Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/pGOvcLVzBnquuUv3P1NsbpghX4M.roa
File: pGOvcLVzBnquuUv3P1NsbpghX4M.roa (raw, json)
Hash identifier: 8wg5okz6TMPRQBSN3M9DFH8nljM3KWyFMFUJy5udWxc=
Subject key identifier: A4:63:AF:70:B5:73:06:7A:AE:B9:4B:F7:3F:53:6C:6E:98:21:5F:83
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: C33ACA
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/pGOvcLVzBnquuUv3P1NsbpghX4M.roa
Signing time: Fri 28 Jan 2022 14:06:50 +0000
ROA not before: Fri 28 Jan 2022 14:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12794570 (0xc33aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: Jan 28 14:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a463af70b573067aaeb94bf73f536c6e98215f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:36:eb:c1:02:5d:74:e2:ea:61:a2:8b:10:
1d:ec:31:ba:14:1d:18:70:ef:0a:b3:6b:ba:33:3d:
53:ba:1b:ce:13:9e:36:54:42:83:86:79:fa:23:76:
b7:54:a7:f6:cf:8e:1c:70:ea:86:f6:f7:b3:3b:88:
7c:3a:64:85:78:67:ed:4f:d7:cd:85:24:28:9a:00:
f2:7d:0a:ba:f5:7e:6d:02:4f:88:33:f0:dd:73:11:
f5:b9:27:51:bf:bf:a9:bf:49:24:3c:19:64:0c:af:
fb:0d:ef:46:e3:24:4c:8c:1c:e0:5c:dc:0b:27:70:
20:08:d3:6d:62:74:60:74:f3:11:ee:ac:85:97:3a:
02:98:21:84:1b:d3:18:87:46:42:40:17:36:43:c1:
eb:44:08:6a:4f:7c:36:cf:78:8b:c1:dd:12:02:8c:
bb:11:62:c2:c1:f0:79:5e:1c:72:fd:a5:44:ce:93:
5f:7b:34:d7:8a:0e:52:2b:42:0d:bd:a2:0f:fb:50:
20:6e:4d:c0:90:48:74:81:95:43:8d:20:74:69:8e:
49:aa:0e:d2:ac:b2:54:9c:cd:79:45:4d:2f:27:2f:
95:35:3e:97:f0:63:06:57:9c:d1:80:f5:d5:bc:fd:
9e:10:71:9e:bc:66:b6:ea:61:bf:6a:59:97:1b:62:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:AF:70:B5:73:06:7A:AE:B9:4B:F7:3F:53:6C:6E:98:21:5F:83
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/pGOvcLVzBnquuUv3P1NsbpghX4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
78:68:dd:27:b4:fb:54:be:a8:02:a0:46:41:31:de:ab:79:b9:
38:4e:6b:a9:50:52:65:ff:ad:13:7f:8d:21:13:9d:f4:a9:d0:
30:6a:45:07:90:34:40:7d:f9:2b:c5:1e:7d:04:28:65:a3:7b:
27:ca:ed:14:6c:b8:2c:88:eb:00:d2:25:90:b6:15:25:5e:9a:
1a:9b:4e:0b:4f:9f:be:e0:88:a3:e9:05:9e:6c:fb:ef:38:4f:
74:c0:21:ce:85:55:3d:02:ca:42:63:11:b8:76:b4:d5:b3:84:
ae:21:6c:47:e2:b8:72:b2:08:db:f3:39:a9:0c:c6:e9:0e:cc:
d6:92:e6:5d:da:14:08:27:e3:62:46:a5:b9:6a:68:0a:3f:73:
32:65:85:d4:a9:d3:07:bc:02:8b:e9:bc:ce:d9:72:35:e7:7f:
29:8b:12:b9:f5:32:16:dd:e0:b9:bf:04:9d:f8:d5:b7:40:5f:
73:05:86:52:e6:3f:54:4b:97:60:91:21:c3:9c:c8:b2:07:0e:
88:f1:1e:02:0d:36:0d:c9:c1:38:ae:d0:0a:dd:b1:50:f7:14:
69:29:28:fb:14:e4:38:4b:a7:e1:e9:9a:85:d3:db:cb:5c:01:
31:84:3e:ab:92:e4:00:ce:6a:f7:31:ea:d2:31:5d:46:b2:aa:
76:83:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:43 2025 by rpki-client