Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/Scqx7qSLoTFdVY0Qnd0r02bSIqM.roa
File: Scqx7qSLoTFdVY0Qnd0r02bSIqM.roa (raw, json)
Hash identifier: bQmj2hZRxBn4Hs12TZPR1RgzWN5SOdhOLjrUXtv5srU=
Subject key identifier: 49:CA:B1:EE:A4:8B:A1:31:5D:55:8D:10:9D:DD:2B:D3:66:D2:22:A3
Certificate issuer: /CN=281a53f49ac8e821047dbe686d0cb88ea9e71f3b
Certificate serial: 01856DE65C41C2F4B6D0E198F8CE49E89C3B
Authority key identifier: 28:1A:53:F4:9A:C8:E8:21:04:7D:BE:68:6D:0C:B8:8E:A9:E7:1F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBpT9JrI6CEEfb5obQy4jqnnHzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/Scqx7qSLoTFdVY0Qnd0r02bSIqM.roa
Signing time: Sun 01 Jan 2023 15:14:51 +0000
ROA not before: Sun 01 Jan 2023 15:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:5c:41:c2:f4:b6:d0:e1:98:f8:ce:49:e8:9c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a53f49ac8e821047dbe686d0cb88ea9e71f3b
Validity
Not Before: Jan 1 15:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49cab1eea48ba1315d558d109ddd2bd366d222a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:9f:2a:1f:d8:53:a2:89:63:bd:bf:72:a8:
2f:e7:97:51:85:bc:c8:34:f6:07:2f:51:86:79:e9:
31:39:78:82:b9:0d:9f:d1:79:8f:7f:98:30:2b:31:
aa:80:69:b6:55:9f:fa:2d:42:e8:b0:e8:0b:87:10:
4d:a8:31:d9:be:61:88:ec:1d:d2:f3:b5:60:ff:cb:
82:04:10:e3:1b:ff:a8:e5:ce:be:89:89:9e:41:e8:
97:c6:2d:fb:d2:43:e5:91:81:b0:4d:7e:01:09:ae:
27:31:cc:c3:1b:97:2a:55:c8:a4:0a:5c:2f:00:70:
e0:f3:2c:ce:fe:d7:21:f5:d0:45:c6:f1:6b:1b:9f:
44:00:7e:db:c2:c1:4f:98:d5:6b:e8:e7:2c:fa:25:
39:0b:54:39:ef:c7:a8:de:89:47:e4:47:1c:cb:86:
66:dc:bd:46:51:86:10:bf:a2:33:b6:f9:b0:ee:2e:
f3:64:6c:e2:7f:fd:8c:14:1a:46:c4:8e:90:45:21:
ff:4e:b1:84:e5:ba:02:ac:9c:cd:99:5a:f9:a6:17:
09:10:78:bc:15:20:e2:5d:50:df:32:d5:47:75:41:
d3:8c:2a:7a:6f:e6:f2:e3:b5:70:07:a0:a3:d8:e1:
13:ec:2e:c5:c2:93:20:61:27:3a:cd:5c:bb:09:e9:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:B1:EE:A4:8B:A1:31:5D:55:8D:10:9D:DD:2B:D3:66:D2:22:A3
X509v3 Authority Key Identifier:
keyid:28:1A:53:F4:9A:C8:E8:21:04:7D:BE:68:6D:0C:B8:8E:A9:E7:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBpT9JrI6CEEfb5obQy4jqnnHzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/Scqx7qSLoTFdVY0Qnd0r02bSIqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/KBpT9JrI6CEEfb5obQy4jqnnHzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d7:b1:e0:dd:d7:70:18:aa:d2:00:d5:7f:1a:0d:20:77:3d:
0a:d4:af:32:3a:d2:28:18:3c:2d:0b:6f:cc:1f:fa:bc:24:90:
1f:1e:9f:3a:3c:03:dd:29:47:e5:ee:ab:1f:6a:3d:0a:21:8d:
3a:fb:bc:6a:33:51:c0:a4:f6:ee:fb:d2:6c:bc:9b:b1:ae:a4:
1c:21:c4:21:03:ce:5b:1e:51:fa:43:eb:e2:4b:60:75:c2:3f:
e1:44:39:90:99:54:b7:0d:a6:00:be:9d:4f:fc:c2:3d:de:6f:
e7:0d:5b:02:ca:90:08:1f:65:4c:62:50:8c:1e:36:49:91:06:
a8:51:17:b7:6d:4f:7d:6f:08:c8:4b:28:82:f9:d3:3b:87:57:
0f:07:9d:c7:bf:75:ee:44:6e:2e:88:1c:5b:53:60:5b:a7:8e:
bf:9c:e8:84:7b:0d:eb:ce:3d:02:49:36:4b:e7:e3:4f:bf:09:
ca:39:4a:2c:5f:e5:35:db:d5:7d:a4:41:29:14:b3:c2:a6:81:
d5:23:3f:0f:dc:5a:98:cd:e8:37:b0:48:40:95:8b:f9:af:be:
b2:c4:38:ef:10:da:98:2f:32:b9:59:ab:50:6e:17:df:d5:33:
da:7c:58:ed:e1:8f:98:a8:38:9d:ff:c2:95:82:e1:0b:60:14:
05:28:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:53 2024 by rpki-client on console-fra.rpki-client.org