Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/1-dXaHmNAJylP8Mk6L8FT_b1RfpM.roa
File: 1-dXaHmNAJylP8Mk6L8FT_b1RfpM.roa (raw, json)
Hash identifier: d1Cd+WewTFqrlk6hkY8iPCquUFWz2Rps1B+IUkZziPs=
Subject key identifier: F9:D5:DA:1E:63:40:27:29:4F:F0:C9:3A:2F:C1:53:FD:BD:51:7E:93
Certificate issuer: /CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Certificate serial: 01856F9DD99FE9C1AC25F5C39C570AC67F15
Authority key identifier: 7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/1-dXaHmNAJylP8Mk6L8FT_b1RfpM.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d9:9f:e9:c1:ac:25:f5:c3:9c:57:0a:c6:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9d5da1e634027294ff0c93a2fc153fdbd517e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:9e:36:bd:58:a3:e1:b7:24:3e:90:6e:71:
65:d5:58:bd:44:0c:4c:a2:85:79:ca:9a:49:0b:4c:
a0:8f:c3:42:d0:04:b0:1a:78:fc:f4:96:5e:01:11:
00:22:37:e1:d6:7a:d6:38:84:4f:c9:2a:40:30:2b:
81:64:af:5d:56:4c:6a:7b:c0:cd:56:bc:0a:67:ac:
ba:a1:9e:b3:cc:7c:57:b2:17:f5:8a:44:30:cf:58:
09:00:49:98:c1:20:31:37:69:7a:5c:49:8b:4d:88:
d6:73:4a:b4:e4:b4:87:b9:55:6e:95:2f:59:f6:40:
d6:74:dc:f1:db:86:a3:85:95:00:04:3c:c5:e4:a6:
cb:da:12:30:48:80:61:cf:eb:b3:05:34:c2:42:35:
81:4b:10:a7:ff:46:20:60:07:80:8c:4a:f3:65:76:
71:f2:15:2d:a9:fe:d0:60:cf:ff:d7:a3:30:6d:a3:
04:18:7a:b8:aa:03:66:e8:0b:ff:f9:6e:92:8b:b6:
4d:6d:bf:fc:fd:98:58:dc:c8:f0:ac:d9:1e:e4:fb:
99:1b:38:91:d4:cd:16:3b:18:f6:0b:62:61:5e:07:
54:b6:fb:5b:34:10:31:84:2c:ad:f6:77:01:af:de:
11:ba:19:37:5c:ce:7e:8e:39:94:f8:49:39:05:49:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:DA:1E:63:40:27:29:4F:F0:C9:3A:2F:C1:53:FD:BD:51:7E:93
X509v3 Authority Key Identifier:
keyid:7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/1-dXaHmNAJylP8Mk6L8FT_b1RfpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dd:cb:1c:f3:70:8e:a8:b0:fc:3c:32:36:ad:86:da:47:81:
3f:b6:d6:12:8b:5a:f6:a8:98:6b:3b:55:9e:20:85:9c:28:dc:
5b:75:08:1c:d8:c4:4c:fd:7c:25:b2:88:5f:a4:a3:98:7d:13:
e2:cc:c7:b6:87:40:1f:89:c5:f9:68:e4:74:c6:56:30:d1:5d:
fc:f0:69:4f:5d:d5:58:ea:18:c3:5f:83:42:82:0a:a2:7e:39:
c8:4e:c0:20:a4:9e:5d:b0:b0:e4:81:69:05:91:b5:84:99:61:
41:ce:88:ed:91:f3:dd:af:8c:b9:e9:d0:90:92:79:db:12:be:
57:6b:d9:1b:c8:38:c9:ca:87:f4:14:00:92:e5:9b:60:72:26:
90:82:9e:4f:d4:73:60:30:b8:8e:52:ec:35:7b:b8:b6:b9:a3:
45:ea:23:55:e1:3e:0b:49:70:23:e7:61:de:e3:8a:a2:a8:1c:
94:4d:e7:ae:f0:19:66:cb:8a:40:c7:0c:fb:0f:21:c8:0e:d1:
6b:32:d7:ab:a8:5f:ba:9a:7a:d3:23:f3:b9:84:36:44:87:da:
d4:cc:12:59:08:40:d8:e6:fb:b2:01:b3:77:c6:9c:dd:e1:1d:
17:dd:6a:b1:80:ad:a9:2f:a6:5c:8c:63:73:fe:ef:c9:15:1c:
e8:d8:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org