Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3zX2OtWnFOr3ufDgeqDCvA_f7UY.roa
File: 3zX2OtWnFOr3ufDgeqDCvA_f7UY.roa (raw, json)
Hash identifier: SdHRc+BAr+BK8IVtAnwHlCmwAz0jt04IdBOAiKHPqj4=
Subject key identifier: DF:35:F6:3A:D5:A7:14:EA:F7:B9:F0:E0:7A:A0:C2:BC:0F:DF:ED:46
Certificate issuer: /CN=df0085c0e617e079594a01ba6fb666fc784e00fc
Certificate serial: 3F60FF
Authority key identifier: DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3zX2OtWnFOr3ufDgeqDCvA_f7UY.roa
Signing time: Sat 01 Jan 2022 01:03:05 +0000
ROA not before: Sat 01 Jan 2022 01:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34412
IP address blocks: 146.19.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4153599 (0x3f60ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0085c0e617e079594a01ba6fb666fc784e00fc
Validity
Not Before: Jan 1 01:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df35f63ad5a714eaf7b9f0e07aa0c2bc0fdfed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:ce:35:4c:db:71:23:ac:7d:75:0d:83:e6:
79:01:e4:70:25:4a:1b:3d:30:3f:aa:14:db:90:55:
0c:b6:43:5e:a6:d9:2e:71:13:8f:00:38:60:83:0d:
1f:d2:77:8e:ed:87:5b:06:24:55:98:f8:97:9f:04:
c8:d1:2d:f8:ac:3a:af:c0:76:15:bb:9b:c6:29:ce:
12:69:f0:fc:bb:5f:b6:86:6f:d8:04:8d:6a:05:55:
07:24:05:f3:63:8c:ab:56:45:5f:8f:10:7f:ce:05:
3e:f1:0a:10:4e:1e:df:0b:48:33:32:f8:1d:e4:61:
a2:54:ad:20:98:76:f2:4a:9b:55:41:a2:d3:25:61:
9e:f6:c9:27:47:b1:75:11:44:4e:bf:ec:2b:79:23:
07:9c:80:8e:c2:88:dc:62:95:17:45:3d:28:92:77:
2a:f9:74:7e:1a:1b:90:81:4a:4c:7c:ec:8b:5b:57:
4b:59:64:7f:02:57:5d:bf:3e:dd:79:2d:ff:44:d5:
4b:f4:e6:da:62:65:7e:53:86:24:7f:07:f9:4e:a8:
eb:87:de:a8:83:31:28:15:62:28:fa:96:fc:4d:c8:
9a:b1:0a:87:06:2c:cf:8b:df:b3:b1:c7:a7:49:1c:
24:ea:a9:c4:cf:8d:64:12:04:8f:d0:25:93:68:85:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:F6:3A:D5:A7:14:EA:F7:B9:F0:E0:7A:A0:C2:BC:0F:DF:ED:46
X509v3 Authority Key Identifier:
keyid:DF:00:85:C0:E6:17:E0:79:59:4A:01:BA:6F:B6:66:FC:78:4E:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3zX2OtWnFOr3ufDgeqDCvA_f7UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4119f6-4aaa-4a3c-985b-a95a815ab371/1/3wCFwOYX4HlZSgG6b7Zm_HhOAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.217.0/24
Signature Algorithm: sha256WithRSAEncryption
79:82:9b:b5:9f:50:77:71:5b:9a:81:a7:c1:5f:26:1e:ff:35:
da:51:78:f4:c1:b5:3a:a0:fd:c7:f2:85:73:90:11:73:03:93:
f9:ee:d1:5c:db:3e:ba:05:a5:ab:3b:93:0b:ec:39:39:a5:33:
04:de:67:66:c8:6e:3d:2c:66:e6:04:4b:3c:80:38:13:f1:83:
96:46:7f:c8:e0:c1:8c:2e:c6:90:c9:99:44:f4:8f:03:46:f2:
52:7b:71:7c:b5:14:8c:bc:b1:78:11:f6:c2:ed:bf:61:8c:c6:
e5:e2:16:22:3f:73:de:83:d3:3e:ad:4a:04:98:1a:1c:3c:c1:
e7:ea:68:1b:db:31:e7:f7:cd:41:9c:92:bd:d5:59:49:2e:3c:
cc:b1:fc:ee:56:65:81:a9:8b:8d:01:c7:ad:75:eb:d7:c1:32:
9e:bf:72:8c:ea:38:29:0d:40:1f:76:8c:06:5a:d5:eb:5f:bd:
9d:90:4a:88:4b:2d:91:eb:56:21:43:44:a4:e0:ba:de:13:a4:
0d:79:dd:65:a5:2d:78:26:2b:50:d8:ab:52:18:9d:2c:9f:52:
bd:1c:5c:1a:35:30:27:66:99:59:0e:bc:ff:e0:a3:5e:71:3a:
ba:06:f5:a3:b8:19:6e:a2:a3:1e:9a:9a:17:d3:8c:57:a7:28:
cc:7f:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:39 2024 by rpki-client on console-fra.rpki-client.org