Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/Gmw_4ziW_1u-PEvZPWV0YR_lwe0.roa
File: Gmw_4ziW_1u-PEvZPWV0YR_lwe0.roa (raw, json)
Hash identifier: UCn+NOuRHKhXaa0gSFVfL/3e7NQBpFVZ4zZ42aRdQQU=
Subject key identifier: 1A:6C:3F:E3:38:96:FF:5B:BE:3C:4B:D9:3D:65:74:61:1F:E5:C1:ED
Certificate issuer: /CN=1cf89903801729fc1ed35372a074b35cad184ddf
Certificate serial: 0185708CA9D6AA1D4E5A8E36BF14371FEEED
Authority key identifier: 1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPiZA4AXKfwe01NyoHSzXK0YTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/Gmw_4ziW_1u-PEvZPWV0YR_lwe0.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 146.19.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a9:d6:aa:1d:4e:5a:8e:36:bf:14:37:1f:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf89903801729fc1ed35372a074b35cad184ddf
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a6c3fe33896ff5bbe3c4bd93d6574611fe5c1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:9d:9f:ee:58:04:19:a8:31:26:e0:ca:d2:
f4:74:ea:0a:cb:b8:26:bb:fc:86:82:c7:06:e1:98:
9c:18:65:b1:3e:3d:a5:77:7d:c9:4a:0a:f3:18:80:
84:47:f9:71:29:86:14:0a:f6:79:fc:8b:32:d5:43:
e3:04:30:16:24:8c:2f:e1:a2:11:96:2e:be:b4:bd:
f1:28:8d:c0:ca:fe:00:1c:b3:44:6d:59:44:1d:9d:
29:9b:70:14:d0:fb:ff:a9:ec:69:6b:f5:7e:b6:66:
01:75:29:f6:29:dd:3f:1e:07:15:ff:80:3f:2b:30:
06:76:53:fc:4d:3b:8b:06:f0:40:e0:3d:32:87:ce:
d8:78:3e:2e:16:c8:cf:ce:7d:7e:71:0f:e6:6e:55:
4b:11:e3:6b:30:40:a6:98:37:af:a6:96:37:2c:34:
f0:f6:57:99:ee:ec:e0:8c:c6:b6:46:24:49:2f:e4:
d5:05:ba:5c:41:16:09:17:85:77:00:2a:9d:03:f6:
af:23:7a:3c:01:0a:14:88:1e:1a:13:51:1b:24:36:
c2:63:ab:9f:16:4a:7f:b4:63:28:1f:37:8d:65:83:
5c:59:0e:04:66:1d:cf:f6:b7:23:48:3d:f1:c9:ff:
0b:46:00:65:c1:42:10:6c:ba:1f:6a:1b:d3:f7:aa:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:3F:E3:38:96:FF:5B:BE:3C:4B:D9:3D:65:74:61:1F:E5:C1:ED
X509v3 Authority Key Identifier:
keyid:1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPiZA4AXKfwe01NyoHSzXK0YTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/Gmw_4ziW_1u-PEvZPWV0YR_lwe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0a:24:47:74:0d:2d:8f:a3:1b:41:bc:4e:22:53:69:03:ae:
ab:e3:20:af:aa:e0:59:00:c7:8b:17:fd:86:61:bb:7f:b2:a6:
c5:29:77:f6:43:e2:af:e5:cd:2e:35:20:65:19:c7:48:ef:c4:
3e:f6:ff:b7:34:ed:d6:40:9e:5d:41:c5:a7:d4:1d:3e:4e:09:
5a:19:e5:74:58:43:43:f6:53:c2:37:dc:98:62:23:04:a3:f3:
c8:3b:f4:03:36:c6:39:4b:a4:da:b8:77:fa:80:5b:33:d6:90:
53:f2:b4:f6:b3:6d:8e:b4:44:cb:4e:ba:70:a7:fa:dd:7e:d8:
90:1d:2f:f3:8b:51:e2:d6:9c:85:ec:65:ae:f7:db:eb:0a:49:
91:b8:aa:dc:c4:12:4b:af:a6:f4:51:e4:ca:6e:e2:36:eb:b3:
57:3e:0c:1a:b6:3d:06:08:e7:f0:53:bb:28:55:b1:1f:2c:63:
4b:a6:43:67:64:74:5a:ac:f1:0a:fd:06:ec:8d:81:e0:bb:9a:
a5:4c:e8:31:32:7d:67:4f:e9:04:dc:69:8a:ef:3c:e0:99:41:
f4:b4:fe:14:f8:ca:d5:45:53:fd:26:56:ef:0d:29:58:27:79:
c4:2c:3c:a6:3e:d2:c9:24:b4:d1:26:aa:79:7c:4e:4b:4b:d6:
65:3a:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org