Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/ic0bxqJp7LDo72iiYGHLEt2kFgU.roa
File: ic0bxqJp7LDo72iiYGHLEt2kFgU.roa (raw, json)
Hash identifier: 82E3ubJMw6XczSlVoZoX9izXJ6tGb39dHx7faaHhzgo=
Subject key identifier: 89:CD:1B:C6:A2:69:EC:B0:E8:EF:68:A2:60:61:CB:12:DD:A4:16:05
Certificate issuer: /CN=562f8141b307dc948c5dfb232c668da5a626fa22
Certificate serial: 018571954D491A205AEDDC8FC2F88712AD36
Authority key identifier: 56:2F:81:41:B3:07:DC:94:8C:5D:FB:23:2C:66:8D:A5:A6:26:FA:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/ic0bxqJp7LDo72iiYGHLEt2kFgU.roa
Signing time: Mon 02 Jan 2023 08:24:47 +0000
ROA not before: Mon 02 Jan 2023 08:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:4d:49:1a:20:5a:ed:dc:8f:c2:f8:87:12:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562f8141b307dc948c5dfb232c668da5a626fa22
Validity
Not Before: Jan 2 08:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89cd1bc6a269ecb0e8ef68a26061cb12dda41605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:14:40:1d:cf:4b:ea:7f:45:bd:15:38:a6:
db:18:6b:f8:9f:1c:5c:e8:48:37:1b:f8:a4:59:46:
51:35:f6:52:47:49:b2:83:7e:b3:8f:0a:3a:53:cb:
d9:77:7d:4b:47:3e:42:65:1b:ec:1b:ca:78:09:04:
68:0c:b8:9d:69:a6:36:db:4f:33:7c:5c:d0:35:42:
43:f5:44:ae:26:27:03:10:cf:de:bc:bd:d2:4a:89:
e4:d3:e5:6a:a9:74:ba:90:1b:9b:84:97:b9:2e:b3:
38:2f:e3:bf:57:76:b9:26:b2:2a:87:49:a3:09:1b:
f0:e9:45:a2:88:06:47:10:d4:7f:cd:e0:43:21:1c:
d8:3b:b6:04:b0:d6:c3:37:d6:9b:b1:4f:42:48:32:
c6:6f:11:69:08:fd:49:3c:38:93:f0:50:64:7f:b1:
23:62:69:33:c4:d9:96:25:7c:c2:e0:22:15:c5:93:
61:ca:a8:b6:b4:61:35:fc:ac:03:de:4f:08:62:17:
95:90:2a:4d:c6:e3:44:4b:62:41:c0:d8:9f:12:6d:
e3:ac:32:4e:38:79:b6:f2:0b:c0:fc:2c:91:23:d4:
81:35:8d:02:b8:86:f9:8b:d7:72:e9:dc:8e:f3:bf:
6f:a1:f7:b2:2b:94:14:c0:28:1e:f2:c4:ae:52:78:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:1B:C6:A2:69:EC:B0:E8:EF:68:A2:60:61:CB:12:DD:A4:16:05
X509v3 Authority Key Identifier:
keyid:56:2F:81:41:B3:07:DC:94:8C:5D:FB:23:2C:66:8D:A5:A6:26:FA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/ic0bxqJp7LDo72iiYGHLEt2kFgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e773de-8f59-44a5-a6a8-574486fbe6bc/1/Vi-BQbMH3JSMXfsjLGaNpaYm-iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.25.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a3:c3:7a:e3:fd:1d:45:24:af:72:6b:d0:04:50:60:f2:9a:
9a:3c:36:6a:c2:c7:60:a8:be:88:5c:c0:6d:01:ce:7a:d6:cf:
61:4c:62:f8:52:cb:71:0d:61:82:71:a7:07:ba:79:e4:f0:ca:
ed:a0:96:3b:c2:54:aa:c3:35:01:5e:b2:e8:6b:0d:b0:af:06:
1a:a0:30:28:9e:46:42:40:af:80:0b:c4:0c:eb:90:1e:c8:77:
31:f9:d9:07:66:c3:e1:ed:25:0b:9b:a6:aa:31:4b:f5:3c:fb:
1e:53:5a:9f:1b:f9:d6:9b:cb:48:e8:74:ce:9a:9a:10:a5:72:
6c:18:77:e8:ce:04:8f:d7:c7:85:08:ce:43:4b:52:32:61:7c:
3b:a6:db:6d:fb:8c:0d:67:d0:ba:89:c2:f5:a0:84:82:7e:59:
2c:f7:a3:77:5f:66:46:25:d3:db:a5:99:9f:0a:cb:87:23:72:
a9:be:3b:3c:53:d6:46:7a:79:e1:fc:27:9f:7b:7c:a0:a6:ca:
7f:44:86:73:42:f3:09:67:c5:30:2a:e5:51:7a:e7:7b:26:87:
2d:eb:28:f1:16:84:57:16:67:77:0e:c4:f0:a8:3b:df:d3:41:
3a:cb:89:38:de:07:ef:c2:42:e3:3e:5f:d7:41:43:87:52:2e:
d2:8b:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:18 2024 by rpki-client on console-ams.rpki-client.org