Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa
File: 6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa (raw, json)
Hash identifier: AhyrtCKoFR7CdoFN6P6gqRX2dibEm3cKuHF6n36Vfxk=
Subject key identifier: EA:F8:D4:7D:A0:DE:24:A3:06:B3:50:48:E8:7A:63:33:62:5A:A1:57
Certificate issuer: /CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
Certificate serial: 018572B3F59CDE85467C534F158FEBAD1A9E
Authority key identifier: 13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa
Signing time: Mon 02 Jan 2023 13:37:54 +0000
ROA not before: Mon 02 Jan 2023 13:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:f5:9c:de:85:46:7c:53:4f:15:8f:eb:ad:1a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
Validity
Not Before: Jan 2 13:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf8d47da0de24a306b35048e87a6333625aa157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:7c:e2:c2:ca:aa:8b:7a:d6:8f:b1:80:27:
50:75:d1:3b:df:bb:a1:ab:d7:0c:0d:82:86:8b:88:
01:b1:6c:a1:0d:68:e2:96:d1:da:cd:1f:ea:8b:cb:
72:f0:4e:e7:bf:34:c0:f9:f3:30:b5:ab:64:e1:bb:
ae:f9:de:31:56:54:df:b0:00:8f:7e:ae:c4:b5:c8:
2c:26:45:a8:cd:1d:17:24:2e:96:9c:41:33:13:07:
1f:28:37:bd:80:d0:bb:2e:58:7a:56:17:07:96:5f:
76:fa:33:23:1c:7f:7a:6a:fc:ef:d9:c5:ce:2d:f7:
1a:89:ab:63:99:dc:04:1f:ad:1d:6c:b2:31:a0:98:
4c:fc:1f:7b:a8:2f:e6:f5:a7:12:54:ec:a3:06:28:
22:0c:fc:0d:35:94:5c:44:96:27:5a:4f:2d:ac:c1:
9c:f1:02:37:eb:d4:2d:4c:4b:c7:2f:32:06:b8:8c:
f3:c3:08:0f:6b:43:cc:35:01:22:8d:27:6e:86:85:
13:36:64:68:bf:d0:e6:77:6d:f1:f6:b9:cf:46:6f:
f2:f1:60:3b:22:0d:55:2a:31:60:cd:d8:f2:91:49:
50:35:b5:12:24:a9:39:11:78:f6:01:69:6c:eb:fb:
49:27:38:1e:52:69:c2:2b:68:a7:06:23:fb:68:78:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:D4:7D:A0:DE:24:A3:06:B3:50:48:E8:7A:63:33:62:5A:A1:57
X509v3 Authority Key Identifier:
keyid:13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c0:da:43:94:31:68:07:d5:a0:08:98:8b:6d:4e:67:45:7a:
32:d2:93:7f:c1:3f:8b:bd:28:09:be:f9:fd:52:85:0d:57:93:
80:f0:51:35:53:9e:c6:96:e8:39:90:d5:bc:01:a5:fc:56:66:
5c:35:15:4d:b4:5d:16:f4:45:4a:84:c7:59:46:1a:a9:3c:68:
3f:d7:41:4a:66:88:35:21:83:5e:9f:e6:7b:e6:68:2e:f3:4a:
7a:53:d0:73:1d:47:57:d3:1b:76:d8:c7:0f:51:e8:8c:72:32:
a7:73:8c:15:87:5e:40:3d:55:86:72:38:03:ff:3f:9f:bd:a8:
50:84:7e:31:54:86:44:28:60:e4:0c:b2:94:c4:2d:61:53:d9:
0e:62:49:9e:ce:84:32:45:5f:80:79:87:89:82:12:db:cd:a0:
f8:d1:ba:66:5d:44:85:aa:e5:9f:56:ae:34:ff:9d:4f:13:0e:
25:a8:af:2d:37:dc:f0:09:1a:96:f5:84:ac:de:73:81:c1:4b:
db:a5:77:74:49:bf:13:34:15:75:09:eb:85:b8:45:56:4e:9a:
dc:d2:53:c3:e7:fd:7a:11:96:57:57:40:a4:0a:a1:62:62:9c:
27:59:34:d3:bd:6b:9d:09:a6:b6:e6:b0:0d:1a:0c:c2:6a:fe:
e3:5d:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:04:11 2023 by rpki-client on console-fra.rpki-client.org