Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/W1haVynR9Zf09KaZciKWlKm6sgc.roa
File: W1haVynR9Zf09KaZciKWlKm6sgc.roa (raw, json)
Hash identifier: ogNI6gdKyKUc8tg7FvjM8I1JQKTHLGAyQ1uGhWp7iLY=
Subject key identifier: 5B:58:5A:57:29:D1:F5:97:F4:F4:A6:99:72:22:96:94:A9:BA:B2:07
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 01862CDD0C4241E58B982D4994F2EC2D7F7C
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/W1haVynR9Zf09KaZciKWlKm6sgc.roa
Signing time: Tue 07 Feb 2023 17:12:09 +0000
ROA not before: Tue 07 Feb 2023 17:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:dd:0c:42:41:e5:8b:98:2d:49:94:f2:ec:2d:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Feb 7 17:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b585a5729d1f597f4f4a69972229694a9bab207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:67:6e:74:a5:16:d3:ac:17:f8:98:c7:ac:
9d:67:18:61:e2:ca:be:cb:43:bf:b2:c4:84:f0:76:
0d:da:d7:7e:13:2e:23:07:5b:95:8f:2f:c4:1a:bf:
82:e9:b6:9b:dd:20:75:64:ce:f2:d3:0e:81:00:8d:
61:f9:53:3a:0e:4c:88:b8:f2:be:e5:f2:47:1c:d3:
51:c8:31:8d:b8:b2:b8:b5:6e:d6:83:cc:07:ba:45:
23:06:83:f5:f3:af:f0:cc:2a:47:1e:cf:e0:dc:80:
9d:56:46:19:c9:9b:8f:77:2d:ff:83:9d:27:7f:65:
96:3f:db:dd:fe:b5:c7:45:ee:8d:3d:06:2c:f4:7c:
25:bf:2d:04:58:82:07:83:bd:8f:d7:6c:51:b0:fe:
b6:46:2d:40:60:af:a1:b3:9c:a1:b5:08:36:20:8c:
d4:29:a9:91:ce:80:34:46:48:52:46:a5:8c:d2:c1:
20:a2:58:95:86:5d:88:59:3a:cd:df:5f:87:c4:ea:
21:71:03:c9:15:80:7a:52:4b:ff:dc:70:ac:8c:18:
a8:a9:ec:2b:56:7d:de:b8:bd:5b:3b:30:bd:c1:3d:
6b:87:67:25:75:34:89:41:df:55:ae:7b:65:52:07:
6f:93:a1:70:97:b7:36:bd:df:91:e5:e9:5d:93:db:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:5A:57:29:D1:F5:97:F4:F4:A6:99:72:22:96:94:A9:BA:B2:07
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/W1haVynR9Zf09KaZciKWlKm6sgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8f:4d:65:ee:b7:4c:c3:d8:63:08:ff:5f:e6:33:64:da:f1:
9d:69:64:51:75:be:a5:e2:ed:39:8f:3f:5a:6b:d3:e9:43:86:
ad:79:14:17:89:99:76:51:3a:ce:d8:37:6f:d6:9d:7d:46:4f:
f7:2f:db:6d:1c:85:7b:9e:6e:00:10:04:a4:87:51:9f:3e:26:
50:6c:2e:42:6b:29:13:88:41:95:e3:66:9e:bb:00:87:de:28:
83:93:fd:22:01:23:dd:b6:ef:fc:af:76:a9:dd:7c:a4:d1:88:
97:71:25:e1:3b:1e:4b:24:36:d7:c7:13:05:fc:00:17:10:e9:
2c:bb:8f:5f:23:4e:2d:19:22:a7:bb:66:fa:48:23:7d:0a:00:
90:98:79:0b:e5:fe:88:49:ce:03:09:5a:cc:95:7a:fa:f9:5a:
ee:ba:e1:a3:54:ac:c6:9c:3e:a7:4e:25:00:76:57:c1:2a:be:
dc:30:80:1d:80:35:7c:6c:87:9d:b9:a8:1d:28:28:f7:27:34:
2c:dd:69:d7:84:58:e6:a6:2d:ba:d9:8e:1b:4b:f3:4a:20:bd:
44:a9:16:89:cc:ed:5a:ea:3e:cf:85:b9:09:8d:e5:be:29:22:
0c:a9:4b:49:1b:0c:2b:a8:e2:35:c0:72:14:1f:a5:bb:35:8c:
b7:d2:74:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org