Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jX1GIHgpWjjv8WcQC53SswUYsVM.roa
File: jX1GIHgpWjjv8WcQC53SswUYsVM.roa (raw, json)
Hash identifier: c+NTasizz0z99czykM3ODEfuYTAmkxsaUHkLzUcQPRc=
Subject key identifier: 8D:7D:46:20:78:29:5A:38:EF:F1:67:10:0B:9D:D2:B3:05:18:B1:53
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: 0185729EC62B0C9CCC2D1F5FE9CE408C1F98
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jX1GIHgpWjjv8WcQC53SswUYsVM.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c6:2b:0c:9c:cc:2d:1f:5f:e9:ce:40:8c:1f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d7d462078295a38eff167100b9dd2b30518b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:b0:ea:0f:74:08:84:78:b4:c4:47:9a:49:
c2:f5:d4:05:0c:28:03:a5:20:4e:ad:49:a0:d3:49:
ba:38:f7:ca:b6:3a:89:c6:08:53:a5:5b:ad:db:f4:
37:f6:d6:a8:32:35:2a:d0:f5:5e:8f:47:9f:6f:ef:
09:97:86:87:b8:70:92:ff:07:af:2f:d8:ee:a2:c5:
6d:0c:70:16:ad:60:ff:47:75:ae:64:93:38:81:38:
6f:61:ab:60:93:3a:6e:54:dc:e1:aa:dd:7b:e9:50:
a9:c5:eb:98:7f:61:8c:95:79:af:90:56:cc:30:fb:
e0:71:7b:a4:9b:01:1a:ae:3f:eb:98:a2:de:a6:c5:
de:6d:82:23:ee:0a:d5:d8:2f:66:24:ca:c1:cb:00:
af:3c:dd:47:6d:b3:63:b8:00:f6:65:77:a7:25:ba:
cd:f3:ef:30:d0:8f:c8:48:69:97:06:e1:77:09:7a:
56:87:37:7f:7a:55:61:f1:2d:51:10:2d:f1:c9:a5:
2c:45:83:9d:f1:9c:82:95:5f:32:ae:f6:46:34:8c:
b6:2e:49:85:ba:7e:36:e0:2d:59:ef:49:63:fa:fc:
af:3e:4b:c7:1c:23:a7:c6:c1:9b:b2:4b:83:36:e9:
e7:78:df:1a:7e:6f:42:fc:28:3a:13:b3:a2:14:73:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:46:20:78:29:5A:38:EF:F1:67:10:0B:9D:D2:B3:05:18:B1:53
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jX1GIHgpWjjv8WcQC53SswUYsVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:bd:77:5d:a6:ed:3c:e6:2f:68:6b:81:8f:d6:9a:35:db:89:
79:02:6a:53:74:57:65:65:9f:bb:29:dd:e8:84:6b:7e:48:4d:
88:a7:d3:2e:10:ad:0a:87:6f:02:bf:bc:72:ad:6a:4f:d1:13:
27:1b:50:1c:93:f4:83:fe:7b:af:61:33:7e:db:ef:34:86:3f:
c1:19:08:98:db:af:18:d9:1f:5c:82:04:0b:4a:7b:0f:ee:3f:
90:9e:60:e5:99:73:f0:4a:46:c5:7d:2c:c9:84:83:63:15:a4:
7b:74:fe:15:cf:e0:92:0d:5b:92:81:73:ed:d3:10:30:43:25:
49:50:7d:c2:63:33:3a:43:37:ed:2b:30:4f:7b:93:d6:8e:7c:
aa:3b:13:3d:e9:45:08:9b:93:19:f0:79:ea:e4:db:9b:2f:17:
29:ca:d9:7c:3c:cb:6f:2b:d7:d2:d0:fc:82:9d:bf:ff:fa:9f:
c1:84:2e:4d:06:fb:e4:10:ac:8e:ee:2f:92:b5:5a:28:f1:65:
f6:ff:35:b6:64:4b:2c:0c:38:ac:a0:89:92:2e:4b:a2:e3:5e:
56:26:c2:6d:ea:7f:56:3b:24:70:20:86:76:cc:7a:db:a5:37:
8b:24:e8:6d:86:d6:72:3d:38:08:e4:87:bc:d5:5d:1d:ea:15:
bf:a2:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org