Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/Y61tbNG_KGdD3aOtNFFdYMrq60Q.roa
File: Y61tbNG_KGdD3aOtNFFdYMrq60Q.roa (raw, json)
Hash identifier: KiHN/mq53LAnlJMpf/L+kahNs/f9R6oQnKEjNhqHIwI=
Subject key identifier: 63:AD:6D:6C:D1:BF:28:67:43:DD:A3:AD:34:51:5D:60:CA:EA:EB:44
Certificate issuer: /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial: 0185BB8B8B3302621836F58BA04B6FE3013C
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/Y61tbNG_KGdD3aOtNFFdYMrq60Q.roa
Signing time: Mon 16 Jan 2023 17:06:02 +0000
ROA not before: Mon 16 Jan 2023 17:06:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:8b:8b:33:02:62:18:36:f5:8b:a0:4b:6f:e3:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
Validity
Not Before: Jan 16 17:06:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ad6d6cd1bf286743dda3ad34515d60caeaeb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:e8:3e:b7:ec:d7:4a:f2:85:23:2e:cd:db:
63:2c:fc:eb:71:1c:f4:b9:b9:83:f0:9b:f0:c9:8d:
bb:bb:f3:f7:c4:12:77:ea:19:78:00:8f:ca:00:f4:
7b:eb:c9:bc:8e:3c:36:88:17:52:75:c9:d9:15:a7:
b0:99:7b:c7:18:6e:c4:da:94:89:bd:7e:a5:02:05:
03:bf:17:df:0b:7e:52:70:5a:30:5e:94:4f:6a:0e:
f7:c6:cb:3b:82:dd:89:c7:e1:1e:d9:b4:90:fe:f0:
c8:5c:78:e1:51:64:51:fe:6d:74:c3:67:e1:87:ac:
09:32:c2:e6:8b:90:23:bf:5a:90:92:ae:c6:7e:da:
a9:f6:c8:04:5a:34:e1:c7:e6:07:31:03:72:9d:26:
ba:93:f5:48:b8:fb:86:e3:93:3e:65:43:71:aa:c2:
24:fd:ff:eb:ac:c5:9a:e0:f7:08:79:ff:1c:a2:a9:
b1:21:16:9c:57:e4:26:37:84:35:1c:6e:18:6c:8f:
bf:77:2f:2e:25:e0:43:b8:5d:b4:1e:95:37:64:1c:
77:88:6a:3b:cb:a7:3f:7d:4d:16:17:51:a8:02:1a:
f9:88:e7:1d:cf:0f:ec:e6:c8:f6:11:2c:5c:72:71:
98:49:e9:d5:0c:ae:14:47:b9:e7:74:71:6f:6a:8d:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:6D:6C:D1:BF:28:67:43:DD:A3:AD:34:51:5D:60:CA:EA:EB:44
X509v3 Authority Key Identifier:
keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/Y61tbNG_KGdD3aOtNFFdYMrq60Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e4:b4:e6:cb:28:06:e6:3c:7e:1f:a8:f8:b3:22:24:5c:b0:
a0:b7:fb:1a:6e:48:84:e3:71:e9:88:0e:ad:48:cc:ed:41:e8:
1f:10:fe:c6:2c:a1:be:87:9a:47:35:70:43:e6:38:bf:24:74:
72:51:64:43:eb:00:b9:5b:66:48:9c:4a:7d:9e:e6:dd:8b:99:
da:eb:2a:98:d0:b9:90:41:d9:cb:d8:63:d3:a0:4a:a5:32:b6:
04:65:6f:65:f9:7d:44:36:eb:4f:3b:e1:82:d4:3f:69:17:92:
6b:77:bb:c8:ad:5c:5c:87:20:cc:a4:20:b6:4a:57:f6:96:7b:
88:00:2d:1b:5e:8c:e1:56:cb:90:5e:93:e1:c5:07:e0:d0:65:
00:93:f5:0e:57:1e:f1:61:fa:1a:1b:9d:57:99:82:d8:f7:d9:
19:5a:15:9b:3e:75:17:4f:10:c1:ad:1f:4f:c5:ff:54:76:c0:
21:73:12:4d:f8:3b:fd:14:35:6b:8a:80:02:92:5b:03:f3:78:
6b:f4:ca:4d:a1:19:03:2b:23:3f:f7:38:34:c9:b2:54:4b:48:
d0:2a:6e:82:79:db:70:de:13:5b:bc:aa:ef:0a:ed:21:ed:b3:
d7:88:ed:36:e6:47:1a:8c:11:fd:0b:e5:b8:00:b8:a3:02:9a:
0e:4f:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org