Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/__Mv3qkhU4KZiym-3F1c0M82hUc.roa
File: __Mv3qkhU4KZiym-3F1c0M82hUc.roa (raw, json)
Hash identifier: 8spFHrLo73DDtAGz/vyOePPW4hX/+p2g7B4CWPx8K5Q=
Subject key identifier: FF:F3:2F:DE:A9:21:53:82:99:8B:29:BE:DC:5D:5C:D0:CF:36:85:47
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 0186F0F499C0EA8DF4475D432FB8D7AE70DA
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/__Mv3qkhU4KZiym-3F1c0M82hUc.roa
Signing time: Fri 17 Mar 2023 19:03:27 +0000
ROA not before: Fri 17 Mar 2023 19:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:f4:99:c0:ea:8d:f4:47:5d:43:2f:b8:d7:ae:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Mar 17 19:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff32fdea9215382998b29bedc5d5cd0cf368547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:d5:9c:8c:bf:08:bc:87:f8:ef:d2:70:8d:
39:40:30:aa:84:ff:89:c4:0c:d8:bc:5d:2d:32:0f:
bc:83:0a:aa:9a:9a:9b:6c:8a:50:ba:d0:8f:52:73:
0c:46:ff:db:8f:3b:b2:09:54:b9:35:c4:e4:2b:0f:
fb:f6:c6:6d:af:f4:cd:aa:f7:69:90:c7:59:a4:2b:
f8:6b:38:11:f3:57:a9:3d:c5:e3:af:a9:c6:0d:88:
00:2c:58:8d:1b:59:d2:f5:d7:a1:c3:95:3b:bf:4e:
bf:3a:3c:3e:2c:91:58:cd:65:c0:03:ad:a4:84:36:
48:3a:a4:d8:4b:8b:7f:8b:2a:d1:bb:45:8d:08:d3:
73:24:0c:54:ed:fd:fc:bc:e1:de:b8:dd:38:d2:4d:
fd:8e:66:e1:16:92:4e:63:6c:bc:12:4b:c4:5d:90:
53:e2:21:74:f9:85:86:d5:39:a4:a8:46:30:4c:99:
bc:a6:b7:7c:1f:48:fd:53:9d:cd:ce:a5:d6:1f:cf:
5c:22:31:33:4f:16:f4:44:d4:74:64:09:17:eb:f5:
e3:2d:af:86:3d:84:62:68:e2:d3:1c:93:20:23:e2:
e7:86:be:86:6c:8e:ec:27:2b:5e:9f:aa:5d:05:35:
df:02:a2:eb:02:85:71:a7:ad:fe:2d:32:28:79:97:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:2F:DE:A9:21:53:82:99:8B:29:BE:DC:5D:5C:D0:CF:36:85:47
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/__Mv3qkhU4KZiym-3F1c0M82hUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:40:04:4b:a8:c0:b2:12:68:3b:fd:34:3d:ee:28:e2:d0:b2:
e3:e1:8d:e3:47:24:1a:4a:1c:96:22:3d:40:e3:06:a8:6b:eb:
65:bd:90:6f:27:9f:8b:15:63:d6:d3:f7:29:ed:92:21:3d:12:
7c:a6:13:1e:59:ba:df:e0:7c:b2:ef:4e:2a:8b:44:ea:e4:13:
48:25:f7:d7:25:bb:4b:90:76:dc:99:17:59:ad:7c:b3:8b:f6:
33:c3:ca:4e:c1:eb:ad:07:ed:63:99:ab:e0:1f:f1:c3:04:e7:
21:84:c8:4d:43:7c:09:51:9b:7d:e3:6e:05:df:fd:2e:22:c8:
6a:84:6d:e1:0f:71:2e:ce:f6:1c:80:f8:d6:19:5e:11:0f:31:
98:4e:3a:a9:09:37:25:70:5c:9e:9e:96:f0:75:f7:a7:58:1a:
b1:41:01:48:ea:9d:15:3a:88:f6:81:46:69:52:47:1f:ed:0d:
f0:7d:1e:24:9a:d9:07:5c:fc:33:26:2d:bd:bd:49:7b:a7:65:
8c:89:13:8c:07:b2:29:eb:92:4c:65:fa:b1:0c:51:10:cc:6f:
e5:67:c6:20:0e:09:73:26:47:b9:30:c0:8b:b6:84:92:57:39:
8e:42:9e:93:52:8b:a5:fa:de:10:55:5d:c9:fe:0d:9d:54:f0:
8c:45:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org