Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/atHs-IPcTsN2dIPXHIHCPd5hlRY.roa
File: atHs-IPcTsN2dIPXHIHCPd5hlRY.roa (raw, json)
Hash identifier: zC/vDL+oq4np3lmdDZKJiJ+jX6CWgFlnuHvXO7JoBNM=
Subject key identifier: 6A:D1:EC:F8:83:DC:4E:C3:76:74:83:D7:1C:81:C2:3D:DE:61:95:16
Certificate issuer: /CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Certificate serial: 0185719E896A4A7C20E11AD735275B6AD490
Authority key identifier: C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/atHs-IPcTsN2dIPXHIHCPd5hlRY.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 146.255.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:89:6a:4a:7c:20:e1:1a:d7:35:27:5b:6a:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad1ecf883dc4ec3767483d71c81c23dde619516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:07:b7:d4:a0:2d:12:d7:64:7a:2b:eb:38:
8a:45:88:21:b1:4a:1f:00:53:92:36:89:33:ee:7a:
4d:c0:9c:cd:65:0b:bd:9f:d6:95:5b:2c:c1:46:0d:
b1:69:b4:c7:2e:c6:86:e0:0c:f0:b8:45:44:58:b8:
79:38:95:4d:02:8f:22:bc:ba:67:80:fe:4c:25:2a:
6d:44:62:f0:cd:c8:78:65:c4:c8:49:97:05:bd:dd:
4e:be:c2:c9:2f:fb:7b:e9:82:e2:99:5b:9f:f5:c2:
2d:49:23:4e:f5:c4:9e:6e:86:eb:fe:5d:50:a0:ef:
80:88:26:45:c2:b7:a2:32:0c:d8:47:1c:57:98:32:
1a:0d:3d:83:2d:9e:da:aa:8b:d2:7f:d3:50:b3:4e:
6b:b7:a4:51:b1:af:17:e1:a8:df:78:67:4a:65:23:
6c:e0:90:dc:b9:8e:e7:6b:e0:66:9d:ba:e2:76:68:
7b:9c:24:30:28:6e:0f:fb:26:86:1a:28:b1:a8:d1:
87:ef:c0:93:f5:75:cb:6f:51:b1:dc:ec:14:5b:66:
53:88:a9:e8:69:ff:7f:a2:f5:1d:44:b2:bc:58:0e:
a3:ec:5a:4a:df:fd:6a:18:34:37:30:06:9e:4b:74:
a3:8a:5d:99:04:d8:f3:94:9e:7b:36:d3:c4:a7:36:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:EC:F8:83:DC:4E:C3:76:74:83:D7:1C:81:C2:3D:DE:61:95:16
X509v3 Authority Key Identifier:
keyid:C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/atHs-IPcTsN2dIPXHIHCPd5hlRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.190.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e2:87:91:90:2d:ee:e5:24:eb:78:82:04:bd:8d:14:88:a8:
ab:ef:1c:bf:b5:cf:a9:11:4a:83:c6:13:30:b4:3a:03:ef:54:
0e:83:13:84:dd:c3:74:3a:94:14:5b:78:bf:5f:42:9a:f1:49:
ec:46:69:5a:7d:76:50:26:99:2b:46:41:a7:a9:24:b6:a6:09:
f1:0e:12:68:38:60:7f:56:1f:d9:f3:8e:c3:42:1b:76:9c:f3:
f4:25:64:65:ed:57:29:15:94:b4:51:a9:6c:c3:ed:f6:ac:64:
67:76:26:59:de:fd:73:61:52:56:32:ed:2c:11:e8:91:1c:f5:
dd:ed:11:ff:a6:8a:61:33:03:3a:4d:40:a8:09:25:4b:32:c8:
f4:9c:58:d8:79:3f:7f:3c:fd:81:0b:f7:74:60:fd:2e:ae:0d:
0b:61:6f:2f:d8:36:a4:07:6d:19:72:1d:4a:cd:ec:7b:fc:4d:
a8:53:46:d9:ca:7d:32:e4:5b:e1:40:2d:2e:79:2b:b5:18:87:
e7:e4:70:84:d5:1f:92:c7:2f:99:80:d5:cd:26:83:b8:b4:ba:
f1:c7:87:e8:8e:ca:7e:69:1f:27:cd:04:b7:36:ab:24:a1:b8:
fe:31:c0:32:65:17:35:23:a2:29:75:9f:24:75:f7:cb:d9:d5:
b2:69:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:29 2024 by rpki-client on console-fra.rpki-client.org