Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/EhNNKNKhevjeVa-T-eznx3FQYs8.roa
File: EhNNKNKhevjeVa-T-eznx3FQYs8.roa (raw, json)
Hash identifier: a9UcQZ8tYMN2OjClW3AP9kxHregKnaxmZs35OX3FJHY=
Subject key identifier: 12:13:4D:28:D2:A1:7A:F8:DE:55:AF:93:F9:EC:E7:C7:71:50:62:CF
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 0187C68F6F4CD2DB5202AE0731A508CD0DEE
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/EhNNKNKhevjeVa-T-eznx3FQYs8.roa
Signing time: Fri 28 Apr 2023 06:31:41 +0000
ROA not before: Fri 28 Apr 2023 06:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:8f:6f:4c:d2:db:52:02:ae:07:31:a5:08:cd:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Apr 28 06:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12134d28d2a17af8de55af93f9ece7c7715062cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:20:75:07:38:a9:79:b1:e7:3c:6c:3e:ca:
c9:22:84:a6:37:2e:a8:b9:9c:06:a3:12:ed:ff:ab:
6d:c6:a7:7c:86:10:87:41:81:ac:63:f0:72:9e:6b:
02:38:05:68:5a:b1:43:8d:8c:fb:33:35:48:75:a2:
b5:3a:24:d5:c7:41:a7:34:17:b3:ae:3e:f9:72:45:
66:84:7f:fe:02:54:22:9e:b3:ca:fb:52:ac:b4:4f:
f6:45:c2:6d:44:c6:7b:dc:7a:5a:34:d8:95:21:9e:
1a:59:6f:c0:74:8e:16:e3:97:5d:b7:d3:83:da:3b:
18:1f:09:ce:b9:eb:ea:8d:4f:bb:c8:08:6f:63:7b:
de:54:4d:b3:72:4f:81:ec:83:3f:cf:0f:5d:25:9f:
2b:78:40:72:3e:8a:5b:4a:f0:12:46:f0:61:79:b8:
d0:45:33:8f:16:ad:3f:fa:6f:0f:16:ab:6c:e2:14:
ab:ae:22:8d:f0:39:16:6b:6b:47:d7:e5:f2:16:b0:
3e:c2:6e:78:d3:22:34:fd:ab:1d:cc:46:c8:56:b0:
6f:da:b9:be:8f:15:13:dd:79:70:ac:67:46:a4:7f:
3c:64:a3:00:8e:24:74:9e:f1:9d:a5:df:b1:78:ba:
0f:ff:5a:f0:72:8c:f2:93:0b:f0:37:90:f0:9f:55:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:4D:28:D2:A1:7A:F8:DE:55:AF:93:F9:EC:E7:C7:71:50:62:CF
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/EhNNKNKhevjeVa-T-eznx3FQYs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2a:2d:42:1d:c2:97:34:0f:6d:3f:1e:5d:a3:4a:eb:5d:03:
47:65:5d:01:a1:09:1f:13:64:d5:b9:65:9d:af:cd:7a:74:68:
dc:cc:ab:5c:bd:a3:47:49:37:76:d9:0a:e5:c4:ca:76:8d:be:
48:a1:bf:10:c2:b4:b6:99:9a:ab:6a:cd:e6:8c:71:09:fd:77:
0a:99:fb:0c:f4:db:96:61:9e:3e:1b:d7:5d:52:e2:ff:3f:d3:
ca:9d:67:22:80:86:15:72:7a:af:70:b4:11:42:72:b4:3c:7b:
e0:74:d8:d6:12:16:6b:20:cf:9f:f1:89:29:1c:67:fb:75:1d:
f3:e9:a1:97:92:9e:5e:29:8b:4d:e1:ba:a8:63:a6:51:01:f2:
43:4b:6d:79:51:af:13:8a:2c:1a:fe:a3:36:91:f6:51:ac:51:
93:ab:ba:25:20:5d:1f:7b:13:5c:ba:b0:03:ad:8c:19:96:27:
49:fd:17:cf:4b:b7:73:40:ea:cf:2a:c0:7f:3a:11:bc:b5:78:
bd:da:d1:c2:71:f3:1e:bc:96:2f:7c:b6:ea:2a:82:17:67:69:
b6:80:10:a2:50:8d:71:0a:1b:83:88:50:c9:06:ef:b2:e5:bc:
13:57:cc:56:7b:f8:92:98:db:5e:57:10:e8:e1:3c:cd:3f:bb:
e0:31:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:26 2024 by rpki-client on console-fra.rpki-client.org