Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/D2IKfjbissOiZCdRyj6WxOnQ7Qk.roa
File: D2IKfjbissOiZCdRyj6WxOnQ7Qk.roa (raw, json)
Hash identifier: 0OqHDs0Bd1lCa8LVs3ExrL49O6alwJrmAKiY8CtfOWg=
Subject key identifier: 0F:62:0A:7E:36:E2:B2:C3:A2:64:27:51:CA:3E:96:C4:E9:D0:ED:09
Certificate issuer: /CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Certificate serial: 6DF42C
Authority key identifier: 47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/D2IKfjbissOiZCdRyj6WxOnQ7Qk.roa
Signing time: Sat 01 Jan 2022 03:55:49 +0000
ROA not before: Sat 01 Jan 2022 03:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7205932 (0x6df42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Validity
Not Before: Jan 1 03:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f620a7e36e2b2c3a2642751ca3e96c4e9d0ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:e8:4c:a3:08:b9:59:33:7b:25:86:1d:d9:
93:97:f2:32:4a:88:34:8e:00:25:a8:a0:c9:82:8c:
49:43:e5:d1:02:5f:d7:d6:03:7e:da:98:cd:70:5f:
ff:dd:d8:73:67:d9:67:b4:40:1a:c5:81:6b:00:d1:
d9:fb:af:d6:30:bf:56:32:22:81:10:37:7e:fb:76:
64:e5:f3:cd:3f:a6:3d:20:d1:12:61:3d:1e:86:17:
3e:d9:2d:de:c8:f9:8a:9c:a3:39:aa:8b:a8:0b:87:
d4:35:91:b3:cc:c8:a9:e9:b0:07:97:8c:10:3b:b0:
b3:f9:91:1b:3b:9f:45:6c:a1:14:10:3a:55:9d:d2:
d1:82:3e:f0:a2:64:9d:f3:ad:63:31:8f:7d:48:74:
5a:29:1c:81:8e:51:75:1d:fb:6c:f4:40:3d:67:88:
4f:cf:a0:23:6d:76:c8:3d:02:c2:19:30:d7:79:2b:
90:f7:f5:94:cc:6c:7d:f9:5e:77:e0:16:06:b8:11:
ca:2c:84:93:81:b8:7b:d6:12:07:fb:f8:b9:97:d7:
aa:cc:51:07:8d:a9:37:30:9d:68:05:66:15:19:7d:
f1:1d:07:f9:52:73:ca:b8:ec:a1:a2:e0:f7:63:c4:
9b:fe:f2:fa:76:49:fd:1d:90:e9:dc:15:fb:52:af:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:0A:7E:36:E2:B2:C3:A2:64:27:51:CA:3E:96:C4:E9:D0:ED:09
X509v3 Authority Key Identifier:
keyid:47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/D2IKfjbissOiZCdRyj6WxOnQ7Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.36.0/24
Signature Algorithm: sha256WithRSAEncryption
85:49:52:16:40:e4:8c:8f:6a:5b:c4:52:01:1c:70:1a:37:65:
c5:8b:46:07:0e:24:dd:99:f2:f9:0e:50:a2:d0:9a:97:03:70:
d8:14:e5:81:17:e7:80:af:5c:ee:a3:cc:5c:4b:0e:f2:01:bf:
73:17:cd:ee:7e:5e:f3:b5:64:52:fa:fc:03:f2:b5:46:a3:fd:
5f:7a:3d:af:25:73:4d:47:70:4a:36:83:6b:2f:69:76:d4:55:
e9:38:38:c8:f0:3d:28:2b:0a:f6:fa:43:20:65:67:9f:5a:9e:
99:e6:14:5d:77:aa:1f:5e:28:25:69:d1:e4:ed:14:af:91:9f:
db:f8:8a:c5:b4:c4:81:79:27:96:06:d2:17:24:17:6d:23:94:
a5:38:83:1f:dc:2b:8d:33:22:f6:66:11:1a:8f:75:c7:7e:49:
26:84:7e:fe:f2:5b:30:2d:43:40:bb:61:4b:d5:f9:78:51:56:
36:6a:15:08:2d:e6:8a:6b:2b:44:5c:a2:91:23:3a:5e:2e:fb:
09:b0:b9:16:0d:bf:c1:eb:c0:f3:5b:52:39:34:e3:e8:b3:9d:
e1:4c:83:20:af:58:40:45:11:6d:f9:92:31:d6:3e:54:db:e2:
58:fb:d8:a0:6f:b2:86:2b:19:90:83:1c:38:fb:fd:b5:e3:6d:
d7:6f:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:16 2024 by rpki-client on console-ams.rpki-client.org