Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/qyqlpp4xdEsGJtv4vBLZ6YrKCww.roa
File: qyqlpp4xdEsGJtv4vBLZ6YrKCww.roa (raw, json)
Hash identifier: gXfKFkhY+KVfk368MKriwS5A+CLMzNlpKnLTPl3Hv3w=
Subject key identifier: AB:2A:A5:A6:9E:31:74:4B:06:26:DB:F8:BC:12:D9:E9:8A:CA:0B:0C
Certificate issuer: /CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Certificate serial: 018572FA77876CDE09459E9BA1D82D6B462C
Authority key identifier: 6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/qyqlpp4xdEsGJtv4vBLZ6YrKCww.roa
Signing time: Mon 02 Jan 2023 14:54:55 +0000
ROA not before: Mon 02 Jan 2023 14:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:77:87:6c:de:09:45:9e:9b:a1:d8:2d:6b:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Validity
Not Before: Jan 2 14:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab2aa5a69e31744b0626dbf8bc12d9e98aca0b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:d9:68:f1:b0:c0:be:b5:8b:53:1f:1a:b7:
c3:19:6a:9a:26:7a:99:03:8a:f8:1e:76:27:54:c8:
c9:0a:f0:48:a7:8d:2e:52:c8:9b:52:b3:b3:de:08:
5e:e5:45:07:07:f9:d7:9c:3e:1a:30:45:c4:35:b8:
78:6b:78:09:a2:48:15:83:86:9e:fe:22:c7:04:4f:
e8:4e:9f:51:be:36:32:c2:b5:15:4b:15:ad:8f:cd:
c9:27:0c:5f:d3:4e:0f:07:d8:75:97:9b:c4:0b:12:
1c:f8:9d:7f:f6:f4:91:46:a5:60:05:61:cc:c4:a1:
c7:65:f0:de:e1:1f:c1:e2:44:f7:4b:a2:10:cf:83:
f8:7f:3f:2c:f2:8d:1d:b4:2a:16:ad:d0:14:bd:d6:
7b:24:db:93:12:34:80:1d:9a:77:c5:f6:0f:94:ad:
7d:f2:5f:bf:f8:21:ba:ca:5a:48:c0:c2:fc:92:f9:
eb:90:42:08:eb:cc:ee:af:19:75:3e:6c:25:df:cb:
0a:3d:70:bf:3f:7a:58:3b:d2:3c:e5:95:ca:8d:22:
e3:2c:dc:20:12:2a:34:b3:d4:f7:e4:51:e8:5f:ac:
c1:dd:7a:cb:8e:a4:60:16:96:c4:17:1b:db:a6:db:
4c:f9:76:05:3a:1e:5c:5d:0e:8b:e4:b6:72:c2:51:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:A5:A6:9E:31:74:4B:06:26:DB:F8:BC:12:D9:E9:8A:CA:0B:0C
X509v3 Authority Key Identifier:
keyid:6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/qyqlpp4xdEsGJtv4vBLZ6YrKCww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.225.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ed:3b:fe:40:2b:76:6c:27:31:9f:a1:6f:6c:a4:48:6d:50:
9a:20:06:1f:4f:41:68:9f:3d:b2:7e:73:a0:32:6a:48:1c:fd:
27:64:de:a2:62:26:51:0a:81:1d:96:27:44:71:5c:cd:6d:bc:
96:33:79:48:70:2e:91:93:73:96:2b:c2:8c:a5:39:d3:2a:14:
5b:fb:8c:a8:a2:d3:46:a7:fa:4f:af:c4:bd:17:a4:19:5d:06:
16:bc:fe:85:18:5c:12:02:7c:7a:4f:e0:2b:87:54:64:28:2e:
40:26:be:a3:f2:83:44:87:aa:d7:b0:95:90:52:dd:9c:40:79:
1a:77:3c:53:07:80:1f:8f:64:75:05:4f:4f:06:0b:8a:f4:ad:
d3:9e:e2:dd:4d:c9:a1:bd:50:70:74:33:22:43:66:f5:cc:0a:
91:ae:cd:19:10:50:73:21:2e:5d:28:e5:60:b4:36:b9:c2:36:
25:e6:47:2a:df:9e:dc:2b:3f:e5:36:bd:56:bf:d3:5c:fe:6e:
79:a9:52:fd:85:83:24:20:89:ce:26:19:f6:3a:ec:1e:82:90:
d6:32:d0:aa:02:41:d5:c2:af:66:10:88:34:a7:eb:56:96:12:
da:0b:cb:fd:6d:f4:3d:96:7e:5c:f1:a2:bc:b4:81:b8:c2:80:
77:4e:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:18 2024 by rpki-client on console-ams.rpki-client.org