Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1pl2XwN3qFzpVX5-hhUZKJ68I1o.roa
File: 1pl2XwN3qFzpVX5-hhUZKJ68I1o.roa (raw, json)
Hash identifier: ynyOBOaAApYVasvmSg26sd0KmPomjNC0vdm3CDNNZDI=
Subject key identifier: D6:99:76:5F:03:77:A8:5C:E9:55:7E:7E:86:15:19:28:9E:BC:23:5A
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 018779E372878897DE4070295A60B0576C64
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1pl2XwN3qFzpVX5-hhUZKJ68I1o.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:72:87:88:97:de:40:70:29:5a:60:b0:57:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d699765f0377a85ce9557e7e861519289ebc235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:67:0c:8d:a4:ad:7e:1c:d6:15:1c:a8:a7:
3e:17:1b:b3:be:14:a6:68:be:dd:d3:cf:9b:19:08:
58:d9:6f:4d:b1:97:37:65:39:f0:16:5c:21:c2:66:
e0:f8:38:cb:de:85:77:bb:75:bd:d6:46:37:ab:e3:
6a:00:67:71:7e:97:1d:68:ed:e9:c0:28:c2:65:08:
96:77:dd:74:b5:b0:6c:2f:01:bd:51:47:40:33:c8:
2d:7e:dc:96:fc:bc:79:db:19:52:da:00:37:af:54:
90:29:94:6f:50:79:d6:19:1c:2a:6f:24:20:53:45:
2e:53:03:27:46:79:71:bc:06:e2:65:b6:9e:b1:cb:
ce:11:22:6e:29:5c:a8:37:d8:56:a4:88:7b:7c:a3:
bb:7b:e0:b1:57:8f:43:e6:54:e3:11:d7:a8:7a:ab:
5d:ab:c7:72:e1:46:4b:a6:65:b6:1c:ca:46:7a:f1:
8e:35:ae:88:92:92:5d:de:97:5f:fe:94:f0:58:7d:
51:d1:55:79:4d:9a:3c:d7:fc:0a:b0:9f:88:28:bf:
82:cf:89:af:22:67:6f:08:f0:eb:16:b0:a4:93:83:
68:4e:96:ca:6b:0d:9f:c6:a1:a5:20:3d:9d:f9:a7:
43:56:16:32:bb:aa:d3:ac:0a:c4:fe:0e:02:ef:7f:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:76:5F:03:77:A8:5C:E9:55:7E:7E:86:15:19:28:9E:BC:23:5A
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/1pl2XwN3qFzpVX5-hhUZKJ68I1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fb:58:e4:53:7f:c4:1f:9b:4f:25:15:0e:a4:b2:7d:79:01:
eb:1d:45:14:94:34:3d:5d:c1:bd:1a:6e:27:e8:10:6e:97:50:
68:c5:e2:a3:d7:8e:f1:6d:cd:23:8b:01:53:da:3c:1c:8d:8c:
50:62:fd:dd:fb:6a:4b:b5:11:01:4d:09:a1:5f:ff:cd:19:dc:
6c:91:2d:0b:b8:7d:44:94:16:33:13:f5:b8:d0:4a:45:07:b7:
5e:4e:55:c8:b3:36:80:98:1a:ff:86:eb:99:2c:7e:39:e7:6d:
68:5c:57:fa:88:29:0f:66:06:30:15:e3:19:fe:90:7a:f9:9b:
f0:13:59:96:04:a6:60:f3:b6:62:17:e8:2d:81:65:ef:8d:a0:
43:43:9b:86:10:f0:27:6e:80:b8:48:d6:40:14:74:d4:af:ad:
71:32:f6:d5:05:e3:24:bb:18:0a:6b:87:b0:68:14:07:9e:47:
c6:69:19:2a:a0:5d:48:e9:1f:0f:76:6e:4c:48:7a:ca:f2:62:
1a:ef:03:3f:b7:5e:fa:b7:b6:6d:e9:c7:e3:7a:1f:a6:87:c2:
75:7e:b3:10:0d:6e:6e:18:ae:a0:21:76:ec:c1:25:49:a6:2d:
91:be:82:c3:11:1b:4c:a5:c8:c9:da:ef:54:a8:32:9e:1d:6d:
0c:17:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org