Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/CbbsF2z8-P9GhW3fvWqDwcF6SEg.roa
File: CbbsF2z8-P9GhW3fvWqDwcF6SEg.roa (raw, json)
Hash identifier: z6u/W9dRz37g5+y7jyUMfeGWTlCqDJqHlvwuZzvUIrE=
Subject key identifier: 09:B6:EC:17:6C:FC:F8:FF:46:85:6D:DF:BD:6A:83:C1:C1:7A:48:48
Certificate issuer: /CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Certificate serial: 018820867528A573AB3902CD4E594C841054
Authority key identifier: 6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/CbbsF2z8-P9GhW3fvWqDwcF6SEg.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:28:a5:73:ab:39:02:cd:4e:59:4c:84:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b6ec176cfcf8ff46856ddfbd6a83c1c17a4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:1b:a5:05:da:6f:21:16:b6:f6:a7:55:97:
68:5e:b0:e9:7e:95:97:f7:f3:47:65:79:56:63:0b:
7a:e0:63:4d:92:87:e4:8e:04:9d:bc:b4:ab:55:35:
e6:6c:0d:7e:71:0a:e1:79:6e:a2:a4:4a:35:7c:62:
09:a5:a5:d1:81:94:04:ea:43:dc:bf:b3:bd:5d:14:
b7:46:bd:b9:c2:d0:c1:a9:62:f3:f1:fb:5b:49:a6:
50:87:6f:3f:1c:86:fa:92:b2:90:76:5e:19:40:6e:
e9:7f:a6:af:74:12:64:79:ae:20:26:f3:57:e4:20:
6b:a6:5c:fe:12:7b:e1:ad:d3:c5:68:8b:7f:39:15:
c9:95:e3:fb:0d:67:28:4a:50:7f:20:2f:49:ba:61:
2d:b6:cf:d5:8b:6f:77:39:6d:f1:49:6a:ee:f1:06:
15:09:39:91:12:06:61:29:8a:43:48:16:a7:9c:84:
66:59:02:21:16:db:f9:75:ca:a1:97:87:92:30:65:
3b:0c:4c:ef:1f:a0:b5:e4:72:5b:30:af:aa:ed:9f:
fc:f0:40:56:3a:b3:0c:f0:e2:05:69:91:40:da:a8:
2b:fd:85:f9:8f:58:c9:0c:cd:c4:a6:bc:f6:45:a2:
55:ca:85:cd:b6:46:d7:4b:a1:f7:a9:9a:6f:44:37:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:EC:17:6C:FC:F8:FF:46:85:6D:DF:BD:6A:83:C1:C1:7A:48:48
X509v3 Authority Key Identifier:
keyid:6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/CbbsF2z8-P9GhW3fvWqDwcF6SEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.225.0/24
Signature Algorithm: sha256WithRSAEncryption
98:20:91:61:5e:9b:19:3d:74:90:45:f5:81:ad:b7:97:df:73:
7f:8d:2d:8d:dc:40:35:67:9a:3e:f2:bb:40:36:f4:81:e7:52:
0c:52:01:e1:02:28:2a:40:4a:e5:0e:08:77:63:79:bd:7f:1b:
98:07:ef:08:c2:30:50:1e:91:cb:a8:9b:51:15:02:c0:73:7e:
20:d8:51:8e:09:ee:69:9d:f0:cf:31:c8:ca:db:9b:13:0c:88:
ed:dd:d9:30:a0:7c:b8:0a:c2:f1:20:7f:4b:19:42:ae:eb:80:
a8:cb:21:fe:23:88:6e:4e:8b:50:15:5e:fe:08:81:57:19:4b:
de:f5:56:cc:a0:b2:50:3d:a9:f2:bb:8d:2f:2a:ab:9a:7d:fe:
29:a2:06:49:85:27:7b:30:e0:a3:76:ad:d2:29:4f:f6:1f:19:
d7:dd:cc:89:92:c5:7c:50:33:0d:9a:fa:dc:7f:9e:99:ec:5a:
41:f3:8f:2f:9c:cc:ac:c3:56:31:75:20:e8:5b:6b:c7:bb:e4:
b4:8d:26:3f:05:df:74:9d:9b:57:01:37:21:0a:f2:99:f5:c3:
fb:b9:0e:34:b4:2d:78:de:46:71:61:9d:bb:d9:93:a6:38:d9:
3d:7a:a8:1b:7d:c7:1b:ff:10:7c:be:98:c9:1b:ef:2a:46:58:
f0:4b:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org