Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/aBWUt3SIbI3XPiFblBAj_LbeCFw.roa
File: aBWUt3SIbI3XPiFblBAj_LbeCFw.roa (raw, json)
Hash identifier: lBBVQtaf3uJWbcfM2B9yNvGou1wQ+eblGh5CZzoBp0A=
Subject key identifier: 68:15:94:B7:74:88:6C:8D:D7:3E:21:5B:94:10:23:FC:B6:DE:08:5C
Certificate issuer: /CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Certificate serial: 01856D93D82F3EC5170811C244048906C230
Authority key identifier: 47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/aBWUt3SIbI3XPiFblBAj_LbeCFw.roa
Signing time: Sun 01 Jan 2023 13:44:43 +0000
ROA not before: Sun 01 Jan 2023 13:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d8:2f:3e:c5:17:08:11:c2:44:04:89:06:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Validity
Not Before: Jan 1 13:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=681594b774886c8dd73e215b941023fcb6de085c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:5c:96:e7:b4:98:20:a2:cc:17:12:34:04:
09:49:92:ec:f0:4a:8a:ee:f4:5c:11:7d:8a:7b:43:
25:76:95:e9:29:2d:b2:33:62:9b:15:fa:03:f2:73:
90:ce:49:9c:d3:45:c0:5c:ef:c8:2a:17:b3:6c:b6:
e6:0c:4d:8e:d3:49:1e:95:f3:72:9c:1a:a9:75:b4:
af:0b:e8:a0:fe:5c:11:f8:4c:d3:16:a2:c7:39:f2:
7e:7e:5b:3f:e5:5f:38:f5:df:3f:6c:d5:5c:ef:60:
da:03:1d:cb:69:42:82:6e:05:0e:5b:4f:b7:81:5d:
e7:78:be:21:a8:b7:3e:6d:2a:fd:22:b6:06:e5:54:
57:a4:ba:6f:bb:a3:c9:f7:49:e8:32:88:4e:40:56:
bb:96:6c:ed:39:87:1e:2c:ee:15:8b:8e:3d:27:9a:
08:63:a7:66:ea:dc:e7:41:70:2b:58:e4:41:ca:1b:
95:43:0e:b0:9e:04:db:ee:ca:52:a9:0b:3a:94:94:
7a:9c:14:b6:ca:b1:b2:c3:f9:ec:dd:fc:4f:b6:28:
3e:2e:a5:d8:92:f1:78:1f:44:61:38:cf:3b:87:bc:
46:f9:34:9d:5f:58:9e:04:d2:3a:9e:7e:9b:21:27:
14:bb:d0:4b:e6:ea:cf:64:4f:1a:0f:3e:35:4d:e0:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:94:B7:74:88:6C:8D:D7:3E:21:5B:94:10:23:FC:B6:DE:08:5C
X509v3 Authority Key Identifier:
keyid:47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/aBWUt3SIbI3XPiFblBAj_LbeCFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f3:a2:68:ff:14:e9:fe:70:5c:0b:33:27:ce:e9:db:c8:88:
ba:a5:01:ca:6a:b2:a8:e7:9f:07:ad:06:c3:d0:f4:94:2a:2e:
9d:11:3f:ef:77:4f:01:6a:87:0f:3e:d4:76:af:b0:c3:64:22:
56:ec:10:85:94:5e:9e:d4:7a:dd:e3:b9:ea:a8:4e:9a:2a:9e:
9b:b7:ac:f0:88:b5:f7:ff:fc:d9:31:d4:92:ce:46:b9:b0:6a:
c6:83:83:1d:52:08:fe:8d:a2:3c:55:f0:e8:10:9e:af:09:92:
8e:2e:14:8c:10:59:aa:62:da:73:1e:1d:47:39:3a:2c:63:9a:
47:a8:d7:f3:d2:98:a8:fe:d6:c6:11:27:35:21:63:4d:ec:20:
b8:1d:5f:6e:af:ad:fa:47:24:bb:52:49:2e:44:71:00:47:26:
2e:2c:7f:60:47:1c:78:bf:5b:0a:ca:50:87:40:3f:be:8b:59:
80:c9:52:de:2a:42:af:0e:0c:9a:0d:35:82:a2:d8:bf:1a:cb:
e5:cd:c0:40:1a:a5:7f:2d:30:21:32:ea:1d:d5:91:12:bf:4b:
c3:f5:bd:e1:c3:05:b3:5f:77:08:08:5f:76:c5:89:97:79:5f:
68:4c:a7:6a:65:86:4c:0c:ba:b5:67:ed:97:ba:5c:c3:dd:1a:
e6:ac:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org