Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/fFM_pDZPcy0SH9h-pKEUClsdvk0.roa
File: fFM_pDZPcy0SH9h-pKEUClsdvk0.roa (raw, json)
Hash identifier: z10E1dgVGYaoY6HA0/l2MJ0aw5AXSnimJT3uI+PCjlo=
Subject key identifier: 7C:53:3F:A4:36:4F:73:2D:12:1F:D8:7E:A4:A1:14:0A:5B:1D:BE:4D
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: 0187A219A2138893781CB71D6C5C9602C965
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/fFM_pDZPcy0SH9h-pKEUClsdvk0.roa
Signing time: Fri 21 Apr 2023 04:36:41 +0000
ROA not before: Fri 21 Apr 2023 04:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:19:a2:13:88:93:78:1c:b7:1d:6c:5c:96:02:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: Apr 21 04:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c533fa4364f732d121fd87ea4a1140a5b1dbe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:39:e6:06:44:cc:42:02:8f:30:40:4b:a4:
60:17:24:55:a8:77:9d:35:b0:06:5b:24:20:3a:b6:
c6:47:48:e1:b8:68:de:74:c4:73:d5:94:85:9b:43:
14:20:57:fd:03:f1:13:f6:7b:c8:f0:49:42:11:08:
94:d0:89:f6:98:b8:70:84:9e:f7:24:81:1f:1e:5d:
2e:5b:5b:84:ac:ad:65:66:7d:38:f8:90:3c:13:5a:
cb:ab:fd:e5:89:03:16:a9:8b:a2:81:c5:97:07:d4:
81:ad:25:71:ba:ee:5f:00:19:02:44:1f:40:76:2b:
48:ae:ea:a2:94:c9:fa:1f:ac:78:dd:95:5e:f3:4a:
1f:ee:8b:5c:9d:c9:45:f1:83:9f:0e:66:5c:a6:3b:
c4:4d:a2:5d:f1:51:22:2c:68:3d:49:72:53:14:a7:
d9:e2:c7:a5:ab:5a:39:39:71:8d:14:61:50:52:2a:
86:7b:57:24:a2:6f:99:a8:42:c1:2a:81:b4:9e:38:
d0:6c:e7:ff:6a:cb:2c:b4:a4:b6:fb:84:ba:7d:f7:
e3:eb:31:3b:d1:74:2c:eb:9f:a5:8a:ec:34:74:19:
17:d3:ab:36:38:c9:61:e2:4d:ac:a8:0d:6a:91:b1:
f9:8f:be:d8:19:02:08:b3:ad:bb:0f:bf:1a:d4:22:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:3F:A4:36:4F:73:2D:12:1F:D8:7E:A4:A1:14:0A:5B:1D:BE:4D
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/fFM_pDZPcy0SH9h-pKEUClsdvk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f3:fb:4e:c2:4b:28:aa:c6:34:69:83:21:8a:64:c9:35:f5:
a2:2c:1a:fc:db:7b:0d:94:7d:4e:f9:19:cd:68:cb:aa:97:33:
7e:8a:de:ed:a3:c2:82:55:af:34:48:d3:2f:17:e9:ce:27:c9:
cb:5b:93:e7:8a:9c:e4:c0:4e:e0:12:0f:79:85:a0:cf:67:f6:
67:0f:5d:87:7f:96:0a:5f:4e:2b:b2:6a:ba:00:fe:a6:7b:60:
b6:e7:16:0a:f4:22:23:9e:4e:10:aa:93:30:c2:d4:5c:6b:e1:
f8:35:73:58:76:13:22:35:80:f6:3f:6d:63:74:52:f5:65:39:
37:58:d1:c0:7b:61:5f:4e:dc:49:1f:e4:9a:2c:a4:28:57:62:
09:94:3f:9b:05:a7:7f:56:b8:f8:0d:6d:17:a5:98:97:35:3c:
3d:7d:6e:14:43:65:29:d3:cd:c7:3a:f7:bb:b0:ba:0f:21:2b:
65:dd:1f:09:23:11:49:b6:3d:48:49:18:61:98:e1:6c:2e:ea:
4a:70:9e:9f:3a:56:6c:0c:eb:ad:c1:5e:76:e6:62:58:5f:30:
c9:1c:df:81:bf:c6:80:2e:3e:ef:77:a0:09:00:68:b2:96:73:
89:3e:0e:c7:3e:ec:44:87:8d:c1:a6:9f:4d:a1:81:e3:f3:57:
58:31:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org