Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/FrAYVhIL5QZSmZnVeXXaDcJqeM0.roa
File: FrAYVhIL5QZSmZnVeXXaDcJqeM0.roa (raw, json)
Hash identifier: 1epa8uslUEOmEDJghMi+s0e0PtU0/3rBop1AzWUbNIo=
Subject key identifier: 16:B0:18:56:12:0B:E5:06:52:99:99:D5:79:75:DA:0D:C2:6A:78:CD
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 01856F9DC1F80EFE94616D38D6D40F5FB24D
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/FrAYVhIL5QZSmZnVeXXaDcJqeM0.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206216
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c1:f8:0e:fe:94:61:6d:38:d6:d4:0f:5f:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16b01856120be506529999d57975da0dc26a78cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:c9:fc:21:3c:56:c4:6e:78:9b:a7:49:e5:
b3:62:12:9a:8c:e8:69:6a:2e:13:8e:05:25:56:95:
75:ae:2a:a1:ac:28:12:65:f1:e3:08:0b:2b:21:4b:
05:a5:d0:b1:25:86:4b:39:fd:48:04:5e:05:4b:cd:
72:10:9e:94:dc:d8:6c:84:c4:8d:de:81:75:bf:07:
c4:14:96:48:1b:73:96:c2:8b:17:30:b6:46:26:5f:
88:33:ab:c1:53:4d:46:0d:f6:fa:44:ac:8f:c8:22:
23:e8:2f:3e:d0:e2:66:ab:b3:74:61:13:03:ff:fc:
ca:fc:d6:8f:b0:72:ba:72:fe:41:b8:59:50:36:11:
ab:62:34:e2:49:96:90:c0:1c:d7:05:b2:1a:f2:ea:
50:2f:e4:9b:4d:70:6d:fb:1c:b2:db:be:7d:16:81:
e1:91:17:8e:35:fd:ee:e7:06:9c:f0:08:9a:5b:45:
ca:29:a9:13:07:8c:ad:a7:38:14:9d:86:22:3f:15:
ff:38:b9:f0:e8:29:4c:b2:33:36:3c:88:8c:8a:b4:
2c:87:51:e6:07:e6:ab:74:b2:22:ee:d4:52:67:ff:
ba:d7:76:a5:7e:3b:de:5b:e1:d9:30:a7:d6:ec:b2:
0b:36:ea:d3:5b:67:a9:94:20:70:d1:ed:fd:4f:e6:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:18:56:12:0B:E5:06:52:99:99:D5:79:75:DA:0D:C2:6A:78:CD
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/FrAYVhIL5QZSmZnVeXXaDcJqeM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2f:69:85:c7:9c:8f:56:17:d8:bf:5d:05:9c:54:ab:b5:3d:
98:ef:0a:6c:bd:69:50:d0:45:7f:6e:65:b0:17:91:83:b5:f2:
00:70:8a:b5:3a:ff:b6:50:d7:fa:9c:78:d1:0b:7b:d9:89:d5:
c4:a5:d7:f0:7d:ed:7b:41:45:be:22:2a:c7:25:47:db:da:96:
55:48:8c:2a:77:40:cc:6b:d3:39:18:37:68:11:60:b2:0b:24:
f2:b3:6f:ca:b3:e6:95:28:35:b9:69:e3:eb:de:d9:5f:84:46:
fc:cb:56:39:a1:62:7a:bd:79:e9:67:39:38:71:1c:87:49:8d:
4e:c5:cb:f3:4a:52:8d:f9:f5:7d:76:85:ec:16:30:d0:69:cb:
5a:39:5f:fe:bc:48:75:57:6a:a4:42:d4:e0:b4:c0:92:3d:bd:
68:4b:57:ff:dd:04:f8:14:da:f5:b4:f5:5d:0f:27:a1:9e:3e:
db:9c:dd:45:24:c1:f9:84:23:07:d1:56:61:a4:23:14:43:32:
e6:ba:34:3f:0a:0d:93:a2:4b:ba:0d:b3:1a:9a:0c:18:dd:85:
e5:84:83:68:dd:92:55:92:e2:4c:d9:34:0e:83:7f:6d:4b:d1:
99:90:c3:dd:85:8d:5f:9c:46:78:50:5b:70:ed:6d:05:4c:6e:
72:f1:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:09 2024 by rpki-client on console-ams.rpki-client.org