Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/LqvaXzAKlMg9f9Z2K3wYbBZr1Js.roa
File: LqvaXzAKlMg9f9Z2K3wYbBZr1Js.roa (raw, json)
Hash identifier: ynBu8gbr0T0D/NSMIbDHLURQVDyAtFMdDuUfoM9BdrA=
Subject key identifier: 2E:AB:DA:5F:30:0A:94:C8:3D:7F:D6:76:2B:7C:18:6C:16:6B:D4:9B
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 01869C2C2B346A9A95397B0E09A4BCEED7AF
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/LqvaXzAKlMg9f9Z2K3wYbBZr1Js.roa
Signing time: Wed 01 Mar 2023 07:56:25 +0000
ROA not before: Wed 01 Mar 2023 07:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1992
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:2c:2b:34:6a:9a:95:39:7b:0e:09:a4:bc:ee:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Mar 1 07:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eabda5f300a94c83d7fd6762b7c186c166bd49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:9f:fb:54:46:68:da:8a:37:f1:32:92:38:
7d:b3:f4:8c:6e:59:79:e1:42:02:ab:0b:87:07:66:
30:a0:c4:d6:9b:c7:da:fb:3a:44:ac:62:ae:38:f3:
59:df:2f:cb:2e:95:03:09:d7:f0:26:b2:04:87:66:
d1:67:29:ad:6b:ae:1f:6c:54:1c:ba:2e:3d:1e:46:
50:8e:f0:99:77:6c:4c:44:59:a0:e7:cd:e1:1c:d4:
3f:49:8b:e9:6a:e5:df:b8:e7:1c:4e:84:25:1e:4f:
09:af:c1:ec:87:e1:be:17:75:82:c3:69:7f:b8:b0:
c8:26:f9:c0:ad:97:b1:28:8f:2a:6c:6d:0a:5b:6e:
bc:5d:2c:3c:e8:a8:5a:c9:62:90:8d:92:7d:01:4e:
13:51:ce:b2:b1:ef:9c:74:24:d6:07:31:8c:b7:90:
5d:60:87:cb:ce:27:f5:4b:8e:8a:fe:da:dc:dc:41:
23:93:cb:ef:1d:d8:40:36:00:9d:5a:04:d5:5f:1e:
1c:2e:86:c1:ae:55:77:07:ae:4c:f7:41:95:0f:9a:
4a:b2:a4:2e:91:59:f3:4f:01:b1:e9:5a:ad:ab:30:
d5:c5:65:60:9d:dc:55:2b:34:f8:7e:35:f4:92:78:
3b:ad:fc:2c:88:f8:62:5d:bf:04:a6:d3:89:9b:12:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:DA:5F:30:0A:94:C8:3D:7F:D6:76:2B:7C:18:6C:16:6B:D4:9B
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/LqvaXzAKlMg9f9Z2K3wYbBZr1Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
50:11:bb:08:5b:f4:9c:ee:86:7b:f1:ae:00:7f:42:9a:a7:9b:
90:4a:4e:d9:97:bf:dc:43:cd:e4:6f:d2:e0:36:52:80:b2:05:
7d:29:18:cc:c9:12:92:d9:f3:7b:a9:43:a4:e6:dc:5e:a0:7a:
a2:6d:73:b0:bd:dd:53:2c:ab:2c:cf:40:d9:68:fe:ea:6f:23:
5e:86:13:d5:06:3d:1a:b4:f7:76:c2:30:f1:7b:30:af:d3:fd:
4b:61:57:01:18:a7:79:6b:e8:aa:fe:02:8d:9f:86:2a:22:3a:
53:aa:70:1e:89:d6:65:18:3e:8a:25:29:60:01:8b:60:87:09:
5a:dc:40:b3:85:55:43:2a:7e:fc:3e:fc:81:28:ee:1e:63:27:
03:17:59:4d:ea:53:fc:f8:50:33:56:dd:16:51:69:62:e1:0b:
a3:a4:c7:3f:8f:2d:14:b6:c5:d6:a8:4b:08:b6:7e:d7:9c:04:
53:6e:32:e1:6f:bd:ea:57:06:2c:d8:5e:96:bf:8f:74:90:e5:
4b:7e:47:2c:38:a2:58:bf:ea:27:0d:7e:10:41:fb:fe:63:83:
8b:99:42:eb:d8:7f:eb:1f:a5:54:a7:7d:d8:6d:b1:68:e4:b5:
2d:9b:c5:11:46:f1:e0:21:ac:b8:dc:71:fb:72:40:f4:9d:08:
63:48:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org