Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/uF1kUYHWdnxiXzHP8ZWUJnh4XBw.roa
File: uF1kUYHWdnxiXzHP8ZWUJnh4XBw.roa (raw, json)
Hash identifier: 509kg/b9XvkIDM0Fr29zKTXtAaz0NwkMW+X34SQgUcA=
Subject key identifier: B8:5D:64:51:81:D6:76:7C:62:5F:31:CF:F1:95:94:26:78:78:5C:1C
Certificate issuer: /CN=8dfea977db09f04a44399348e7b144f916b27f3f
Certificate serial: 0190C677
Authority key identifier: 8D:FE:A9:77:DB:09:F0:4A:44:39:93:48:E7:B1:44:F9:16:B2:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf6pd9sJ8EpEOZNI57FE-Rayfz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/uF1kUYHWdnxiXzHP8ZWUJnh4XBw.roa
Signing time: Wed 11 May 2022 21:51:02 +0000
ROA not before: Wed 11 May 2022 21:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26265207 (0x190c677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dfea977db09f04a44399348e7b144f916b27f3f
Validity
Not Before: May 11 21:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b85d645181d6767c625f31cff195942678785c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:6c:78:f3:6f:22:a5:8a:92:6b:df:ec:04:
fa:f8:ca:fa:1a:de:ed:5a:90:65:7c:f8:23:a2:8b:
e4:9b:38:07:5a:da:95:38:35:65:85:aa:e6:be:32:
56:8b:55:9c:ab:ca:68:36:0a:a0:99:31:af:d1:04:
d4:51:87:3d:9a:4a:a9:bd:08:a7:b9:2c:dd:68:16:
a1:aa:24:ee:e7:63:6a:e8:f5:d9:ff:b6:7f:01:38:
da:0c:91:e8:03:26:39:a2:6a:9f:5b:7d:e8:b9:d4:
37:23:fc:27:3a:82:76:a3:10:e9:c5:77:d6:8e:f2:
ae:10:b8:9a:41:a9:88:18:bf:a9:4f:9f:3b:8d:41:
52:90:81:d4:92:6c:94:e3:70:56:34:a2:6e:f1:87:
f5:d2:4a:42:f5:c9:87:e5:a2:7d:37:69:b5:48:8b:
67:29:ea:e8:d7:71:0a:af:14:98:39:3d:f6:8e:31:
6a:e4:10:0f:37:d4:86:6d:5f:fa:fc:66:e7:2d:f6:
f2:dc:1e:f8:5c:1a:f0:17:9f:1f:ca:3e:19:d7:09:
81:de:0d:ea:85:7a:60:83:c2:36:1f:ca:ce:91:83:
d7:dc:45:0d:74:f4:09:4a:58:a1:20:d2:49:2c:3e:
e5:e6:36:e4:9d:12:83:66:bf:2c:56:3c:f0:a0:a8:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:64:51:81:D6:76:7C:62:5F:31:CF:F1:95:94:26:78:78:5C:1C
X509v3 Authority Key Identifier:
keyid:8D:FE:A9:77:DB:09:F0:4A:44:39:93:48:E7:B1:44:F9:16:B2:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf6pd9sJ8EpEOZNI57FE-Rayfz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/uF1kUYHWdnxiXzHP8ZWUJnh4XBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e3d4-a717-4c0b-8f77-6d6d11114603/1/jf6pd9sJ8EpEOZNI57FE-Rayfz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.143.0/24
Signature Algorithm: sha256WithRSAEncryption
48:41:6f:93:da:86:bc:ee:05:e3:57:f1:6c:e5:7d:68:cf:61:
86:bc:e7:f5:39:74:49:78:90:7d:7e:78:37:1b:0b:42:0d:69:
bd:b9:4b:44:49:bb:9a:ba:4e:21:e2:87:f3:30:01:30:ab:e9:
a3:b9:41:f9:4a:60:46:c9:de:81:bb:b5:76:a2:aa:8f:49:13:
3a:9e:81:2c:c6:b0:e5:37:c0:18:cc:17:33:51:5b:78:64:b3:
94:df:3c:f5:f1:5b:f9:9c:7e:f0:be:be:48:04:a5:0c:eb:8f:
2e:ab:ff:6d:87:04:c6:f4:09:79:2d:f3:0c:e5:51:42:06:d1:
e1:c8:f5:af:64:25:a5:c8:46:e7:59:f0:9f:2c:63:1a:53:7d:
7f:a3:da:50:d4:af:da:38:ab:90:a9:a5:ac:9b:e5:97:9b:c8:
cc:78:fd:71:7f:84:57:af:a1:11:f7:1d:d3:63:f8:e4:a4:09:
2a:bb:09:d7:7b:e5:44:dd:84:87:d8:32:d8:0c:23:33:0b:fa:
16:d3:2b:32:bb:ed:ec:38:be:ad:7e:91:6d:20:4a:c8:be:51:
29:b4:26:ff:98:54:b1:10:7c:f1:5c:71:73:4b:d8:74:4c:e0:
e9:56:7b:0e:fb:d0:9c:89:f1:e1:e2:91:f6:59:fd:9c:f5:48:
5a:25:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org