Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/O2MFMz6MdLsV18VShaH__RNlEWc.roa
File: O2MFMz6MdLsV18VShaH__RNlEWc.roa (raw, json)
Hash identifier: /chWHvm0z2yiGuUIubuHwlbZnimFTsbljnx0G2un0po=
Subject key identifier: 3B:63:05:33:3E:8C:74:BB:15:D7:C5:52:85:A1:FF:FD:13:65:11:67
Certificate issuer: /CN=7825451c356ba49190f71eab158a73d38cac559f
Certificate serial: 01856FF9521036BA857D949C1659FC0E7DE2
Authority key identifier: 78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/O2MFMz6MdLsV18VShaH__RNlEWc.roa
Signing time: Mon 02 Jan 2023 00:54:48 +0000
ROA not before: Mon 02 Jan 2023 00:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:52:10:36:ba:85:7d:94:9c:16:59:fc:0e:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7825451c356ba49190f71eab158a73d38cac559f
Validity
Not Before: Jan 2 00:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6305333e8c74bb15d7c55285a1fffd13651167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:c1:94:8c:77:29:dc:65:84:d4:62:fb:b3:
55:59:33:79:8a:ec:02:69:b7:4f:cb:82:5f:cc:6d:
90:9f:5a:aa:59:f3:9e:4b:16:0a:1a:32:e1:28:09:
cc:d8:88:99:cd:2e:01:b8:d7:e0:53:2e:62:79:67:
ec:bf:37:3c:4d:d3:dd:3b:cb:36:70:fe:f6:35:4e:
0c:f7:06:df:b3:ff:30:9e:39:f3:87:f0:cb:93:e4:
5a:79:ad:d6:3d:97:e3:7a:da:ef:bf:97:5f:4b:f8:
ad:9f:8e:50:9e:8c:d1:ea:c4:ad:f0:04:59:87:9a:
fe:ac:09:64:01:75:c5:af:c5:0f:d1:0a:ee:a8:9e:
9e:d9:e0:10:9b:be:31:d5:f7:d0:46:43:90:50:cd:
6e:a3:14:6d:6a:4a:6d:35:24:2b:14:d0:2e:bc:f3:
36:48:1a:d0:da:57:bf:7a:00:e6:c9:9c:5e:9c:ff:
97:72:aa:2e:a4:f1:73:a8:40:bb:65:b0:d9:34:a7:
22:f5:c5:2e:39:81:f6:f0:95:27:e3:7c:39:01:94:
ea:88:82:bb:ed:09:4a:69:35:f7:1f:45:a3:42:fb:
5d:63:ca:c4:6c:ec:a5:72:03:f0:18:0d:05:87:2b:
a3:ab:95:f2:c2:84:73:d1:11:40:65:93:4a:51:13:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:05:33:3E:8C:74:BB:15:D7:C5:52:85:A1:FF:FD:13:65:11:67
X509v3 Authority Key Identifier:
keyid:78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/O2MFMz6MdLsV18VShaH__RNlEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b1:88:4f:83:d0:c3:ad:9e:bc:21:5a:95:6b:db:fe:7d:94:
27:90:66:04:20:0e:02:88:cc:ab:a6:e4:b8:a9:51:fc:c5:86:
e3:25:2a:f1:02:7c:a2:f8:d9:ca:82:9e:11:0d:ad:8b:37:78:
02:52:d8:29:60:d7:0b:d5:59:ec:87:76:da:58:eb:f5:d5:49:
a4:d3:40:d6:79:6a:55:59:f4:74:10:79:56:d1:e5:92:69:c7:
df:c2:e0:0a:68:d0:53:be:26:33:0f:83:b9:38:4b:2c:66:7e:
dc:7f:3f:b1:ae:c7:59:1f:c1:06:23:25:9b:fb:e7:4a:ee:cb:
0a:a2:e9:8a:61:e8:0e:9a:5f:79:cf:10:35:30:5e:c6:79:bd:
f1:fd:3a:9c:d7:70:3b:6a:cf:ba:19:f1:1b:2d:3e:dc:bb:91:
b9:71:01:49:68:91:d7:73:2f:5a:54:d2:b8:80:df:e2:1c:f0:
16:c0:dc:2b:20:b2:df:ee:1e:8f:4e:a3:e6:24:1f:a3:48:4b:
5c:d6:22:2e:50:63:59:e8:bf:28:f2:12:a2:ce:d3:62:6b:7f:
a6:b5:6f:81:08:51:81:2b:c1:d9:c5:fc:31:21:13:60:64:22:
3a:6d:0e:12:79:ae:0e:67:46:cd:27:c0:bb:8a:e6:2e:c8:e3:
98:3a:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org