Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/E20SlBHsylY14gNpqpwoKLfDLww.roa
File: E20SlBHsylY14gNpqpwoKLfDLww.roa (raw, json)
Hash identifier: n13hVBYj3LjXq7jl1IG8ZprRRNxWcqQdFNy9uMPa/08=
Subject key identifier: 13:6D:12:94:11:EC:CA:56:35:E2:03:69:AA:9C:28:28:B7:C3:2F:0C
Certificate issuer: /CN=bd252aae00fa32588c38662f33582d21d26bef2d
Certificate serial: 01856DD427E0993EAF5C085745A1A5FE0656
Authority key identifier: BD:25:2A:AE:00:FA:32:58:8C:38:66:2F:33:58:2D:21:D2:6B:EF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqrgD6MliMOGYvM1gtIdJr7y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/E20SlBHsylY14gNpqpwoKLfDLww.roa
Signing time: Sun 01 Jan 2023 14:54:58 +0000
ROA not before: Sun 01 Jan 2023 14:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31019
IP address blocks: 146.19.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:27:e0:99:3e:af:5c:08:57:45:a1:a5:fe:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252aae00fa32588c38662f33582d21d26bef2d
Validity
Not Before: Jan 1 14:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136d129411ecca5635e20369aa9c2828b7c32f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:27:29:c3:0e:e2:c9:56:8c:13:1e:06:cb:
7a:74:ab:b2:6d:72:21:3c:e6:c1:db:96:98:56:e2:
ab:56:ff:61:c2:8d:a4:91:66:6e:5e:d1:9f:5c:38:
5d:2c:a2:4d:61:73:5f:c6:2a:85:74:7c:6f:a1:52:
c8:11:4a:fc:b9:b9:89:a7:14:a8:46:06:92:d4:63:
10:e7:f6:4e:80:83:24:72:fb:be:e6:ff:d5:b6:3e:
5f:50:55:20:fc:ab:49:41:aa:75:a0:05:4f:d7:88:
15:f2:2a:99:7a:2c:b4:64:fa:ed:6f:b4:29:ff:8b:
b9:3f:a9:f0:04:98:c3:19:e0:5d:bf:18:01:0a:15:
78:bb:c8:17:b9:2d:6b:de:21:8f:e6:c2:ee:4a:81:
25:35:1f:b9:25:bd:8d:7a:ed:d7:69:a8:87:b6:22:
1f:4d:29:d7:1f:0f:01:2d:fe:fe:84:ab:f4:27:4d:
0c:e4:16:1e:1f:10:40:56:ff:22:05:6c:dc:63:51:
d7:56:d5:e1:24:9e:e1:a2:12:b3:05:c0:eb:14:17:
64:71:e1:ca:1a:8a:01:dc:31:46:a7:75:e6:fe:73:
af:2f:cf:f1:19:7e:46:48:9c:9d:a1:50:5a:ea:78:
53:4f:b5:16:7c:06:a1:ff:23:87:ca:43:e3:bc:45:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:12:94:11:EC:CA:56:35:E2:03:69:AA:9C:28:28:B7:C3:2F:0C
X509v3 Authority Key Identifier:
keyid:BD:25:2A:AE:00:FA:32:58:8C:38:66:2F:33:58:2D:21:D2:6B:EF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqrgD6MliMOGYvM1gtIdJr7y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/E20SlBHsylY14gNpqpwoKLfDLww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/dccdac-c8ce-4e70-a46c-608ca808b920/1/vSUqrgD6MliMOGYvM1gtIdJr7y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:81:2a:bc:ee:80:b8:1d:1d:c1:e2:b6:93:71:c3:c2:4a:66:
a5:a2:1e:4b:c6:42:c0:62:41:93:22:11:3e:68:c2:b7:82:d9:
53:26:82:0e:2f:12:00:55:60:d8:d5:2f:34:07:c2:8d:37:42:
c6:10:ef:6f:4a:4f:f6:1e:8a:5e:92:8f:7e:93:25:30:34:22:
42:13:9b:33:73:7b:c9:25:94:43:e0:e2:c3:51:99:ce:d5:68:
d7:2f:d4:d6:74:b2:2c:a7:39:d9:10:2f:bd:7d:4c:2e:f5:8b:
99:9c:20:06:ee:0d:29:07:dc:0c:a4:62:36:6f:68:46:3c:52:
fa:6e:ed:6a:14:f6:9f:2a:83:8e:3e:31:5d:28:9f:98:3a:e1:
b5:7f:84:68:31:c7:d8:f7:48:bc:40:4f:1a:ea:67:0f:a7:41:
9a:81:cf:1e:4b:57:22:fb:7e:1a:7e:5e:7b:5f:d6:59:82:2e:
2c:42:3f:3d:42:5a:26:c0:01:c1:59:6c:3d:6f:6c:02:51:b0:
4e:cd:50:9f:b2:af:de:03:a1:28:7c:61:9a:9b:2a:22:27:19:
ff:d5:6f:04:f8:6b:d8:35:36:da:5c:c4:bc:a4:02:4a:d6:92:
d2:41:e5:f2:a8:18:54:67:5b:92:a0:3c:9d:7f:16:bc:22:b0:
9c:e3:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:50 2024 by rpki-client on console-ams.rpki-client.org