Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/Ya51nj0xBA2hxxVaW67BBdXMpyQ.roa
File: Ya51nj0xBA2hxxVaW67BBdXMpyQ.roa (raw, json)
Hash identifier: CdYCsszvksp2D8kEWNxWkIVLZdyQMX3aktFDLLpuy4M=
Subject key identifier: 61:AE:75:9E:3D:31:04:0D:A1:C7:15:5A:5B:AE:C1:05:D5:CC:A7:24
Certificate issuer: /CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
Certificate serial: 01841AB17EB9995F19850510143A9CFE0633
Authority key identifier: 17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/Ya51nj0xBA2hxxVaW67BBdXMpyQ.roa
Signing time: Thu 27 Oct 2022 18:25:50 +0000
ROA not before: Thu 27 Oct 2022 18:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34047
IP address blocks: 146.19.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b1:7e:b9:99:5f:19:85:05:10:14:3a:9c:fe:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
Validity
Not Before: Oct 27 18:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61ae759e3d31040da1c7155a5baec105d5cca724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:f6:2c:2e:da:4a:e1:96:ca:38:24:e7:50:
15:ab:ac:4d:e0:ad:c1:46:b8:86:85:92:e5:09:b4:
db:0b:5d:6e:04:9b:41:a8:e1:93:d5:9c:c1:39:7b:
3f:e7:f7:2d:a7:9a:97:5b:b1:cb:58:3b:8c:76:c7:
7a:d4:8b:27:a8:27:a3:3e:52:a3:3d:29:63:21:82:
89:ad:38:35:d0:07:d8:d6:9a:ca:dd:e6:83:55:d5:
35:e2:32:1d:88:37:3b:6a:c9:60:12:a6:85:0d:d6:
01:e8:8d:31:6c:6b:73:53:38:56:48:af:6a:8b:5c:
77:8e:a9:8f:01:6f:33:c5:d6:f8:e2:aa:11:61:0e:
a7:1c:a9:c9:cf:65:32:94:50:7a:4b:4f:72:b5:e1:
11:c8:ff:f7:8e:02:34:0e:55:fb:dd:31:24:69:d5:
15:66:f3:14:7e:08:f4:2d:41:b6:a9:f6:0a:bd:c9:
45:40:da:b9:5d:21:69:14:c9:5f:1e:e4:5c:95:d9:
bb:5e:20:79:eb:5f:cc:94:9c:13:7b:a7:91:cc:6c:
60:6c:02:de:e2:7f:13:c0:bf:c2:d7:90:f9:59:3c:
99:35:a7:30:85:52:d1:89:8e:a8:b5:0b:d9:6a:0c:
bd:91:a2:86:13:67:d7:d6:7e:49:6f:99:02:ed:20:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:75:9E:3D:31:04:0D:A1:C7:15:5A:5B:AE:C1:05:D5:CC:A7:24
X509v3 Authority Key Identifier:
keyid:17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/Ya51nj0xBA2hxxVaW67BBdXMpyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a4:c2:95:75:e1:86:10:77:0a:df:52:8f:75:fa:6d:53:20:
0f:f2:ae:4a:41:94:28:90:65:d7:40:a0:33:41:65:e2:c8:36:
0c:87:70:c7:c0:d0:e3:c0:2d:6b:0f:2f:0e:58:99:1b:e1:11:
43:de:a2:ed:c0:38:33:98:33:25:e4:db:84:9c:22:9b:d2:d7:
cd:72:9c:b5:fc:18:eb:a1:88:e6:71:9d:df:5f:fa:42:fa:bb:
97:32:05:25:b9:3f:bd:67:df:e3:a7:eb:b9:b4:a0:23:40:73:
46:25:cd:d2:6e:ef:4b:74:7f:53:4d:98:54:67:4f:2c:bd:2e:
b9:43:4a:a1:d4:e0:97:9f:70:30:8a:6d:28:be:39:3f:f6:cf:
00:15:f2:c4:4d:71:bf:9f:5f:83:43:35:a6:2f:4c:42:3a:21:
72:ee:f1:05:db:04:dc:20:6a:0e:0c:12:b8:c7:46:05:f3:29:
da:9f:72:17:ae:89:35:24:0a:8e:0f:eb:5a:02:41:92:0a:3f:
26:26:cb:ed:00:f5:49:db:e5:1d:8c:02:80:f2:89:eb:24:5d:
08:27:e4:0e:28:32:bc:ec:93:9a:e3:e2:a7:f3:79:f7:09:87:
c1:d9:19:f6:e7:49:d9:a1:9e:4a:7a:a5:bf:a0:91:ba:3b:07:
21:97:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:46 2024 by rpki-client on console-ams.rpki-client.org