Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/ty_EDg-mYoepHX9uoykTGcag_MI.roa
File: ty_EDg-mYoepHX9uoykTGcag_MI.roa (raw, json)
Hash identifier: I7p1BvB2xNJhTQqtJ52X9QM5lQs6K/2otgE9LGDNGmk=
Subject key identifier: B7:2F:C4:0E:0F:A6:62:87:A9:1D:7F:6E:A3:29:13:19:C6:A0:FC:C2
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 0184CD0B9D2550DF356F7DC5D1A3CE65238C
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/ty_EDg-mYoepHX9uoykTGcag_MI.roa
Signing time: Thu 01 Dec 2022 09:36:41 +0000
ROA not before: Thu 01 Dec 2022 09:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206216
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:0b:9d:25:50:df:35:6f:7d:c5:d1:a3:ce:65:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Dec 1 09:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b72fc40e0fa66287a91d7f6ea3291319c6a0fcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:14:66:9f:70:c3:1f:8a:8c:70:37:da:95:
4c:30:10:ca:c3:d0:70:bd:1c:78:31:74:1a:5b:72:
12:41:52:41:5c:26:35:1f:d9:2f:55:49:5f:5a:fb:
d6:b3:f1:4f:f0:c5:d3:59:21:3e:a5:d2:23:15:3c:
55:a4:b4:08:03:3b:ce:c9:36:6d:0c:df:e3:d9:fa:
da:88:61:de:6f:74:65:65:ad:08:bc:c7:78:a5:89:
cf:bf:56:f3:be:d1:80:ab:fb:f1:cc:af:ab:5d:90:
12:21:55:b7:04:04:6e:15:eb:9e:c9:dc:9d:7f:21:
4b:b7:35:a4:71:ed:7f:bb:eb:89:8a:ad:e8:6a:64:
e9:76:c7:10:8d:58:b8:f7:37:a3:95:67:0b:e6:40:
00:8c:4d:b7:ce:f7:26:ae:f4:4b:6e:ee:30:63:0b:
ed:f2:89:7c:53:03:2e:b6:c9:9a:33:37:6e:1b:cd:
2b:aa:0b:f8:43:0c:c0:82:c4:ef:f5:1a:30:2f:ce:
bc:85:95:5c:f9:0d:f4:79:fb:bd:a5:b1:02:9e:d5:
f8:80:35:43:ed:6d:e8:03:9b:15:15:0b:99:fc:15:
b1:ed:76:2b:b9:5c:54:8c:cd:d9:c9:18:21:82:c5:
55:fe:4a:8a:3c:c2:c8:ce:3e:3f:1f:e0:cc:77:34:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2F:C4:0E:0F:A6:62:87:A9:1D:7F:6E:A3:29:13:19:C6:A0:FC:C2
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/ty_EDg-mYoepHX9uoykTGcag_MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:c7:41:ce:2c:fa:a0:5a:d4:b8:07:96:d0:9d:52:e2:49:
fa:30:3e:bf:ac:95:24:2e:1d:e8:56:70:d9:e2:39:d7:61:33:
22:20:11:ba:c4:9f:19:4f:8a:10:61:ce:bf:fc:7a:e8:f6:c1:
8d:49:03:35:da:85:08:8f:49:a0:4d:16:02:f6:50:87:ef:b6:
1b:8d:ee:33:31:57:0c:e3:41:fb:82:40:1a:77:e3:66:77:38:
4f:c6:1a:83:54:3c:2f:71:ab:7d:35:35:b5:58:44:14:2a:7f:
15:57:89:bc:e0:1e:9c:b1:b2:c3:dc:87:3a:bb:a5:9e:db:f3:
03:41:38:ad:66:1d:59:02:8c:e2:b8:30:35:73:33:5a:b9:7f:
17:17:cc:09:a1:50:d3:65:63:95:2f:56:a3:3c:3c:12:e2:1b:
b3:24:84:de:3e:f6:df:6e:de:f8:2c:47:db:90:4c:3e:c8:ec:
48:99:98:8d:f2:73:d7:f0:d7:e3:3d:82:ed:01:31:50:e1:6b:
7f:f1:6e:85:94:34:68:c9:a8:19:2b:b1:cf:28:82:0b:ba:e0:
84:08:40:5e:28:bb:2a:29:1b:64:cb:4f:3b:e8:49:98:89:b7:
0f:b0:26:1b:cd:30:1d:76:e7:0e:77:d4:68:8c:2f:05:ab:71:
ab:b7:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:09 2024 by rpki-client on console-ams.rpki-client.org