Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/dtoZzn3WtFNe0ZmFMYIlCh9FvgY.roa
File: dtoZzn3WtFNe0ZmFMYIlCh9FvgY.roa (raw, json)
Hash identifier: BnoP21n7WY0aCaknNvJW9jPZlK4kFIkNtnF3GTJlmrM=
Subject key identifier: 76:DA:19:CE:7D:D6:B4:53:5E:D1:99:85:31:82:25:0A:1F:45:BE:06
Certificate issuer: /CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Certificate serial: 018820867587D458340F2D0CD387065F773C
Authority key identifier: 7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/dtoZzn3WtFNe0ZmFMYIlCh9FvgY.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:87:d4:58:34:0f:2d:0c:d3:87:06:5f:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76da19ce7dd6b4535ed199853182250a1f45be06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:7a:bf:93:62:1e:f9:6c:92:cc:7c:34:43:
44:77:5d:96:7a:e6:f3:07:7b:dd:d9:09:ff:32:c4:
51:53:15:b6:0f:af:90:e0:4a:82:d5:0c:12:8d:b8:
f9:dc:9f:6d:0e:0f:a4:94:09:4d:ce:eb:ff:61:1a:
52:49:d4:7e:3e:05:34:ca:6f:d1:4e:dd:aa:a6:0d:
ed:22:91:4f:39:ae:3f:68:a5:b3:02:aa:2e:ca:f7:
48:27:20:51:a7:37:fc:ca:b0:09:6f:96:42:6f:f6:
02:ee:03:61:ee:f2:d1:e5:99:ae:82:b6:60:a9:41:
eb:ec:f5:2a:51:ba:28:56:ef:9a:f1:f7:a5:a0:22:
a6:2c:5f:4c:c9:82:a1:fd:c6:29:27:a8:45:10:7a:
d9:c2:3f:93:c3:df:0e:79:24:27:97:c6:f0:a1:f6:
44:69:96:bc:bb:56:97:aa:0f:fe:7c:93:fe:1d:df:
54:6b:47:1d:a8:22:e4:87:ab:28:9c:5a:98:38:73:
e1:d3:f3:ed:a7:f0:c7:6e:0e:38:73:cb:78:0f:89:
57:4c:f9:08:9a:f4:49:05:4e:e6:ae:8f:ec:87:5c:
6e:94:5a:9e:1b:89:79:8a:c9:50:93:5a:e7:be:5a:
3b:ee:f9:83:9d:9a:f5:d2:21:28:52:77:3b:99:fd:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:19:CE:7D:D6:B4:53:5E:D1:99:85:31:82:25:0A:1F:45:BE:06
X509v3 Authority Key Identifier:
keyid:7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/dtoZzn3WtFNe0ZmFMYIlCh9FvgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.184.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:51:e2:d7:b1:e0:41:a4:6a:dd:e4:38:db:63:6e:b3:2d:
b5:08:87:06:c5:e1:3d:ea:07:6a:00:d7:7e:c7:66:de:b1:28:
e0:61:07:1c:ff:47:a9:46:ec:80:86:db:06:6c:63:92:10:52:
84:cc:dc:e7:35:5b:96:d4:a8:c9:91:3e:6b:ea:ea:2e:9c:8d:
9d:a2:c2:37:55:f0:3c:84:ae:8e:32:04:54:73:4c:a6:04:8f:
f3:3a:86:22:56:44:67:fd:1b:8e:0d:99:f5:62:e8:ea:12:4f:
27:a0:c3:f3:38:11:b7:fb:dd:b2:87:f9:14:fa:df:08:2a:7c:
65:3c:e7:2e:f2:c3:ed:52:fd:7e:25:a4:65:0b:0d:3f:0f:a1:
f0:4d:bc:ef:65:15:f0:41:ce:f9:9b:a3:16:62:60:07:61:03:
20:2d:84:14:a2:a2:4d:7d:00:75:03:2f:52:f8:b3:2c:e1:e0:
62:f9:26:d3:51:2e:bb:88:10:40:d5:29:86:0f:00:09:1c:14:
09:fc:89:d9:96:19:21:79:9f:03:7d:28:3e:64:96:e3:35:ad:
57:e4:69:b7:10:cc:d3:7e:fd:cf:f1:10:94:6a:ae:2b:01:ad:
53:de:0a:4c:3c:7b:ce:81:67:1d:1b:15:b7:5c:1f:15:f5:e7:
51:23:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 10:31:30 2023 by rpki-client on console-fra.rpki-client.org