Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/2wok3YR_eBfXFt0m0s-wEREG0Q0.roa
File: 2wok3YR_eBfXFt0m0s-wEREG0Q0.roa (raw, json)
Hash identifier: khr0wie8ESgLSv6e7DSlocohbv/j8kxKasTkeDDf+8U=
Subject key identifier: DB:0A:24:DD:84:7F:78:17:D7:16:DD:26:D2:CF:B0:11:11:06:D1:0D
Certificate issuer: /CN=cbb168d46d05712c72cb147ce95a2e5b8ccb44e4
Certificate serial: 616BA3
Authority key identifier: CB:B1:68:D4:6D:05:71:2C:72:CB:14:7C:E9:5A:2E:5B:8C:CB:44:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Fo1G0FcSxyyxR86VouW4zLROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/2wok3YR_eBfXFt0m0s-wEREG0Q0.roa
Signing time: Sat 01 Jan 2022 03:53:25 +0000
ROA not before: Sat 01 Jan 2022 03:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6384547 (0x616ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb168d46d05712c72cb147ce95a2e5b8ccb44e4
Validity
Not Before: Jan 1 03:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db0a24dd847f7817d716dd26d2cfb0111106d10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:2c:7c:56:49:f5:e8:d8:89:87:4a:ba:77:
52:ae:71:07:87:93:1d:66:b7:08:4b:df:73:33:0f:
d4:b8:68:f3:09:dc:ee:e8:5f:47:19:3b:90:d5:72:
8b:37:bf:25:47:cd:95:74:cc:0e:7e:ef:9d:25:9d:
76:9c:4b:aa:f8:66:48:90:86:a3:76:df:3f:69:90:
0e:ba:ac:b7:29:33:f1:a8:8d:ef:97:fa:4b:ee:f3:
b1:d6:2d:84:4b:85:0a:b5:d2:c2:94:6f:c7:84:2c:
8a:55:e2:22:c9:e0:af:11:70:94:41:94:ac:50:ce:
dc:c2:f8:62:7a:29:fa:2b:c3:9e:db:32:1a:39:56:
95:eb:c8:b9:5f:89:94:90:9a:f1:7e:bc:a8:41:41:
89:7b:a7:22:18:0e:6b:b5:b3:06:a8:79:3d:06:6a:
00:f9:d7:79:a5:44:2d:b6:9c:d7:8b:ae:21:88:33:
8d:94:2b:e0:ae:11:01:64:57:96:af:74:fd:b1:15:
d8:65:45:a2:cb:a2:c7:16:e6:4c:47:eb:2e:27:c4:
d0:1b:dc:53:9f:e3:6d:d2:13:16:4d:b3:bf:d8:67:
2d:99:60:23:9a:79:9b:cf:96:55:94:0c:c0:5a:ab:
42:3b:4f:5a:68:7a:ca:c6:9a:1b:22:43:03:d9:3a:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:24:DD:84:7F:78:17:D7:16:DD:26:D2:CF:B0:11:11:06:D1:0D
X509v3 Authority Key Identifier:
keyid:CB:B1:68:D4:6D:05:71:2C:72:CB:14:7C:E9:5A:2E:5B:8C:CB:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Fo1G0FcSxyyxR86VouW4zLROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/2wok3YR_eBfXFt0m0s-wEREG0Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/y7Fo1G0FcSxyyxR86VouW4zLROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cf:58:ac:97:81:8e:c1:53:8a:11:94:98:8a:e4:6a:83:e5:
f8:03:25:f3:32:4e:16:56:6d:c3:63:76:e7:10:9c:ea:e6:ce:
68:8c:aa:9b:24:03:5a:ef:b3:da:cd:78:1f:71:e1:1e:d2:9d:
3f:11:7a:b0:33:5d:16:9a:3a:dd:ba:95:28:63:c1:89:88:f8:
8f:0c:a0:3d:a7:91:17:60:f9:88:91:15:91:13:52:27:83:8b:
4f:6c:88:5e:11:6c:40:89:d1:6c:1d:fe:b0:95:a2:ac:55:4e:
32:b8:f1:d7:da:98:3a:4a:2d:6b:b0:12:2d:5d:68:50:7c:23:
52:c2:59:50:8a:ae:63:ab:28:14:78:59:4a:b0:30:cd:39:58:
18:ac:a5:41:76:69:58:fd:60:7b:a0:9f:d1:7d:90:d3:91:bc:
a9:67:8c:85:80:0d:a5:c3:57:ec:23:7f:6b:a3:5e:62:db:aa:
84:02:3a:e3:9a:af:e0:19:9e:0b:b0:65:e1:b0:1a:47:77:9f:
41:49:d8:ff:4b:ff:5b:d8:94:86:e4:68:5f:c2:e9:e4:d6:2e:
27:a0:c5:d3:cd:1a:29:b9:6e:d6:3e:db:2c:90:cf:ce:f8:29:
dd:b2:cb:70:96:9c:37:a7:ee:d5:56:94:92:4d:34:fe:29:72:
bd:ee:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org