Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/NgM4K89f3H5BKlHk0REpO2lKcJE.roa
File: NgM4K89f3H5BKlHk0REpO2lKcJE.roa (raw, json)
Hash identifier: ESOQ5rpnu6TlQJs02SKi8If78iRZs4P0Y80iiElS7xA=
Subject key identifier: 36:03:38:2B:CF:5F:DC:7E:41:2A:51:E4:D1:11:29:3B:69:4A:70:91
Certificate issuer: /CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Certificate serial: 79C951
Authority key identifier: 72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/NgM4K89f3H5BKlHk0REpO2lKcJE.roa
Signing time: Sat 01 Jan 2022 00:56:53 +0000
ROA not before: Sat 01 Jan 2022 00:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7981393 (0x79c951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Validity
Not Before: Jan 1 00:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3603382bcf5fdc7e412a51e4d111293b694a7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:6b:8b:63:ce:7e:a3:9a:16:45:73:5c:42:
8b:29:2e:a8:21:53:05:08:ed:83:8d:29:85:a4:5d:
a6:d6:55:87:e9:a5:26:3b:f6:2a:f6:92:54:84:bd:
b8:f6:30:17:90:d4:b5:81:24:14:07:ed:c6:cf:d6:
b6:ad:f9:fb:19:2f:70:52:5b:e0:cd:28:eb:62:2d:
6c:89:68:97:4f:a7:46:03:a6:d4:54:f7:c5:de:29:
f6:0a:ae:b2:0b:91:0d:17:1f:6c:18:fe:64:ba:98:
11:13:36:c4:cc:11:86:ba:ef:0b:a2:79:b3:c1:1e:
9f:ca:98:af:24:63:78:15:48:67:b5:3b:cf:4c:db:
6f:e3:a1:4d:ed:6c:93:34:7f:59:60:6a:7c:88:e1:
55:25:c2:14:89:02:29:73:93:0f:d4:7e:a2:bc:f0:
18:50:6f:26:c1:3d:80:3c:88:e3:de:2b:96:0d:4d:
f5:6e:3c:d4:f1:95:6e:aa:ff:b0:fe:be:ef:25:2c:
94:9f:fe:f0:2a:b7:31:15:22:41:8d:78:e8:c6:0e:
a9:76:78:3c:e8:80:b6:ca:f7:31:d3:d4:7b:cf:75:
de:c1:64:b8:f3:43:19:0d:56:7c:66:62:dd:3b:c7:
e0:00:0f:ed:e8:47:d2:23:c8:c4:cf:28:93:37:5a:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:38:2B:CF:5F:DC:7E:41:2A:51:E4:D1:11:29:3B:69:4A:70:91
X509v3 Authority Key Identifier:
keyid:72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/NgM4K89f3H5BKlHk0REpO2lKcJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3a:89:df:47:eb:c0:a0:c5:ff:71:ea:32:5a:03:e1:3c:f9:
c6:8c:81:07:ba:1d:b2:d2:7f:ef:c3:b2:34:e3:a1:1b:85:9e:
fb:bb:f2:f5:86:aa:06:29:4a:00:c8:d9:85:f1:df:e0:00:ce:
1e:40:61:01:39:96:f2:57:e7:a4:48:fd:fa:89:67:34:db:f5:
b2:c3:59:b8:09:18:60:81:05:a0:86:74:dc:92:26:19:c6:b1:
9a:af:71:bd:d4:77:7a:96:87:8d:7a:8c:f6:66:df:89:60:d5:
31:26:51:bb:6f:77:7a:2f:0f:5e:b6:52:6d:9c:3c:e2:5b:46:
16:07:c6:f7:37:7c:7e:4c:88:6f:c0:6c:41:e3:a6:3c:fe:e9:
e4:5b:d7:77:fc:45:50:6f:d3:1b:22:d2:52:25:aa:0d:d7:49:
04:bd:50:89:b3:b8:5f:e0:04:f8:0a:1c:2c:b7:de:fe:a6:0c:
f2:5c:6e:c1:3f:04:a5:54:f1:64:63:00:78:b5:ff:42:a3:75:
dd:f0:21:41:0f:83:89:92:05:8e:42:cf:1b:f9:87:cd:7f:5d:
6f:dd:99:9a:67:f3:05:40:f2:3e:8d:ef:60:2f:03:2d:8c:b1:
ad:01:6b:fe:84:05:28:75:6e:35:40:99:b2:f0:8b:d4:fc:c6:
a7:b1:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org