Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/d3TJssJdExqmx2yQA6H1DGfbeTk.roa
File: d3TJssJdExqmx2yQA6H1DGfbeTk.roa (raw, json)
Hash identifier: rIDL6cuOzI6VN6iuP/6DlakGuN6i136RFU/AiaMGT14=
Subject key identifier: 77:74:C9:B2:C2:5D:13:1A:A6:C7:6C:90:03:A1:F5:0C:67:DB:79:39
Certificate issuer: /CN=509c6e23fd5872c07d1a66688a6b75c2736af52e
Certificate serial: 0185714C1C7A4B5EBEDFC45CD825B9A9850E
Authority key identifier: 50:9C:6E:23:FD:58:72:C0:7D:1A:66:68:8A:6B:75:C2:73:6A:F5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxuI_1YcsB9GmZoimt1wnNq9S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/d3TJssJdExqmx2yQA6H1DGfbeTk.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 146.19.37.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1c:7a:4b:5e:be:df:c4:5c:d8:25:b9:a9:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c6e23fd5872c07d1a66688a6b75c2736af52e
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7774c9b2c25d131aa6c76c9003a1f50c67db7939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:a8:1a:db:44:6d:4d:b2:92:30:82:80:61:
d0:b7:e3:0e:2e:f8:28:5d:bf:91:7f:4c:45:2c:43:
ed:a9:97:36:76:df:3e:fc:7e:0b:3f:72:f7:e9:de:
ec:2d:85:c1:61:d9:7d:18:22:a8:a7:3c:cc:1a:82:
f2:19:df:05:07:47:ae:d4:80:95:78:64:1d:4b:91:
a8:23:ea:d6:13:c6:3c:10:1a:ad:28:11:9b:e5:15:
6f:80:cc:84:cc:d9:b7:9f:bc:8b:d7:7e:91:c0:fb:
fc:f7:4e:6b:f4:d6:b8:7a:17:c3:06:65:76:8f:81:
c6:dd:d9:19:46:58:bf:ee:2a:eb:d4:fd:7e:db:bd:
fa:f2:3d:53:11:1a:59:65:dc:85:67:09:62:c7:92:
72:93:6a:bc:96:b7:08:a2:07:81:d0:2e:ee:9c:03:
1b:cf:13:4f:cd:9c:43:b7:46:91:12:23:ae:c1:a1:
e1:64:b3:3b:b0:73:de:1d:cd:9c:5e:d5:1a:2a:13:
6e:34:c0:f0:d9:fc:28:b4:3b:0b:37:19:5f:cb:5b:
e2:4b:4c:59:c7:d0:c3:3f:d7:1d:6c:83:2d:a1:be:
43:5b:ef:c8:7c:77:56:f5:27:41:b3:dc:9f:11:a6:
d5:27:cc:c7:f9:d1:c3:19:ef:ca:35:78:e8:a7:17:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:C9:B2:C2:5D:13:1A:A6:C7:6C:90:03:A1:F5:0C:67:DB:79:39
X509v3 Authority Key Identifier:
keyid:50:9C:6E:23:FD:58:72:C0:7D:1A:66:68:8A:6B:75:C2:73:6A:F5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxuI_1YcsB9GmZoimt1wnNq9S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/d3TJssJdExqmx2yQA6H1DGfbeTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/591f1a-e6e0-4866-8f7a-6b8bb701d30a/1/UJxuI_1YcsB9GmZoimt1wnNq9S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6f:08:e3:d7:a3:bc:f4:ef:a5:f0:82:14:4a:c2:ac:b6:b2:
ec:fa:15:86:9e:0c:0a:bd:b9:2a:3a:6f:9d:a1:16:f4:95:36:
8a:98:5b:bf:ef:f6:33:9b:9c:06:ae:77:d6:e8:f1:ca:3c:3c:
14:66:66:94:ba:46:b1:e9:81:f6:2c:d0:f1:52:9d:e2:00:75:
08:f6:f8:59:4d:e7:a0:d8:61:ff:92:47:21:f2:3f:f5:2b:ed:
0b:dd:0e:70:54:41:74:28:67:d2:ba:fe:26:c1:f9:65:63:c0:
03:ff:d5:a9:aa:3e:1b:cf:d4:80:69:c8:4a:59:f6:02:03:b5:
1f:8d:55:92:8e:04:e1:8e:47:bc:b8:4b:4a:2a:08:62:b9:15:
41:9c:51:5b:bb:cb:c3:ff:a2:06:80:42:ef:a0:42:cd:c1:c3:
d1:74:e2:8a:7c:03:e5:16:e5:10:3e:77:00:04:cc:e0:83:55:
3c:5d:90:bc:4e:f3:af:4a:c4:73:1c:dd:e0:af:81:d0:b7:7f:
5b:e7:23:8c:28:b8:69:ef:44:d7:0b:0c:fd:d6:e1:ab:52:c2:
bc:06:4f:79:02:5d:e5:0e:51:02:38:7f:89:65:d6:11:2b:70:
7a:6d:5b:40:b8:cb:f0:74:56:3d:c6:2a:76:9f:b7:91:5c:2d:
9b:50:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org