Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/U9bK1pxX_DVwbh32OJIZwFsHA7Q.roa
File: U9bK1pxX_DVwbh32OJIZwFsHA7Q.roa (raw, json)
Hash identifier: s7wospoLDj0+rnL/tJMWINwdV0khyhsliHnPS4BW0UQ=
Subject key identifier: 53:D6:CA:D6:9C:57:FC:35:70:6E:1D:F6:38:92:19:C0:5B:07:03:B4
Certificate issuer: /CN=30dda8ec22370cfefcfe58c4cab2bae02d9d23d5
Certificate serial: 6E0FFF
Authority key identifier: 30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN2o7CI3DP78_ljEyrK64C2dI9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/U9bK1pxX_DVwbh32OJIZwFsHA7Q.roa
Signing time: Sat 01 Jan 2022 01:53:08 +0000
ROA not before: Sat 01 Jan 2022 01:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 146.19.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7213055 (0x6e0fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dda8ec22370cfefcfe58c4cab2bae02d9d23d5
Validity
Not Before: Jan 1 01:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53d6cad69c57fc35706e1df6389219c05b0703b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:81:d2:8f:fa:34:ca:6b:72:4d:67:f2:ef:
50:58:06:6b:91:20:03:42:78:c2:11:55:54:e7:cd:
12:d9:e1:3b:f3:93:e1:de:bd:bf:5c:8f:b4:d1:7b:
9b:c9:f3:41:9d:f8:9d:53:9e:51:a2:94:13:c2:20:
04:c5:a5:fd:d9:71:26:ee:ab:f8:ee:a4:23:66:a0:
a7:65:71:29:66:86:26:74:59:ab:69:04:f2:95:96:
6a:ca:d1:3b:87:db:f0:e5:1b:f3:88:93:c8:cf:01:
89:81:f3:f7:1f:7a:a2:7d:61:f6:bf:46:50:72:72:
ef:24:56:5a:76:ec:e7:c6:b5:38:51:21:71:00:fa:
f4:17:b2:33:b4:ac:43:10:61:c1:96:e0:ba:f9:e3:
6c:99:50:f0:e2:7c:3d:2e:0a:a6:8a:d2:9d:42:4a:
da:10:4d:fa:9d:92:f5:bb:82:eb:6c:18:0c:39:02:
9d:0b:8c:31:b2:bf:b0:e3:20:4b:0a:4d:3d:82:35:
a6:2f:dc:a8:b9:ad:ac:a7:b5:8a:77:ff:c3:3b:9a:
3f:6c:53:22:3a:ce:20:36:b2:fc:8d:31:f7:b0:f3:
77:e5:4f:c9:54:22:f3:12:1c:92:3f:cd:6d:70:36:
f8:77:4a:4b:c7:76:75:9b:5d:9b:cd:a9:f1:ba:91:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D6:CA:D6:9C:57:FC:35:70:6E:1D:F6:38:92:19:C0:5B:07:03:B4
X509v3 Authority Key Identifier:
keyid:30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN2o7CI3DP78_ljEyrK64C2dI9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/U9bK1pxX_DVwbh32OJIZwFsHA7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/MN2o7CI3DP78_ljEyrK64C2dI9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.95.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a2:15:a2:f8:6d:f5:a9:ac:af:58:96:98:2d:71:ec:38:e0:
c7:cd:11:a3:52:70:03:c5:61:44:67:91:c9:33:25:27:3f:ae:
44:6d:9e:ce:bf:13:95:27:19:08:03:ab:69:97:5a:b7:a2:6b:
fd:27:5d:ef:e5:5e:ae:90:dc:40:73:5e:2e:73:13:08:69:30:
25:28:21:a4:f9:17:79:10:e0:0b:b1:13:e3:4f:bd:75:e2:8c:
fb:77:ec:9a:c3:ed:1a:45:fd:39:39:4d:2f:63:d3:bb:c2:ad:
ff:40:bc:3d:38:ae:f2:87:37:e3:aa:b8:29:a1:d4:61:d9:30:
1b:4c:67:4b:ea:ff:4c:3a:c1:3b:be:a3:dd:7c:56:d1:90:20:
6a:15:c7:4b:11:04:9e:fe:a3:ec:cb:f5:21:b2:25:c9:62:29:
cb:b9:46:41:7e:88:2a:9d:44:bc:16:bb:bd:9c:26:df:8c:7f:
f2:d3:ca:c3:bf:79:5a:7f:5a:64:48:5d:99:fb:da:33:ba:6e:
2b:a6:76:45:de:b0:f5:a1:fb:fc:3e:e9:bd:7e:26:c3:da:ed:
6d:c8:ed:a0:67:00:33:7f:cd:ac:c9:e6:97:af:45:d5:27:f9:
62:b6:1f:93:d3:e0:cd:62:00:d2:ac:39:84:3c:b3:18:0a:e5:
b8:65:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:00 2024 by rpki-client on console-fra.rpki-client.org