Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/UlaEk2bVc3RiY1D3EFvWOk4Dgy0.roa
File: UlaEk2bVc3RiY1D3EFvWOk4Dgy0.roa (raw, json)
Hash identifier: f2PS+9hcc0wBbU7KlLNCGLSjXmeCotm55o588n5gsnY=
Subject key identifier: 52:56:84:93:66:D5:73:74:62:63:50:F7:10:5B:D6:3A:4E:03:83:2D
Certificate issuer: /CN=91afcc05df02f27470df8381140b95aaec1f35bd
Certificate serial: 01856F66FDFED5E1CF018A0349AEB7207EDC
Authority key identifier: 91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/UlaEk2bVc3RiY1D3EFvWOk4Dgy0.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 146.19.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fd:fe:d5:e1:cf:01:8a:03:49:ae:b7:20:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91afcc05df02f27470df8381140b95aaec1f35bd
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5256849366d57374626350f7105bd63a4e03832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:a8:64:13:56:d6:42:cd:48:ec:6f:75:67:
e0:ce:58:2d:7b:b8:9e:95:cd:e3:a2:75:b3:7a:a4:
23:cc:d0:3a:46:72:a6:68:54:ed:a0:1d:b8:a2:07:
bf:fe:0e:d7:44:cc:dd:e6:9d:3b:ce:0c:1d:be:60:
ca:33:77:03:dd:2e:98:d4:57:a3:18:21:c5:2b:3a:
b9:58:ef:db:b2:79:4f:19:78:11:c1:56:1f:55:c4:
1d:43:b4:d9:4b:63:27:25:e3:f9:3a:df:1c:77:2e:
c2:66:81:c6:c4:e0:39:88:ab:d7:28:b1:db:24:c2:
3e:1b:a5:10:b0:54:a6:16:29:5b:66:17:c0:ff:ef:
47:b2:5e:24:be:50:ff:f6:38:da:90:df:fa:29:09:
d8:d0:73:87:2c:37:0d:18:bc:ad:f4:93:49:3f:76:
95:0f:34:c8:bc:be:89:eb:82:88:07:b2:79:a3:c7:
6c:6d:ef:39:65:a8:12:b7:1b:48:6c:fe:53:9e:07:
3c:53:eb:8b:0b:d3:30:2f:e6:c8:4e:21:cb:27:01:
38:59:e9:27:e8:d5:55:d6:b6:3f:72:56:48:0a:85:
67:ee:95:80:8f:bd:5b:dd:78:0a:63:83:b5:74:9c:
23:76:27:c4:67:36:78:37:68:30:45:7d:a6:91:cd:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:84:93:66:D5:73:74:62:63:50:F7:10:5B:D6:3A:4E:03:83:2D
X509v3 Authority Key Identifier:
keyid:91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/UlaEk2bVc3RiY1D3EFvWOk4Dgy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:aa:bf:69:49:20:64:6c:26:e3:95:d4:bb:e1:c1:76:ba:27:
95:7b:34:ab:44:b2:1d:8a:21:c8:a1:66:30:d9:fb:6a:93:0a:
74:fc:f5:6a:85:e2:f6:d0:a6:75:1a:b5:ad:69:8f:86:f8:13:
50:e8:1b:61:cd:c9:16:60:44:ee:45:73:cc:db:f2:07:bb:de:
23:86:7f:1b:58:a1:b9:4c:30:79:cc:41:c0:b1:9e:f9:38:a8:
45:6f:2a:44:da:73:ab:04:27:dd:93:54:e7:ef:73:7d:b8:c1:
ff:92:be:6b:fe:ae:70:37:25:9a:89:41:6d:2f:cd:e5:db:fb:
68:2c:a4:2e:de:c5:5e:30:25:0e:95:a9:6c:b3:86:2e:f2:be:
78:4c:74:27:f7:19:62:b8:a1:d8:28:ba:43:06:51:00:6b:89:
8c:6d:0b:b6:2e:d0:a8:40:fa:92:a6:56:51:c1:cb:4e:c7:67:
56:13:c6:99:45:b8:23:5a:a7:40:61:9d:8a:69:1c:73:51:81:
30:da:d9:24:76:aa:d9:aa:7a:92:1e:cb:b5:dd:92:cd:fd:c1:
3a:91:7f:71:11:11:c2:f8:bf:ae:0d:b6:fa:06:7d:d1:8b:d0:
a0:44:c4:97:f6:2d:26:06:34:cc:a7:ac:23:2c:53:d3:75:fd:
83:f9:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:31 2024 by rpki-client on console-ams.rpki-client.org