Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/GEtd5RVM4VxskncvfS23xD4JCSw.roa
File: GEtd5RVM4VxskncvfS23xD4JCSw.roa (raw, json)
Hash identifier: tE526xfQuPigUqUsbxKV2a2ycUzUiv9+b/Wjgw5p+s0=
Subject key identifier: 18:4B:5D:E5:15:4C:E1:5C:6C:92:77:2F:7D:2D:B7:C4:3E:09:09:2C
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 01869C2D1507F514F422A5BEE58EC83455A7
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/GEtd5RVM4VxskncvfS23xD4JCSw.roa
Signing time: Wed 01 Mar 2023 07:57:25 +0000
ROA not before: Wed 01 Mar 2023 07:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:2d:15:07:f5:14:f4:22:a5:be:e5:8e:c8:34:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Mar 1 07:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=184b5de5154ce15c6c92772f7d2db7c43e09092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:70:c0:7f:3c:7b:05:a8:33:30:94:89:a5:
dc:b5:f3:f6:15:52:91:7d:79:08:ca:bf:24:26:68:
7b:58:20:b3:3f:d1:6f:c9:31:e1:94:92:a1:bf:07:
2a:79:ae:4f:4a:bd:0a:be:88:3f:1a:70:3a:09:69:
67:62:7c:0b:01:c4:1a:f0:f5:29:b9:32:37:ac:76:
df:8a:16:0e:4a:e9:40:a6:43:5e:85:27:33:f6:9b:
ef:8a:b0:44:16:1a:a4:db:2b:b2:32:f6:96:f5:59:
54:5f:78:f0:7e:fc:61:3f:e7:82:7e:22:30:7b:65:
07:dd:c6:4d:14:f8:97:36:da:0c:7b:72:98:7e:4f:
0b:ed:86:d9:99:09:64:8d:bf:77:8c:00:94:a9:aa:
90:6d:2c:5c:ea:05:20:eb:49:bf:4f:e2:68:62:b0:
87:d0:b8:df:69:d4:e6:bb:3f:ee:32:53:54:db:5b:
78:64:e4:a5:4b:ed:d0:31:65:1c:3a:a7:cc:82:c8:
07:2a:84:42:85:f7:d8:38:db:7f:b7:60:e0:0e:c2:
67:d0:2e:d4:d7:d9:34:13:09:76:43:fb:e4:ad:e6:
22:f0:43:63:45:92:65:06:89:34:ef:d2:d9:09:ac:
56:b7:fc:ca:4c:93:76:d9:65:d0:a0:20:6e:ec:a0:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:5D:E5:15:4C:E1:5C:6C:92:77:2F:7D:2D:B7:C4:3E:09:09:2C
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/GEtd5RVM4VxskncvfS23xD4JCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7a:ec:dd:25:03:77:bf:0a:ab:3d:2a:b2:b2:67:2c:ae:ea:
c2:df:fe:f4:85:4d:f1:b2:64:64:11:2b:1c:ea:45:ff:8d:ab:
73:d4:dc:eb:78:a0:38:30:fe:1d:07:4b:73:68:cf:ae:cc:e2:
53:67:15:f1:4f:a1:42:bd:b8:88:ed:32:1e:54:3c:cc:da:11:
89:c7:d8:af:48:ab:5a:b5:ad:b6:02:24:32:6d:9b:96:b1:dc:
0a:70:69:e9:59:53:92:9c:77:29:33:ca:5b:27:4d:cf:f1:fa:
a5:8f:9e:14:88:7f:76:ac:35:30:fc:2f:92:1c:8c:28:56:d1:
9e:9d:89:e1:1c:3a:30:0d:24:40:98:74:5c:79:66:32:b4:2b:
72:7e:cc:d2:8a:bf:9b:d3:88:95:89:05:a4:89:97:64:5f:61:
81:05:b1:62:17:1e:3e:40:bf:a5:8c:dd:96:f6:38:26:d0:07:
8d:5b:47:f0:a8:2c:60:2d:cb:71:e9:f4:da:c1:64:6f:ba:cb:
70:a3:91:07:33:cb:60:97:b9:9a:27:8d:6d:6c:3d:d6:7f:25:
d5:8c:12:e4:cf:c5:02:9d:bd:f0:96:c2:3f:85:8d:3f:88:21:
14:4b:e0:63:5d:db:0f:89:30:92:8e:08:fb:61:31:81:ed:96:
ba:72:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:26 2024 by rpki-client on console-fra.rpki-client.org