Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/66MufVyiZO0Y1ORWfXnF7ObECeM.roa
File: 66MufVyiZO0Y1ORWfXnF7ObECeM.roa (raw, json)
Hash identifier: cBb1ROpIMX665UAaU9dd40GeZTbMLFbMKcqf1UwMIhs=
Subject key identifier: EB:A3:2E:7D:5C:A2:64:ED:18:D4:E4:56:7D:79:C5:EC:E6:C4:09:E3
Certificate issuer: /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial: 5FAC23
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/66MufVyiZO0Y1ORWfXnF7ObECeM.roa
Signing time: Sat 01 Jan 2022 00:51:29 +0000
ROA not before: Sat 01 Jan 2022 00:51:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6269987 (0x5fac23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
Validity
Not Before: Jan 1 00:51:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba32e7d5ca264ed18d4e4567d79c5ece6c409e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:3e:fd:5a:81:50:18:ef:4c:b2:c2:58:97:
bc:6a:41:9c:4a:b9:ca:85:44:8e:14:2f:7f:e0:ac:
b0:b8:01:26:b3:e3:93:88:77:5d:64:47:0a:1f:a9:
c7:62:01:66:c8:00:39:76:86:6c:15:3a:36:5c:b5:
a1:93:b7:70:e7:45:29:f5:1e:b0:21:45:57:cb:f3:
fa:4b:b8:4a:f4:f0:84:f2:08:c5:06:c2:ad:bf:eb:
d7:31:0f:ad:01:a8:3a:9f:53:5a:cc:bf:5a:db:63:
01:b6:4b:68:f4:13:80:40:91:77:d9:15:8f:a1:ad:
bf:96:4f:eb:63:cf:87:4b:58:43:e8:80:0c:d9:1f:
94:d3:a7:99:48:a4:18:58:8b:c4:be:c5:e1:94:a7:
7d:e2:62:8c:a7:e0:05:51:f6:b0:a4:84:1e:56:72:
85:ae:4a:26:f3:52:92:22:f4:3e:b3:97:bc:86:92:
86:e2:f8:aa:04:f7:d6:73:99:a1:85:33:db:a5:58:
f9:f4:9f:63:e8:a2:2d:7e:85:1c:c7:c5:43:ae:df:
9f:76:ac:c4:58:ad:e4:58:96:e2:84:1a:3c:61:8d:
34:85:59:1d:ef:65:12:ca:6b:74:19:bf:0a:7c:25:
72:6c:55:9c:16:77:c7:8b:f0:bb:84:cc:4d:30:e6:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:2E:7D:5C:A2:64:ED:18:D4:E4:56:7D:79:C5:EC:E6:C4:09:E3
X509v3 Authority Key Identifier:
keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/66MufVyiZO0Y1ORWfXnF7ObECeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fe:6a:3e:f5:84:9f:d8:9d:82:fb:9a:93:dc:a5:24:e7:76:
bd:d2:e5:53:53:4b:83:9a:a7:90:fa:ef:d6:c9:96:d8:e3:d0:
d0:55:98:d5:4a:5f:e7:69:12:77:dd:34:93:cf:61:93:5f:d0:
3e:01:e6:5c:86:1d:b9:a1:b9:e7:25:e8:64:eb:9a:38:c3:a8:
9b:9d:d7:d3:46:d4:7e:f6:05:0c:8f:be:8c:e5:f0:1e:7b:79:
a8:99:3e:6a:ae:de:80:60:3d:92:dc:ad:bd:bd:60:03:ab:57:
5d:da:13:3d:44:75:a4:e8:68:eb:e0:5b:48:d0:51:5c:95:a3:
b1:24:d2:83:e1:43:77:e3:23:6d:b1:4c:17:1a:93:b1:e3:4f:
0e:9c:65:8c:3c:e4:85:f3:ff:ca:99:dc:8f:43:c4:0e:61:a5:
83:81:60:aa:f6:46:f6:9e:34:1f:1b:97:98:9c:28:d2:ad:32:
66:97:89:71:7f:74:28:73:a7:6a:bd:09:32:34:54:11:89:c2:
7f:75:db:29:3b:72:2f:2b:76:1e:b2:f3:27:3a:9e:6a:e9:3e:
28:d0:d6:44:95:e3:65:77:b6:cc:1e:3d:66:f7:fb:49:50:2e:
fe:e7:f3:17:28:2a:e4:5b:db:32:41:05:3a:00:32:58:bb:19:
35:25:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org