Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/1c974v6FZwF6RAiBxknhlTIoqQA.roa
File: 1c974v6FZwF6RAiBxknhlTIoqQA.roa (raw, json)
Hash identifier: RSBUwC6aE3GCS8H8A+eyKWp5InpzaBRIdE3CryiMD5E=
Subject key identifier: D5:CF:7B:E2:FE:85:67:01:7A:44:08:81:C6:49:E1:95:32:28:A9:00
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: 0188068D64CA5D7D8C5A3488AF4442C78C29
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/1c974v6FZwF6RAiBxknhlTIoqQA.roa
Signing time: Wed 10 May 2023 16:45:09 +0000
ROA not before: Wed 10 May 2023 16:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:8d:64:ca:5d:7d:8c:5a:34:88:af:44:42:c7:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: May 10 16:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5cf7be2fe8567017a440881c649e1953228a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:7d:ab:93:d4:9c:eb:bd:52:3e:ca:69:58:
c0:9c:5e:a4:76:cc:4a:28:a6:51:9a:cb:4a:4a:ea:
a7:cb:ac:e3:d3:3f:10:40:04:a4:49:c4:99:61:eb:
a0:54:f5:69:f5:d6:c8:51:06:f1:ae:84:65:fa:b1:
cb:b3:eb:6d:34:40:d4:7a:fc:31:ae:16:f2:be:b5:
5c:f8:6b:83:08:62:27:f3:12:79:8c:82:d7:81:45:
b5:fb:30:80:f6:e7:16:47:fa:31:0b:49:14:e9:84:
0e:d7:52:19:18:38:ed:84:2c:e4:1f:10:4a:19:73:
60:5b:42:4b:57:a9:ac:1f:0e:6c:3b:0d:92:cf:4a:
17:62:36:22:1e:61:2d:f5:7a:6d:46:68:e6:70:5c:
d0:f5:c6:68:23:0c:83:a4:e2:7b:db:7e:b6:de:e8:
c4:13:14:76:58:a3:9d:11:df:95:1d:12:3d:c0:b5:
fb:d3:e2:c3:a3:ba:6b:ef:59:40:41:6d:50:f9:35:
2b:1f:da:cf:1d:4f:e9:c1:d5:65:75:49:f9:75:34:
47:05:93:10:17:8f:79:13:37:82:45:fe:e9:fb:ad:
86:f3:55:05:62:89:7b:ab:6c:93:01:0d:62:27:17:
8f:c0:7d:8b:a7:8a:3f:94:bf:bd:37:60:78:60:fe:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:7B:E2:FE:85:67:01:7A:44:08:81:C6:49:E1:95:32:28:A9:00
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/1c974v6FZwF6RAiBxknhlTIoqQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a8:2a:b5:f5:a1:ad:a2:f6:7c:78:a0:2a:4e:af:5c:6d:30:
1e:56:35:7a:2b:69:56:df:6e:3b:63:c7:b8:d4:37:ce:6b:26:
5c:0b:6c:40:44:5e:85:46:c8:31:91:ba:c1:2e:55:13:64:96:
a1:e6:84:9c:6a:65:03:db:ed:84:f9:8c:e9:b0:f1:2d:1c:45:
ae:23:50:02:34:87:26:ea:a4:cd:75:22:ce:6f:21:10:50:b0:
a6:42:5d:71:04:e3:54:83:bd:1a:93:be:c3:b4:4f:09:f6:05:
29:76:91:13:5d:2d:2c:60:6b:9c:ef:05:a9:15:48:0c:fa:d3:
fb:1f:45:d8:e3:27:0b:ae:f4:42:35:26:fa:a5:0d:5f:78:a0:
67:92:95:3d:1c:ca:e2:86:48:ca:4c:53:4d:e9:a4:cc:98:72:
ba:46:f4:21:91:d7:21:c1:2a:af:f2:a3:82:1c:c2:58:18:11:
78:07:b8:e1:55:de:b2:54:b4:13:12:a0:a7:ee:82:39:cb:7e:
6f:36:eb:a9:14:99:b3:2c:0f:81:0e:48:8b:f7:19:84:95:cf:
0c:f8:36:1e:84:2a:9d:1c:25:9c:c1:be:c9:31:9b:8f:00:be:
51:6c:f6:00:8f:9e:ca:ca:92:e6:a4:26:d1:e1:87:74:ba:29:
05:d9:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org