Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1-uMU6ZywiLHMn8UEv6Gd_p7USMY.roa
File: 1-uMU6ZywiLHMn8UEv6Gd_p7USMY.roa (raw, json)
Hash identifier: RN8hlYI71FjoO7j7PrYQeQGwcD12Y980n1blPsUJf7I=
Subject key identifier: FA:E3:14:E9:9C:B0:88:B1:CC:9F:C5:04:BF:A1:9D:FE:9E:D4:48:C6
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 0186A0DAA6DD447DEB595473AA2482A5A635
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1-uMU6ZywiLHMn8UEv6Gd_p7USMY.roa
Signing time: Thu 02 Mar 2023 05:45:29 +0000
ROA not before: Thu 02 Mar 2023 05:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:da:a6:dd:44:7d:eb:59:54:73:aa:24:82:a5:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Mar 2 05:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae314e99cb088b1cc9fc504bfa19dfe9ed448c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:dc:a8:da:58:dd:e4:92:14:d7:9b:d9:d1:
1f:b4:21:df:c5:43:d5:a1:a9:b8:5d:36:e8:ff:9f:
af:fd:51:9e:83:b6:64:81:f7:cf:19:5b:ee:33:1e:
77:cd:ca:f3:df:34:d9:18:ff:89:0a:e7:b7:96:ec:
39:f8:a4:f8:19:db:9d:b7:3f:f2:a0:00:bc:90:b0:
7f:fc:5d:22:f1:42:fd:56:b0:43:63:07:7c:8e:b8:
92:1c:e3:76:4f:5d:b4:19:f8:a2:45:64:bd:33:0a:
87:b8:61:5f:1a:a7:c7:41:6c:f8:aa:c2:d4:d2:da:
9c:a6:b9:50:62:f7:5e:70:4e:5b:3e:cf:70:99:66:
e1:ce:04:4a:3d:3d:dc:c3:ff:e4:04:52:2c:b2:28:
86:33:a1:fc:36:cc:99:fe:4e:0e:2f:92:2b:de:05:
52:85:4b:b8:12:b0:0d:e6:27:86:bb:f7:a0:a0:38:
48:85:3c:53:a2:1a:fc:e6:21:a6:89:18:47:8a:c6:
b1:33:8b:a1:01:3e:d4:8f:53:58:00:d8:4d:47:7f:
38:91:8f:a2:ad:41:b0:b3:f9:c0:1c:c4:c7:a2:16:
19:43:f3:ae:0a:07:75:43:9d:93:97:0e:99:02:36:
ef:4a:d6:39:4c:1b:25:00:1c:30:dc:70:ae:da:0f:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:14:E9:9C:B0:88:B1:CC:9F:C5:04:BF:A1:9D:FE:9E:D4:48:C6
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1-uMU6ZywiLHMn8UEv6Gd_p7USMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c1:37:a6:74:50:e4:5a:7d:ce:1e:b0:5f:d3:b1:8d:6d:c9:
42:fd:9e:35:91:30:a9:29:1e:17:d4:df:e0:a6:85:45:d3:19:
6a:6c:30:7a:f7:9f:ed:58:b2:ad:4d:4f:21:89:d1:04:f5:26:
ec:8d:cd:ea:e3:0a:37:fa:da:9e:68:10:66:7f:8d:76:7a:51:
ab:db:50:f6:b3:94:db:e3:95:83:c3:9b:f7:41:88:12:9d:a5:
1b:61:e8:92:bf:d7:04:e1:4f:5c:2e:d9:1e:a2:ef:d4:e5:8f:
19:db:8d:b9:80:b6:c5:e3:97:b6:f6:01:e6:61:11:82:cd:8b:
1a:58:2a:73:68:8b:ec:06:91:7c:04:12:5e:49:42:02:3a:aa:
7c:b1:bf:d8:f8:91:b7:1f:ac:a3:20:ff:9c:74:ef:77:3d:c4:
1b:79:97:03:32:01:46:b7:55:06:b7:0f:1a:93:b4:cf:8f:a4:
b5:35:a5:33:a2:2c:34:08:21:e8:4f:a0:4a:80:b3:f6:38:05:
67:fb:b6:3f:0d:11:b2:d4:e7:6c:39:0a:28:1f:41:28:e6:60:
73:94:7c:b7:0e:b4:67:ae:95:ae:0c:0f:0e:21:b1:f5:ee:90:
79:2f:53:bd:d8:bd:26:12:74:f7:5b:07:8c:29:1e:bb:67:56:
6c:39:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:26 2024 by rpki-client on console-fra.rpki-client.org