Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/uSFKef32zcM58nIlYEWF8-GE424.roa
File: uSFKef32zcM58nIlYEWF8-GE424.roa (raw, json)
Hash identifier: TYaFesAwfUs3smgxx4bui5faQRZzxi6Xi8ZHnCtffJs=
Subject key identifier: B9:21:4A:79:FD:F6:CD:C3:39:F2:72:25:60:45:85:F3:E1:84:E3:6E
Certificate issuer: /CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Certificate serial: 637EEC
Authority key identifier: EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/uSFKef32zcM58nIlYEWF8-GE424.roa
Signing time: Sat 01 Jan 2022 00:51:28 +0000
ROA not before: Sat 01 Jan 2022 00:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57878
IP address blocks: 146.19.243.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6520556 (0x637eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Validity
Not Before: Jan 1 00:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9214a79fdf6cdc339f27225604585f3e184e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:3d:5b:93:99:c4:29:f2:d2:d0:2a:5b:8f:
6a:81:27:37:15:f7:a5:8d:da:33:6b:57:d3:51:29:
25:96:10:f4:54:07:42:56:84:9a:15:16:c3:86:bf:
ee:02:70:24:0e:42:f3:42:34:94:8c:7c:74:f6:ad:
51:ec:7c:a9:d2:cf:26:4f:28:ac:52:a2:4d:04:a9:
2b:f3:73:76:40:9e:e4:05:29:e8:de:b0:aa:40:d0:
09:8c:47:f8:b1:e5:20:83:ad:ae:2c:8b:c9:f3:4d:
81:6c:80:e2:ac:7e:50:d5:3d:c1:2c:bc:36:6a:22:
a8:cc:7d:71:31:ca:e7:37:f4:cd:d4:75:bf:1f:9c:
95:86:63:86:f7:9a:e4:8a:aa:8b:48:e2:13:ef:31:
e0:d3:58:23:63:eb:fb:d4:ac:f6:55:ea:51:29:21:
c9:de:61:d4:cf:c8:e2:04:36:a2:d8:56:63:b3:c5:
9d:f0:1c:32:3d:6c:59:68:59:71:61:3e:ee:5b:12:
b2:0b:95:bb:7b:4a:b5:ce:fe:1f:2f:89:23:f7:70:
74:83:58:2b:87:8f:2f:6a:cb:5a:fe:25:9f:b6:c0:
9b:e3:ac:56:6e:27:94:08:6f:e8:8d:dc:0e:18:6b:
64:39:08:72:7a:dd:cd:76:58:55:f2:50:b3:bf:ff:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:4A:79:FD:F6:CD:C3:39:F2:72:25:60:45:85:F3:E1:84:E3:6E
X509v3 Authority Key Identifier:
keyid:EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/uSFKef32zcM58nIlYEWF8-GE424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:60:16:e7:72:bc:08:89:dd:ea:aa:c1:5e:d6:cb:f7:25:1e:
07:54:04:d1:17:ce:f4:13:c5:8b:e4:12:75:35:b4:93:17:e6:
d4:af:43:b0:38:b7:19:28:e5:56:9a:22:bd:78:2c:38:a6:0a:
35:f6:3d:54:d0:d7:cc:1f:fc:dc:c8:72:39:59:4b:77:83:8c:
9a:36:7d:bb:82:1c:eb:3a:45:69:83:11:09:a2:80:d7:16:81:
1c:a8:6c:12:47:fe:c3:54:4b:81:a5:33:d2:6d:b3:05:6e:c1:
52:6b:72:f9:6e:1b:bf:0e:9f:87:a7:55:76:85:10:e5:c7:24:
ca:e2:cc:9b:ec:b7:e3:5d:96:45:e5:2d:b2:3e:c0:47:92:89:
29:7d:de:f1:6a:25:33:2d:29:3d:e9:de:3f:e6:57:2a:b1:a7:
12:63:99:16:16:f8:28:f3:7d:1f:66:0f:a9:54:cc:22:3f:8f:
59:0d:9e:eb:a4:6f:13:5c:87:d0:34:8f:81:1f:d7:8d:c4:8a:
e6:7a:92:06:5f:9f:6d:d8:2f:48:be:e9:ef:c9:c7:eb:95:4d:
c2:4c:e5:7c:96:23:f9:f1:94:97:07:d2:1f:40:02:84:0c:c2:
6e:69:6b:ec:7c:13:ae:15:05:f0:08:3d:75:9b:7f:9e:0e:24:
f3:ff:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org