Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vwXIdZ-NDiWJLiLhcw9qE5-itvo.roa
File: vwXIdZ-NDiWJLiLhcw9qE5-itvo.roa (raw, json)
Hash identifier: feLE2kV9yokHW9+SsAgGoT5TIuiV0gtTh6/IT0FG/2k=
Subject key identifier: BF:05:C8:75:9F:8D:0E:25:89:2E:22:E1:73:0F:6A:13:9F:A2:B6:FA
Certificate issuer: /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial: 018A5EE7CE5356F55B579DDC5DB5A32CF1AC
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vwXIdZ-NDiWJLiLhcw9qE5-itvo.roa
Signing time: Mon 04 Sep 2023 06:36:04 +0000
ROA not before: Mon 04 Sep 2023 06:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207974
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:e7:ce:53:56:f5:5b:57:9d:dc:5d:b5:a3:2c:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Validity
Not Before: Sep 4 06:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf05c8759f8d0e25892e22e1730f6a139fa2b6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:e3:19:3e:e4:cb:c6:f8:5e:a0:0c:c9:8d:
4a:b4:68:31:5c:c0:f8:1d:3a:a8:ee:97:ab:06:f4:
5c:61:d3:13:17:de:3c:4e:9e:4d:df:fe:d7:85:4c:
ea:84:5a:eb:21:85:03:34:18:84:9a:69:67:73:6b:
9f:62:7b:c9:cc:22:95:b2:80:40:43:2a:f3:01:5b:
8f:e7:b6:18:a1:55:6b:3e:57:76:b0:b0:c7:fb:10:
62:b5:53:f5:e5:01:79:6d:6f:66:93:38:a1:1b:2f:
0b:62:7f:f7:92:1c:2b:4b:ab:b6:9d:f6:93:aa:44:
12:00:5b:9b:e8:94:14:9c:1e:f0:81:45:be:15:7e:
bf:a8:ab:1a:3e:44:0b:da:a0:97:df:ef:f2:dc:03:
92:ae:bd:2a:d1:7f:fa:6c:21:6f:10:f3:1f:41:11:
db:35:78:46:07:8e:ce:4f:4a:37:9b:f5:34:ec:c2:
f1:d9:27:47:9c:e2:b2:74:47:83:1c:d4:38:75:46:
79:aa:4f:2e:50:8a:fe:c2:90:38:86:c8:d6:51:47:
01:3d:44:69:02:78:97:e2:cd:51:ff:2d:2d:12:36:
f8:86:21:03:01:6a:48:00:75:5d:d3:e1:85:cd:9f:
e1:74:9b:61:2c:7b:d1:a4:c5:d0:4e:0c:ab:c8:c0:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:C8:75:9F:8D:0E:25:89:2E:22:E1:73:0F:6A:13:9F:A2:B6:FA
X509v3 Authority Key Identifier:
keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/vwXIdZ-NDiWJLiLhcw9qE5-itvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
59:40:3a:1c:92:35:b6:d1:26:a4:5d:f4:35:ad:2f:98:97:81:
02:7c:bd:29:40:04:e1:cc:a0:c9:a3:ab:69:c1:32:fc:66:0d:
7c:fd:fc:69:09:35:66:fc:aa:f8:7e:c4:5b:90:30:7f:4f:a0:
c1:97:a4:ec:2c:3d:05:6f:02:17:d6:8d:36:1d:61:1f:c8:78:
61:3e:a7:ff:46:8e:97:ef:7d:85:51:06:a9:64:53:b2:92:4f:
8d:d9:c5:3b:f5:78:dc:1f:a9:46:fc:4b:4d:7d:5f:ff:b1:f9:
a7:76:c7:3f:b3:4b:07:d5:58:2c:17:fe:11:04:32:bd:01:f4:
9e:2c:fb:08:2e:27:e5:65:20:63:97:3e:92:d8:ff:eb:c1:95:
5d:b5:a5:42:c9:8a:f3:96:48:64:18:49:3d:79:84:11:9e:7f:
ac:08:d1:fe:eb:91:76:16:63:bb:1b:98:ed:6c:6a:ce:58:3f:
ce:5b:51:3e:09:6c:7c:2f:86:70:5a:6c:d3:e0:db:70:25:a4:
ae:07:26:4d:dc:d0:1a:eb:73:99:29:77:89:56:59:48:04:1e:
a7:0e:f5:75:7e:7d:58:5a:25:f9:52:ae:b9:9d:ee:7c:a3:11:
12:8a:97:86:fe:a2:61:de:a9:bd:57:33:bc:ff:c5:7a:69:ee:
66:f6:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org