Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/94YKi0io67iZlDnb4CS9I8gX_b8.roa
File: 94YKi0io67iZlDnb4CS9I8gX_b8.roa (raw, json)
Hash identifier: YRZP82fbEuc/RslS3sO/rUXjmRRTXawprzvMZtSW/dk=
Subject key identifier: F7:86:0A:8B:48:A8:EB:B8:99:94:39:DB:E0:24:BD:23:C8:17:FD:BF
Certificate issuer: /CN=3b09d41126077279143c180b9115384174aba70a
Certificate serial: 018805C977113332A7FEFFE3B10D84BDB0BE
Authority key identifier: 3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwnUESYHcnkUPBgLkRU4QXSrpwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/94YKi0io67iZlDnb4CS9I8gX_b8.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:11:33:32:a7:fe:ff:e3:b1:0d:84:bd:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b09d41126077279143c180b9115384174aba70a
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7860a8b48a8ebb8999439dbe024bd23c817fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:ef:dc:46:25:59:05:b9:0d:79:7f:45:e9:
63:71:65:e0:e0:7a:37:de:1c:ca:fd:ec:62:ea:87:
29:97:ac:e5:70:07:4e:aa:46:cc:11:42:3b:5b:d4:
9e:ae:58:84:22:bb:c1:15:42:61:cf:fa:37:99:08:
68:b9:52:93:8d:5b:ea:a3:6e:d0:0a:bb:17:c6:7d:
49:ea:3b:2d:ba:21:d9:4a:8d:6d:a4:7b:89:45:bc:
1a:ec:a0:59:77:2a:07:12:ed:55:b2:57:6f:b5:cd:
af:64:44:69:d4:d1:f8:d4:64:38:61:0a:75:fc:95:
b4:05:25:91:26:8f:f5:62:4a:b8:bc:32:e4:73:10:
12:8f:59:2a:61:93:39:3c:1c:4d:74:69:69:28:9a:
43:23:11:5a:ad:7c:8c:96:99:bd:78:8f:f1:06:92:
8f:8f:a2:a1:92:6f:26:f0:91:03:0c:32:d5:76:a7:
97:a3:5c:40:d4:d6:21:98:73:6d:01:a4:cb:09:6c:
35:48:f1:bb:04:6f:9b:f0:b4:fb:78:3e:16:35:4c:
a5:b3:55:51:65:f6:a3:22:27:0d:38:43:fb:6d:d6:
3c:a5:7e:df:b8:c3:16:a9:4a:3e:ca:a2:86:c2:43:
17:76:f2:74:2c:e2:09:78:16:10:af:25:d1:02:3c:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:0A:8B:48:A8:EB:B8:99:94:39:DB:E0:24:BD:23:C8:17:FD:BF
X509v3 Authority Key Identifier:
keyid:3B:09:D4:11:26:07:72:79:14:3C:18:0B:91:15:38:41:74:AB:A7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwnUESYHcnkUPBgLkRU4QXSrpwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/94YKi0io67iZlDnb4CS9I8gX_b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5c28ab-4402-419b-acd2-b10f0b66232c/1/OwnUESYHcnkUPBgLkRU4QXSrpwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ed:0e:dc:9a:e8:c0:fd:f9:fc:b0:83:12:b8:cd:05:85:84:
0a:72:50:14:92:e1:75:e8:bb:cc:d8:f5:a2:09:10:c5:70:85:
da:ef:b3:8e:f6:08:08:3e:e7:9e:6f:e2:e0:b2:39:77:45:ac:
f6:92:e9:59:f2:4f:8a:0a:01:5f:ae:87:1b:51:73:13:d0:13:
20:45:80:7d:70:b7:22:e0:fa:9a:d0:06:ed:2e:ab:2b:db:bd:
3e:c2:ce:2f:c5:f7:15:ec:36:b7:b5:e4:ee:bf:c9:a1:56:99:
6d:07:52:15:11:6b:28:76:56:d8:04:f3:cb:3b:c3:57:ce:c8:
04:1d:01:74:69:c0:a8:7b:aa:72:3f:11:06:10:09:43:fb:00:
95:76:85:66:d9:b8:b6:78:e7:b9:5f:e4:de:5a:a2:1f:d2:14:
c0:69:1e:dc:a6:08:84:18:72:f0:f1:fb:78:94:55:07:0e:7b:
b5:78:4f:cd:e8:67:fd:75:d8:cd:13:60:98:06:d5:88:9b:36:
65:8a:1f:fb:51:13:00:a1:46:e7:d5:9c:8f:d1:15:bb:b5:33:
2f:5e:ee:13:e6:c8:8a:bd:45:48:81:31:c7:42:63:67:65:88:
1d:af:e5:31:79:4f:a7:de:f1:0b:d6:7a:f8:3e:b2:ab:81:36:
41:3c:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 13:38:05 2023 by rpki-client on console-fra.rpki-client.org