Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/8ZVUGFPadzVS-zrZYb-XwLMyRME.roa
File: 8ZVUGFPadzVS-zrZYb-XwLMyRME.roa (raw, json)
Hash identifier: SYp96xBhXeNrrlz6hvhBusx7mlyyXKnrD4Kl2EcsCSg=
Subject key identifier: F1:95:54:18:53:DA:77:35:52:FB:3A:D9:61:BF:97:C0:B3:32:44:C1
Certificate issuer: /CN=36f9e85e8f99569f532364ef08b06d70b56ecd84
Certificate serial: 01856BF7D803A1144399523F88C73BFD4AD4
Authority key identifier: 36:F9:E8:5E:8F:99:56:9F:53:23:64:EF:08:B0:6D:70:B5:6E:CD:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/8ZVUGFPadzVS-zrZYb-XwLMyRME.roa
Signing time: Sun 01 Jan 2023 06:14:42 +0000
ROA not before: Sun 01 Jan 2023 06:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 146.19.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:d8:03:a1:14:43:99:52:3f:88:c7:3b:fd:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f9e85e8f99569f532364ef08b06d70b56ecd84
Validity
Not Before: Jan 1 06:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f195541853da773552fb3ad961bf97c0b33244c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:9a:be:fd:45:67:5e:d4:8e:53:4e:6b:97:
73:21:27:4a:8e:1b:1c:e0:0f:9d:bf:90:7d:da:6a:
3b:51:aa:0d:7a:ef:a5:cb:3f:f2:d5:67:8c:ab:c4:
88:f1:c5:26:5a:62:5c:64:d5:28:4d:41:3c:e6:39:
b2:c5:d3:e7:76:08:7a:d0:22:2f:96:c0:b3:23:4e:
4d:ee:70:da:65:5f:f7:7a:3a:0d:54:3c:49:c1:cb:
a0:01:ac:d5:a7:79:91:b1:68:ff:2a:02:32:c3:35:
e4:a4:ca:dd:e2:2b:06:3b:88:bc:f5:5d:89:7b:0b:
a2:44:49:cf:2e:c3:1d:c0:82:21:07:37:05:bc:04:
22:f5:cf:40:20:62:dd:0e:0e:4f:04:98:f9:bb:ea:
fe:6d:6d:9c:e9:03:0c:5c:e6:68:3d:09:a5:f7:1b:
33:68:65:bf:2d:99:36:fc:0f:2d:8d:80:65:d1:8f:
a1:6c:eb:42:24:46:f4:d1:28:d0:c6:26:3a:38:47:
5e:dc:8d:44:7c:72:e1:b7:2a:7e:fe:c6:13:ae:02:
23:b9:f0:e2:53:38:84:6a:5e:b8:a3:2a:ae:5f:ce:
1c:5f:b1:24:b9:dd:c0:8d:c8:f4:90:cc:19:75:42:
ab:60:87:c2:e8:d7:0a:22:28:fb:55:87:34:f7:cf:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:54:18:53:DA:77:35:52:FB:3A:D9:61:BF:97:C0:B3:32:44:C1
X509v3 Authority Key Identifier:
keyid:36:F9:E8:5E:8F:99:56:9F:53:23:64:EF:08:B0:6D:70:B5:6E:CD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/8ZVUGFPadzVS-zrZYb-XwLMyRME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c501d3-e2ee-4b6b-9038-34d2bae95aad/1/NvnoXo-ZVp9TI2TvCLBtcLVuzYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e0:e9:cd:27:da:7a:86:10:0d:c5:3a:b8:22:d7:36:3a:ca:
f3:8a:9c:af:69:08:81:33:0d:2c:24:80:39:93:b1:c5:42:66:
32:15:fc:ac:50:eb:1a:92:06:66:47:44:8b:e7:57:37:30:34:
92:49:bb:e4:39:5f:73:17:cc:af:57:75:e7:4b:6d:15:b0:76:
d8:99:4d:20:25:e7:89:77:3d:96:e8:2d:2d:0c:9b:c8:fb:23:
2f:25:51:30:de:77:90:a2:88:05:fd:49:cd:17:06:ee:a1:22:
ae:2e:87:9d:b3:25:91:a1:68:9c:c1:9d:90:1a:77:5f:0b:1e:
24:93:c0:2d:a0:39:c9:b6:a4:f6:72:41:73:e4:db:d0:a2:7f:
bb:25:da:d1:5b:8e:ee:91:23:e8:59:5f:cd:52:75:b1:85:81:
33:e1:45:26:96:80:ad:01:30:7c:2d:20:86:36:c8:ae:fb:6f:
f3:7c:f6:7c:46:0e:e5:8f:46:c3:5a:c0:78:8b:6c:d3:53:8f:
98:33:e1:92:3c:bd:aa:e3:b5:af:70:47:06:78:61:6f:5b:19:
3c:0b:a8:17:38:bd:26:f6:7b:6e:b9:8b:06:6a:fa:66:ed:c5:
6e:a8:03:95:ef:f4:1e:1a:07:a6:a5:b5:ad:71:b0:fa:67:36:
5c:2e:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org