Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/kuTaBzqzVq8XcI3QBXNomi7xVPg.roa
File: kuTaBzqzVq8XcI3QBXNomi7xVPg.roa (raw, json)
Hash identifier: kRTxeG/H78VGeYZM57XWPsOQyinpgZ7vXdTgVuvtLO0=
Subject key identifier: 92:E4:DA:07:3A:B3:56:AF:17:70:8D:D0:05:73:68:9A:2E:F1:54:F8
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: 01853394C4B1394F69ED236ECFBDABDABDF8
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/kuTaBzqzVq8XcI3QBXNomi7xVPg.roa
Signing time: Wed 21 Dec 2022 07:27:45 +0000
ROA not before: Wed 21 Dec 2022 07:27:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:94:c4:b1:39:4f:69:ed:23:6e:cf:bd:ab:da:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: Dec 21 07:27:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92e4da073ab356af17708dd00573689a2ef154f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:76:62:d3:2c:57:07:0f:ae:67:f4:06:64:
04:01:d4:5b:38:6d:74:7b:b7:3d:5c:97:cf:3f:55:
30:5b:65:dc:f1:16:ff:09:d4:94:f0:fd:27:29:6f:
e2:bb:60:07:a1:4b:19:5e:49:d5:db:cb:5c:32:5f:
e8:eb:0a:b4:87:15:c6:46:b1:94:48:69:97:dc:be:
54:00:40:70:13:41:f3:e8:44:d0:c9:c5:1a:49:66:
2a:95:16:28:06:1d:6a:65:37:89:1e:2e:05:c4:7e:
15:31:86:57:cf:83:54:49:40:63:8a:21:4f:54:0b:
b7:24:d5:8b:94:1e:13:75:d1:3c:ed:d0:34:30:2d:
89:3c:cd:e5:56:ad:9d:84:d7:41:b7:85:a2:58:92:
7e:da:03:73:5c:2e:64:2c:9b:47:cf:cd:6b:3a:e9:
ff:40:8c:80:75:86:b8:53:c0:54:18:20:6c:40:e3:
e1:77:bf:b4:45:d2:cb:a1:b4:8d:b1:e6:01:7d:94:
c1:0a:ac:7e:0a:23:1d:64:bb:b2:9d:c2:c2:0f:cb:
66:ba:08:4a:e9:e6:c0:f7:94:e1:95:6f:18:43:79:
49:05:56:49:b5:ab:69:29:99:fe:6c:5c:1a:04:d8:
03:22:ec:2e:ac:cf:51:1d:4c:48:a5:c8:8b:29:cc:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:DA:07:3A:B3:56:AF:17:70:8D:D0:05:73:68:9A:2E:F1:54:F8
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/kuTaBzqzVq8XcI3QBXNomi7xVPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:45:cc:36:c0:5c:3d:e8:7f:5c:40:bd:1c:64:43:b1:e0:f9:
0d:9d:4f:d7:a6:dc:58:b7:6a:6b:cf:6e:50:32:22:04:4c:04:
e4:05:05:2c:bf:21:ed:26:3a:10:57:80:a2:26:4d:05:9e:6d:
6a:b8:fc:40:1c:78:33:ff:d7:0a:a4:e6:29:ab:5f:7e:7c:cc:
29:41:1d:11:53:12:2d:19:1a:db:09:d9:0f:9c:e6:f7:cc:a2:
dd:e4:f0:9b:c3:78:4e:4c:b6:4b:0f:3c:8a:0c:e5:d6:06:fe:
12:c0:3c:63:73:72:86:0b:8a:ad:a8:f0:1c:ce:0b:95:d1:61:
44:be:3a:31:b6:01:46:00:71:c3:56:61:d5:c4:1d:69:27:62:
98:9f:23:f7:1d:cd:30:42:44:2a:a4:a1:1f:62:93:7e:ff:18:
26:65:1b:0b:0e:8d:07:2a:2f:48:bd:e8:2c:08:19:07:23:6b:
ac:b0:da:8a:30:68:f1:f5:d6:12:44:8a:32:1a:26:8c:21:f0:
de:56:47:1a:35:fb:06:3f:77:15:52:27:82:c5:22:ad:55:92:
3d:5c:2e:30:b7:4b:6d:0a:ed:dd:0a:66:07:fc:43:2e:1c:12:
aa:ca:aa:11:8e:1a:db:7f:89:76:4f:e9:a4:b5:bb:94:89:a1:
ca:76:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org