Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/8Q7mp8rylTLCmx2rBkAgZNsuDeU.roa
File: 8Q7mp8rylTLCmx2rBkAgZNsuDeU.roa (raw, json)
Hash identifier: aAKYLnHAk6GgkMH8+Gf1uFuBwvSofP09qT4L97xfRJE=
Subject key identifier: F1:0E:E6:A7:CA:F2:95:32:C2:9B:1D:AB:06:40:20:64:DB:2E:0D:E5
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 60EB47
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/8Q7mp8rylTLCmx2rBkAgZNsuDeU.roa
Signing time: Sat 01 Jan 2022 01:58:41 +0000
ROA not before: Sat 01 Jan 2022 01:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6351687 (0x60eb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Jan 1 01:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10ee6a7caf29532c29b1dab06402064db2e0de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:fa:28:fc:ce:ec:16:5d:a3:51:4b:3c:b6:
8b:3c:e7:96:83:2d:dd:c2:3a:d7:e9:53:6b:4b:db:
45:43:9f:4d:92:65:38:37:16:e8:c3:9b:6f:fc:e6:
08:cd:0f:ca:ba:b2:2b:29:da:4f:35:73:c9:46:2f:
75:36:0b:8d:22:c5:69:3d:3a:09:d5:d2:04:5b:0f:
b0:fb:a3:db:c2:21:d0:51:d4:5f:bf:60:51:38:0f:
3c:91:fe:f6:e6:88:03:0d:96:97:3d:d4:3f:6c:9d:
36:cf:fc:ff:d9:b5:af:30:8b:06:c8:91:2e:f5:83:
63:ac:e7:1b:c4:10:8d:32:76:58:76:8c:ff:f3:04:
55:c9:61:16:e4:95:56:03:f8:e0:95:83:29:5d:17:
ce:ce:a6:1d:7d:db:70:72:17:a5:04:aa:46:ce:3c:
f5:43:ec:8f:51:3d:cf:61:ab:37:91:46:67:71:87:
21:a0:32:bd:61:da:f7:10:3b:da:99:f9:e5:eb:9a:
9e:01:b5:5b:75:4e:52:1e:f2:03:a8:c7:67:35:27:
c1:bf:7b:32:1b:11:df:ce:e7:2a:90:a0:27:4a:ee:
f7:a6:e1:8d:b2:f7:50:46:c6:76:24:a5:e1:f7:b5:
db:65:07:07:84:64:d0:2a:6b:13:84:da:5b:f7:fb:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:E6:A7:CA:F2:95:32:C2:9B:1D:AB:06:40:20:64:DB:2E:0D:E5
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/8Q7mp8rylTLCmx2rBkAgZNsuDeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7d:52:e4:fe:bb:95:b4:44:ea:98:05:0c:fe:25:c0:aa:0e:
dc:30:d4:f9:98:1d:d3:76:a6:b7:71:3f:b6:c0:e4:92:37:44:
2c:18:70:1c:40:bd:58:7c:dd:ca:92:3e:be:ee:81:a4:ec:b3:
69:35:94:b6:36:6f:f6:99:3c:bc:54:05:3c:48:8a:ee:f7:49:
b9:de:4b:d4:c4:97:9a:22:e5:48:84:99:5b:17:75:14:30:83:
da:74:f3:ec:6e:4a:58:e7:0b:13:91:b4:a7:3e:89:c7:12:66:
e9:5b:1b:4b:6b:ad:ac:b3:68:94:1c:51:5a:0a:ef:4f:4d:55:
66:fc:9f:9f:3b:cb:b3:b3:fa:ff:a9:d8:3a:87:e9:11:1b:2e:
c5:a1:81:97:b1:db:cd:37:49:88:6f:d3:c4:0b:3c:75:3a:85:
f3:8f:3e:75:06:dd:bd:4e:73:58:12:ca:5d:37:c2:55:bf:66:
e9:fe:32:e5:60:c2:8d:93:63:45:c0:09:5e:c2:58:a6:fb:38:
23:74:2b:62:bf:01:93:6c:0b:e4:f5:1a:73:d8:62:eb:b1:87:
45:f1:54:1a:23:e8:9a:4c:6e:3b:97:4c:62:0a:1b:31:65:1a:
79:6a:92:18:c3:77:66:ad:69:a8:8d:3b:fb:35:0e:53:55:77:
56:42:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org