Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/0625c0-4a54-4d4b-bc40-74a4b2f4172c/1/38Dphra5f6Xt3wvShdPE5TdpPEk.roa
File: 38Dphra5f6Xt3wvShdPE5TdpPEk.roa (raw, json)
Hash identifier: ZtfSUeoR/WyfrAsl+pRzfFu79jslRpdc0MRf817tKHc=
Subject key identifier: DF:C0:E9:86:B6:B9:7F:A5:ED:DF:0B:D2:85:D3:C4:E5:37:69:3C:49
Certificate issuer: /CN=c3fe781cb2ca0621ff3ba824ecdc516fe61d252e
Certificate serial: 01856DC1E6EC9AA282289D4B74E2D84D7FA7
Authority key identifier: C3:FE:78:1C:B2:CA:06:21:FF:3B:A8:24:EC:DC:51:6F:E6:1D:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_54HLLKBiH_O6gk7NxRb-YdJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/0625c0-4a54-4d4b-bc40-74a4b2f4172c/1/38Dphra5f6Xt3wvShdPE5TdpPEk.roa
Signing time: Sun 01 Jan 2023 14:35:02 +0000
ROA not before: Sun 01 Jan 2023 14:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61438
IP address blocks: 146.19.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:e6:ec:9a:a2:82:28:9d:4b:74:e2:d8:4d:7f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fe781cb2ca0621ff3ba824ecdc516fe61d252e
Validity
Not Before: Jan 1 14:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfc0e986b6b97fa5eddf0bd285d3c4e537693c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:18:04:d5:de:e0:e1:94:20:71:9b:88:9c:
fc:2e:8d:d4:28:f0:2b:2a:3d:38:4e:4d:16:bb:c6:
44:d2:58:eb:ad:f6:c5:4a:05:2e:de:8a:f7:2d:32:
8f:3d:15:91:f9:ff:eb:34:30:85:a7:83:d7:c7:fc:
4c:be:3c:70:89:60:2c:e0:64:ef:f1:4f:84:ea:27:
03:f0:2a:b5:0f:f3:01:ed:a0:1d:e0:56:8c:f4:e4:
21:39:d8:35:2d:3f:66:9a:c0:8a:74:3e:b1:c7:4f:
1f:95:73:be:65:a2:2c:b3:a8:c5:64:4b:35:09:96:
b9:64:c0:56:59:69:47:47:e4:05:c9:26:00:e5:e5:
0d:44:7b:d6:5d:d2:31:38:0a:0c:06:c3:2f:00:f9:
55:66:e9:0b:94:e4:23:22:2d:6f:29:31:64:e2:1d:
ef:5b:27:4e:41:90:89:c4:6e:69:9f:10:b6:23:ab:
da:90:b3:b5:1d:ac:ee:e5:0a:ab:c1:2a:60:bd:a4:
be:f0:2b:16:11:51:39:c8:ae:e7:d0:b7:59:50:7f:
6d:af:6d:29:ad:4b:4c:3d:14:c2:43:53:df:45:7a:
8e:62:fd:55:59:79:0d:6f:92:a7:0b:9f:50:7b:a6:
28:2e:ad:8a:dd:82:6e:92:5e:3b:bb:f1:a9:f0:33:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:E9:86:B6:B9:7F:A5:ED:DF:0B:D2:85:D3:C4:E5:37:69:3C:49
X509v3 Authority Key Identifier:
keyid:C3:FE:78:1C:B2:CA:06:21:FF:3B:A8:24:EC:DC:51:6F:E6:1D:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_54HLLKBiH_O6gk7NxRb-YdJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/0625c0-4a54-4d4b-bc40-74a4b2f4172c/1/38Dphra5f6Xt3wvShdPE5TdpPEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/0625c0-4a54-4d4b-bc40-74a4b2f4172c/1/w_54HLLKBiH_O6gk7NxRb-YdJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.235.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9c:89:6b:ec:ea:e9:06:bd:24:fa:41:f6:b4:3b:6c:e3:0a:
33:04:9e:07:3d:f0:29:15:73:17:cf:8c:9a:b4:ce:24:94:29:
66:96:80:f7:41:9d:70:b8:d6:a9:b6:6d:87:1c:93:5e:55:24:
84:d1:03:8f:e1:1b:5f:fe:17:d9:65:a3:dc:48:74:41:a0:4a:
fa:e5:40:0d:c1:8b:43:f3:2a:29:0a:ce:b3:88:af:f8:a0:f3:
91:af:a6:83:74:97:96:3e:e7:32:03:4d:9c:2f:1c:c5:55:e3:
bc:78:07:ef:08:52:5d:42:b3:e6:cc:94:39:58:b9:67:44:97:
59:f7:a4:d0:10:9a:b8:01:47:35:04:79:41:4f:99:d7:55:0e:
a6:8c:7a:a0:9b:df:45:cb:a3:0f:09:10:78:83:4e:fb:f0:c0:
02:19:09:d9:6c:a1:7c:95:09:fd:ff:e5:3b:cb:eb:01:13:03:
1d:e9:5a:2b:ab:bc:ce:b1:bf:cd:43:8d:25:b0:40:40:81:90:
18:bf:96:62:43:aa:39:cd:93:1b:e7:c9:76:f0:92:3a:03:e2:
65:64:10:63:4d:6f:8e:4c:85:57:57:15:e7:de:85:d3:e8:9a:
b8:c2:1b:8f:72:ff:ff:dd:dc:3b:bc:78:bb:c8:f8:cf:3b:2a:
af:c2:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:52 2024 by rpki-client on console-fra.rpki-client.org