Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/CtqlXgxae6g0-kA7LNOmYJQ-nXw.roa
File: CtqlXgxae6g0-kA7LNOmYJQ-nXw.roa (raw, json)
Hash identifier: RqpsV+0S0bh2CFtjcpvSyNA5lhqr8PHDTDdoHufDOuc=
Subject key identifier: 0A:DA:A5:5E:0C:5A:7B:A8:34:FA:40:3B:2C:D3:A6:60:94:3E:9D:7C
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 0182C8FBF249D98137990F2CE9F2386CF3E9
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/CtqlXgxae6g0-kA7LNOmYJQ-nXw.roa
Signing time: Tue 23 Aug 2022 04:35:30 +0000
ROA not before: Tue 23 Aug 2022 04:35:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c8:fb:f2:49:d9:81:37:99:0f:2c:e9:f2:38:6c:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Aug 23 04:35:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0adaa55e0c5a7ba834fa403b2cd3a660943e9d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:9b:3a:5e:a9:14:78:86:63:25:b4:8b:35:
e3:b2:3c:8e:6a:8f:8b:64:8c:05:0c:55:50:95:51:
00:25:8b:7c:e6:0e:96:73:f8:4e:a3:04:08:b2:b6:
a1:48:2c:67:69:06:ad:be:58:8f:c6:39:92:5c:45:
e9:b6:93:04:10:70:3f:36:b9:b7:a4:08:4d:b2:fb:
28:33:16:b7:69:1b:98:10:ea:57:20:ee:f4:e4:d6:
c9:ff:fc:3b:55:56:44:3f:06:fc:d2:03:1b:6f:fd:
09:3b:ee:92:b2:3a:82:cf:26:5c:d1:21:bf:d2:6f:
20:44:0d:a8:2b:3a:e5:a4:7a:af:30:3f:28:a4:eb:
ed:b3:dc:c7:09:8a:49:5c:59:0c:09:ed:ff:66:10:
0e:9d:8e:84:20:65:cd:68:1b:a1:fa:c0:cb:19:ef:
5a:89:f1:ea:d1:90:d3:29:1f:34:29:78:70:dc:65:
3c:c4:40:e5:0e:2a:8e:56:a0:cd:b2:9c:b0:fa:f9:
18:94:13:9d:2c:d0:2d:ed:c5:a9:5a:76:a1:3a:76:
c1:86:cb:0c:40:14:0d:42:7f:6d:9d:3a:51:61:83:
d4:b0:d9:d8:3c:d2:a3:0a:95:5e:f8:ba:55:66:e8:
eb:31:a3:3d:ae:4b:75:4a:b9:77:d2:72:bc:d8:dc:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:A5:5E:0C:5A:7B:A8:34:FA:40:3B:2C:D3:A6:60:94:3E:9D:7C
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/CtqlXgxae6g0-kA7LNOmYJQ-nXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:93:1c:7c:6f:3b:67:e5:91:9b:c0:d8:6a:1a:65:81:ae:de:
c2:b1:3c:eb:f6:0c:7f:ab:ee:6d:ea:c3:c8:fc:14:ab:04:2f:
50:63:3c:f4:00:fb:75:ad:52:75:d6:17:2d:34:52:b7:92:86:
aa:ee:a7:c7:47:24:04:f4:ae:25:9a:bc:ff:8d:a4:62:44:72:
17:64:d3:7c:76:7e:0c:bd:30:19:73:6c:82:e8:cf:b1:45:8d:
83:a6:57:f5:9b:31:e8:09:b7:05:7f:16:0f:37:62:61:f5:c2:
f5:2f:43:0f:15:b8:33:2b:65:8b:84:e0:4e:a4:2f:c7:da:ec:
7e:e2:c4:63:20:21:d2:28:f7:42:32:a1:f3:ab:09:d3:e2:20:
d4:e3:30:76:c8:f4:2b:a6:f4:22:94:40:89:cf:47:7d:37:a7:
c8:e5:5a:8f:06:7f:c0:b7:bf:2f:e3:0e:4b:f0:b1:4e:c7:c0:
3a:6c:92:68:fe:d2:d7:1f:7c:be:c1:85:13:7a:5d:46:b8:53:
95:63:d0:f9:7b:75:b9:d7:94:5e:85:93:10:de:65:b7:44:8b:
72:fc:77:6c:b1:51:dc:f5:f6:8b:8d:ad:28:f4:86:ee:2d:03:
c1:d6:ff:09:54:9e:25:0f:6d:24:72:40:44:f2:b8:39:df:2c:
f1:10:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:09 2024 by rpki-client on console-ams.rpki-client.org