Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/GKdLqLZyfAe8I0JHhzXekcN6SUY.roa
File: GKdLqLZyfAe8I0JHhzXekcN6SUY.roa (raw, json)
Hash identifier: XLBc6nWGEA2izMME8cb5m28eTotWzaV7m15xzaDT6gw=
Subject key identifier: 18:A7:4B:A8:B6:72:7C:07:BC:23:42:47:87:35:DE:91:C3:7A:49:46
Certificate issuer: /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial: 0184A58B443B01B519CD83F736CCDB2C5453
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/GKdLqLZyfAe8I0JHhzXekcN6SUY.roa
Signing time: Wed 23 Nov 2022 17:31:18 +0000
ROA not before: Wed 23 Nov 2022 17:31:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55154
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:8b:44:3b:01:b5:19:cd:83:f7:36:cc:db:2c:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
Validity
Not Before: Nov 23 17:31:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a74ba8b6727c07bc2342478735de91c37a4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:ba:a0:b7:dc:40:c1:5f:18:fd:31:58:68:
46:70:e2:6e:75:d2:76:b8:d0:e0:e2:10:54:15:56:
e2:38:e9:7b:bd:55:a1:03:33:50:71:46:96:09:60:
7b:29:ac:7f:e1:4c:9f:ab:db:6b:7e:7d:bc:56:1b:
d9:6d:ad:06:84:3c:1f:d0:32:ff:2b:eb:1d:c7:3c:
74:79:cb:cf:95:57:38:6e:4f:c7:0c:bc:a6:e3:e5:
03:48:71:f4:58:1f:1d:e3:64:55:09:35:7b:8d:64:
f9:0b:e8:a1:af:36:6e:40:17:b6:27:39:ba:73:81:
0c:3a:ac:f2:f8:4a:96:62:e9:b5:f8:52:16:e4:38:
78:aa:33:79:53:78:fe:85:98:4a:28:9b:3e:da:4e:
4e:1a:58:98:ab:01:80:9a:fe:de:a0:f4:31:1e:48:
12:26:8e:83:d0:c2:a2:47:a7:03:a5:29:d9:11:2c:
cf:01:b7:1c:ec:80:79:95:dc:0e:a8:f7:f8:d4:7a:
b8:7b:52:f7:8b:9e:15:ef:d1:93:2e:c0:4f:8a:47:
45:1c:ba:90:cb:18:a2:df:5e:ce:59:c4:f2:29:a7:
70:7e:c3:c2:91:e5:7f:96:1a:2e:f3:62:ff:34:0b:
c2:a0:3c:05:1e:7a:e7:2b:39:c4:0d:79:10:1c:24:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:4B:A8:B6:72:7C:07:BC:23:42:47:87:35:DE:91:C3:7A:49:46
X509v3 Authority Key Identifier:
keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/GKdLqLZyfAe8I0JHhzXekcN6SUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:bf:db:cd:d6:33:fb:05:17:8c:0b:3b:98:04:51:e8:e8:
02:9f:75:d2:35:63:29:1b:c9:26:95:3b:03:56:a8:af:17:05:
a4:3f:23:41:0a:6f:ca:f8:80:fd:fe:58:70:0b:1b:60:34:6e:
cd:7b:91:53:26:42:bf:bd:9d:0e:d1:36:2e:f3:e0:ea:7c:a8:
7d:e1:e1:9d:23:2d:be:66:4f:8e:31:fb:08:d1:f4:7b:71:de:
3b:59:7f:bd:dc:66:87:1d:0f:a4:85:29:73:be:60:cc:87:ce:
b2:f0:69:dd:b7:76:1d:0d:ee:06:18:46:9e:e6:2f:c7:9a:c1:
62:41:c3:6e:d2:ea:80:1c:3e:77:bd:71:ed:05:13:d6:e0:b2:
e2:b5:49:7d:7c:66:86:dc:8a:7c:f4:21:e5:f2:f8:9a:bf:a6:
0c:b8:75:6b:2d:d7:3b:ac:66:5e:ad:ae:ca:ba:09:4d:7e:a2:
bf:cf:43:14:62:37:16:2c:d4:a5:87:f8:54:7a:a1:33:43:be:
6e:6b:21:fd:2d:18:f2:e8:40:a1:a1:48:db:4b:02:a5:1f:bc:
9c:09:2c:b2:00:12:1b:c5:f3:b1:73:e8:be:fc:5c:b6:70:07:
4c:c7:5c:11:a4:db:e5:e1:cd:bb:b6:fc:23:80:b9:e3:13:46:
d3:0f:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org