:9b:d5:a3:bd:bc:50:
93:a7:fb:0e:07:70:3b:40:6b:61:59:b3:a8:fb:00:
00:1f:e2:86:7c:ce:4f:ed:9b:e4:bf:57:43:11:c8:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:20:3B:B8:C9:76:06:13:48:60:55:1F:AA:2F:34:44:96:8A:5F:63
X509v3 Authority Key Identifier:
keyid:D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/iyA7uMl2BhNIYFUfqi80RJaKX2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:be:e3:d3:24:66:45:af:c2:5b:32:1b:37:49:20:9b:e0:d0:
ac:f8:1f:79:a0:68:0f:95:b4:d6:f7:6c:ad:f8:1d:03:0f:ad:
39:24:76:4c:b5:91:f3:a0:e7:13:bb:da:5a:95:4e:bd:df:66:
bf:30:79:81:b9:93:e6:19:db:5e:b7:c5:9b:42:09:94:9e:3a:
41:73:71:d7:aa:01:de:76:28:bd:51:0f:94:30:b1:ca:ff:aa:
59:d5:f2:b7:26:f5:dc:d1:bb:52:72:30:1d:27:45:36:a4:bf:
9b:9a:2a:4d:34:ec:8e:45:c9:4e:4e:1e:95:c9:11:e7:b3:93:
19:2e:bb:98:aa:d3:63:cd:06:ee:67:9d:62:94:f3:57:32:7b:
a7:d5:3f:72:54:df:5d:34:30:b3:b6:ff:c8:11:ad:21:79:27:
bd:72:58:d1:bd:3c:f5:5d:da:5a:3b:0b:04:8e:9d:3d:e8:69:
f3:4e:69:8a:bc:1c:a8:98:1a:bc:aa:77:34:58:dc:13:c2:3c:
f8:37:3a:c3:6c:fb:00:b8:93:ac:1e:f9:3c:20:d5:e3:ff:7e:
95:c9:83:e7:cb:83:d2:4c:05:39:29:a5:a4:bf:c4:42:bf:6d:
c6:7a:c7:84:f4:71:a1:ff:51:23:a6:6d:9d:4f:46:42:f3:70:
13:1a:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org