Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/nvTsXbLqp81xJMypZj9hwsE3A6M.roa
File: nvTsXbLqp81xJMypZj9hwsE3A6M.roa (raw, json)
Hash identifier: v95HM/dvN8NUZ1lN0b6m0aJqtJfLr7VLEOonIVKWYGY=
Subject key identifier: 9E:F4:EC:5D:B2:EA:A7:CD:71:24:CC:A9:66:3F:61:C2:C1:37:03:A3
Certificate issuer: /CN=a1234bb888ec5734f579747455363171eefb1a43
Certificate serial: 0182FE03419B2522CEF06A50C653DE7BD552
Authority key identifier: A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/nvTsXbLqp81xJMypZj9hwsE3A6M.roa
Signing time: Fri 02 Sep 2022 11:43:22 +0000
ROA not before: Fri 02 Sep 2022 11:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 146.19.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:03:41:9b:25:22:ce:f0:6a:50:c6:53:de:7b:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1234bb888ec5734f579747455363171eefb1a43
Validity
Not Before: Sep 2 11:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef4ec5db2eaa7cd7124cca9663f61c2c13703a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:61:a7:ea:79:d9:a6:d2:90:74:03:38:30:
17:a6:49:11:22:00:4e:39:ac:d8:a7:65:37:2d:ec:
96:bf:67:c5:58:85:95:36:2d:87:b4:d5:11:9e:0d:
bf:fc:64:f6:03:b9:32:c5:8a:fc:38:d4:0e:4b:e4:
4b:e7:8d:96:03:1c:5d:61:88:be:1a:4e:6f:37:5b:
20:da:76:67:6f:73:e5:65:2c:27:cd:79:e5:ff:0e:
ad:77:e9:73:c2:08:e9:59:f9:33:3d:95:2e:5b:8c:
b1:1d:41:92:03:a0:6c:ec:10:ac:da:14:73:16:c8:
5d:b6:fe:a5:82:d7:25:0f:9c:1e:e2:bc:5f:d7:54:
a5:3e:b6:f0:8f:55:6c:fc:86:cd:7a:1d:b7:d4:58:
c6:10:22:f8:73:5c:ab:6d:ea:af:59:5a:e4:41:3e:
22:6e:f7:57:a4:f6:21:d0:5a:b8:19:cb:10:b4:ab:
b0:35:36:20:30:d6:58:24:4e:a4:d9:c1:01:6c:0e:
8e:e4:d6:48:b7:71:ee:d1:3c:e6:f7:41:d5:ed:f7:
0d:f7:cc:d4:28:bb:f8:54:a3:de:96:85:f1:4a:92:
05:f7:31:5c:98:05:a5:6c:17:4b:ae:d3:83:14:5d:
25:ed:f1:1f:65:29:bf:82:b9:04:ca:95:2a:49:05:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:EC:5D:B2:EA:A7:CD:71:24:CC:A9:66:3F:61:C2:C1:37:03:A3
X509v3 Authority Key Identifier:
keyid:A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/nvTsXbLqp81xJMypZj9hwsE3A6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:18:9d:dc:da:cc:cc:57:75:8b:1a:3e:52:90:87:e9:59:b7:
6f:5b:29:6b:81:67:e4:0a:97:37:8b:26:66:ef:0a:e9:ba:e2:
05:f8:e1:19:b2:ab:e9:b4:96:38:2f:06:a1:4f:73:72:39:c1:
cb:de:ad:4e:1a:21:f2:96:6b:ee:00:20:05:0d:c7:3d:cc:d1:
4f:c6:2d:99:1f:9a:db:7e:89:eb:45:e7:4a:2e:1c:02:5b:4d:
81:56:51:15:af:bb:b7:05:6f:87:b6:a9:7b:fd:54:14:8e:6a:
ee:46:c3:b7:c9:ef:c2:7c:63:b1:9f:f4:3d:07:1c:02:94:e5:
7d:bb:36:07:a9:45:19:b2:ac:fc:1c:2e:14:0d:4c:85:f3:59:
d9:71:af:b3:5f:ba:68:e4:61:0a:1c:8e:0f:ac:19:2d:69:b6:
b4:97:f8:0d:5a:68:f4:63:e0:1f:2c:04:ba:58:2c:ca:62:42:
fe:a4:81:dc:2c:a1:3f:07:19:6f:d4:68:83:b7:46:e5:e7:cf:
00:09:72:92:f6:86:25:f2:7c:08:59:f6:91:20:65:4e:5c:a4:
fb:c9:cb:33:18:52:39:54:d7:3e:7e:7a:a4:ed:42:27:66:4c:
12:b5:fb:d9:c1:4e:77:3a:a9:a3:18:d9:4e:ca:34:6f:ef:df:
68:ee:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org