Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa
File: q6Wij9swy8R2c4gL53IpFKBGS28.roa (raw, json)
Hash identifier: lNKgCqjjyyY4QwJXW3bAOiv/qaEsC3DrHq6INV5LpXU=
Subject key identifier: AB:A5:A2:8F:DB:30:CB:C4:76:73:88:0B:E7:72:29:14:A0:46:4B:6F
Certificate issuer: /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial: 01856F79891E5D115ACCA3EAE5A648C9F2B2
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa
Signing time: Sun 01 Jan 2023 22:35:13 +0000
ROA not before: Sun 01 Jan 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:89:1e:5d:11:5a:cc:a3:ea:e5:a6:48:c9:f2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Validity
Not Before: Jan 1 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aba5a28fdb30cbc47673880be7722914a0464b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:f4:eb:a5:69:83:5f:85:65:3c:51:ae:ef:
e1:73:eb:52:94:25:80:53:f1:0d:eb:62:d1:ad:1c:
f7:6e:ef:87:18:86:9c:92:4f:8a:d1:f3:68:7d:21:
de:db:7e:18:b7:b2:ce:a4:4e:d2:aa:d2:18:01:dd:
96:9c:b2:4e:92:b8:4b:d5:58:6a:e3:9b:57:9a:2f:
27:60:0a:0c:3e:c9:12:cc:0c:25:39:16:b4:8e:c7:
64:03:6e:5e:8b:c0:74:94:93:86:ce:c3:c4:db:00:
6c:d3:79:fb:a3:cb:29:6c:bb:ac:29:33:cf:a9:6a:
61:b7:ef:fe:9b:e0:45:4e:3f:ef:eb:10:35:bf:5b:
43:09:cd:6d:ce:86:f7:73:76:da:12:ec:bf:9f:f8:
63:81:a8:b4:a6:8c:ac:dd:f4:24:5d:4b:87:98:88:
77:bc:47:be:82:9c:55:dc:8a:9d:69:c0:24:7f:d1:
da:95:eb:e9:1a:bb:b8:9b:6c:b0:76:28:c1:3f:0a:
f1:de:ab:aa:4a:60:65:d4:28:cc:dc:f1:90:5e:66:
47:59:14:ac:d5:63:c6:7e:37:00:51:7e:f9:af:2b:
aa:66:10:cb:2c:57:aa:3d:da:dd:1c:54:73:13:e1:
15:0e:1b:5f:03:8c:4a:f0:4c:fa:10:ba:6e:2e:b6:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:A2:8F:DB:30:CB:C4:76:73:88:0B:E7:72:29:14:A0:46:4B:6F
X509v3 Authority Key Identifier:
keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b6:9e:e6:85:86:65:70:1a:b3:6d:b5:1a:2e:69:c0:ab:73:
48:c0:1a:7d:f5:e6:e8:13:53:89:8a:d8:be:eb:97:b7:9b:0f:
47:23:11:8e:bc:78:89:55:88:b5:7d:57:a8:af:28:73:e4:a3:
23:89:94:98:be:31:81:27:2a:51:29:a5:46:c8:b8:95:81:de:
24:a3:22:68:56:09:3d:ba:43:a8:11:80:67:9d:de:07:60:cd:
18:6b:69:a4:29:3a:77:0d:25:b1:f0:ff:90:95:46:ca:f8:a2:
e5:f3:18:d8:ff:f1:83:6d:ff:f5:d8:88:02:54:08:63:69:a9:
6e:a4:85:0b:05:39:bd:51:85:a3:67:af:62:0f:ba:01:c5:4c:
14:5f:db:75:0a:6c:1a:ff:2b:8c:9b:50:7d:69:ab:de:3b:e1:
ac:b1:ee:de:b9:19:b3:de:54:5f:fb:57:16:8d:da:d7:f9:cf:
f7:17:a0:3a:2d:2b:2e:01:83:be:97:bf:00:85:7e:8d:2d:18:
47:25:e7:74:02:43:cd:a3:f3:14:1f:76:82:e7:4f:db:e4:2b:
3d:e2:21:c1:91:80:5d:6f:0c:68:65:c5:a5:35:9e:75:00:77:
cf:79:2f:16:9b:f9:a0:48:57:5d:d2:82:bf:93:d6:e2:c1:58:
2e:d8:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:41 2024 by rpki-client on console-ams.rpki-client.org