Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/mPYJvBpbi137O54KnEfes2ilxtE.roa
File: mPYJvBpbi137O54KnEfes2ilxtE.roa (raw, json)
Hash identifier: DOGBMaOdwyiq9avCrfOlqiganAJ1Y3lFdF4slGRfXco=
Subject key identifier: 98:F6:09:BC:1A:5B:8B:5D:FB:3B:9E:0A:9C:47:DE:B3:68:A5:C6:D1
Certificate issuer: /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial: 01856BC0F5DACC951DCE9D47FC84279EC015
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/mPYJvBpbi137O54KnEfes2ilxtE.roa
Signing time: Sun 01 Jan 2023 05:14:46 +0000
ROA not before: Sun 01 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41171
IP address blocks: 146.19.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f5:da:cc:95:1d:ce:9d:47:fc:84:27:9e:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Validity
Not Before: Jan 1 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98f609bc1a5b8b5dfb3b9e0a9c47deb368a5c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:18:b9:8a:d1:91:db:1a:d5:51:31:ab:08:
65:29:e4:d6:b6:53:98:b3:8f:80:73:f2:e9:44:87:
31:10:9f:80:c0:34:a7:2b:c3:a7:68:a6:37:e9:f7:
ba:a5:6a:d7:e5:2c:58:4b:5d:e0:ca:2f:54:0d:3c:
6e:eb:3c:8f:de:9d:39:f2:c2:e2:01:79:ac:be:95:
fb:30:1a:8b:56:aa:f6:d2:ad:03:29:08:eb:3c:55:
b9:3f:7d:5a:54:08:1b:5f:64:bb:e0:88:cb:61:fb:
63:79:6d:66:6d:3e:c1:92:7d:dd:d7:6b:83:72:bc:
28:75:7c:4b:ce:87:df:ea:88:31:2a:a0:88:92:f1:
6f:b0:2e:e0:ac:ea:33:8c:4e:55:85:fb:1c:be:d5:
50:02:2b:61:2e:1e:55:0e:1f:bc:30:bd:18:8a:04:
61:9c:f4:ca:18:c1:bc:6a:d2:79:69:9e:d3:cf:04:
92:7a:de:e6:0d:b7:60:55:af:e3:91:18:ef:2a:aa:
89:44:a6:51:e1:c1:d3:fe:af:22:cf:0f:f4:73:fb:
27:ec:10:0e:74:36:d2:be:af:71:99:7e:17:f6:db:
15:8d:32:c6:38:04:96:db:3d:32:d9:e7:f8:63:d2:
4b:e1:7b:d2:56:2a:92:44:fd:7b:9b:78:32:6e:9d:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:09:BC:1A:5B:8B:5D:FB:3B:9E:0A:9C:47:DE:B3:68:A5:C6:D1
X509v3 Authority Key Identifier:
keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/mPYJvBpbi137O54KnEfes2ilxtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:95:d9:4e:f6:d3:9f:b5:4e:f3:75:a8:c5:25:63:7d:b3:e6:
09:b7:8c:d3:ca:8d:08:99:ee:5e:12:75:f4:f8:cb:35:b7:56:
e8:da:8d:f9:d5:19:9f:9c:fc:ac:d8:35:5b:1a:30:ad:aa:c1:
72:6e:56:06:ae:77:8c:41:9a:3e:21:4d:fd:9f:b7:c9:4e:ee:
2e:a6:07:42:e4:36:9c:a4:75:a2:8c:cd:2f:ac:9b:c6:82:d7:
36:e3:52:62:cb:59:7e:ca:a1:5c:58:36:01:2c:33:d1:fb:17:
7c:5a:7d:28:90:15:7d:32:a6:b3:bc:bf:f0:b2:c0:19:57:a3:
85:fc:43:f0:79:81:13:f7:3c:c7:80:49:35:03:b3:20:ed:27:
19:4a:19:f8:26:27:90:d6:6c:c9:06:03:6b:98:ce:7b:8a:10:
26:fa:b2:0c:90:2d:b0:bc:0b:ee:26:81:cf:9f:39:e2:f4:9d:
ca:b3:9b:70:4d:73:24:32:11:89:0d:98:fe:57:55:ab:dc:c1:
12:d2:32:fd:1a:97:7e:9e:d3:d7:4d:50:b1:ee:7c:9e:e6:3b:
11:f2:98:f5:6d:66:84:95:58:50:a9:e5:a2:b1:e4:1a:35:83:
cf:e8:ae:7f:04:f6:fe:c3:c1:35:4b:7b:86:42:eb:86:26:3f:
eb:59:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org