Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0H08NaC-DU8NomFCKic7oEPeHYQ.roa
File: 0H08NaC-DU8NomFCKic7oEPeHYQ.roa (raw, json)
Hash identifier: MyyCl3zuXGPa8/WEl2hcEY6mc3MbDSVlShj+NdstgEQ=
Subject key identifier: D0:7D:3C:35:A0:BE:0D:4F:0D:A2:61:42:2A:27:3B:A0:43:DE:1D:84
Certificate issuer: /CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Certificate serial: 0187EC5CEB347E7596ECBCBB7835247CA41C
Authority key identifier: 25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0H08NaC-DU8NomFCKic7oEPeHYQ.roa
Signing time: Fri 05 May 2023 14:42:05 +0000
ROA not before: Fri 05 May 2023 14:42:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:5c:eb:34:7e:75:96:ec:bc:bb:78:35:24:7c:a4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Validity
Not Before: May 5 14:42:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d07d3c35a0be0d4f0da261422a273ba043de1d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:c1:5e:0a:a6:f5:9d:2a:ca:7b:21:3e:4e:
73:ee:eb:59:f0:09:1c:8d:53:35:05:e1:c5:5b:42:
3d:2c:c9:1c:b0:52:f5:68:da:ac:e6:d6:5f:16:6e:
74:8a:09:69:63:4f:a4:65:85:80:37:22:12:1b:f5:
1e:50:e2:cd:c6:6e:99:c4:01:3f:66:e8:c8:4a:03:
27:bc:db:b8:7c:23:2a:a0:57:1f:db:b8:56:df:e1:
10:31:53:c6:cd:75:86:a6:f8:7e:c7:c4:1e:e8:ba:
9e:c1:69:86:06:1b:44:85:06:3a:3e:6a:73:d2:bf:
2f:fb:c5:43:80:b4:5a:ea:8a:92:48:f8:d7:60:ea:
1b:1a:f4:22:0b:3d:ef:50:44:48:8f:24:37:5f:d5:
2d:32:02:a3:ab:49:0b:a6:5e:bb:79:b0:b1:70:4b:
31:68:ef:85:4c:79:25:e8:f8:96:58:3a:60:7a:8e:
cc:0e:ae:49:28:43:52:f4:01:55:c5:5c:bd:2c:0b:
e6:09:60:bd:69:28:3a:64:03:bf:15:2c:4c:eb:d3:
5d:5c:cf:ad:aa:d7:a0:f0:9e:09:ab:63:42:f0:9f:
b6:6e:98:16:d5:1a:44:cf:eb:14:7f:af:ae:f8:94:
71:cc:d6:44:79:70:f7:ed:f6:56:9f:b8:ae:ab:4d:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:3C:35:A0:BE:0D:4F:0D:A2:61:42:2A:27:3B:A0:43:DE:1D:84
X509v3 Authority Key Identifier:
keyid:25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0H08NaC-DU8NomFCKic7oEPeHYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
54:90:53:aa:1e:a5:59:83:a8:65:0c:00:0e:dd:30:ad:f6:f1:
f5:94:f7:ab:52:f1:9e:9a:2b:e8:05:1b:df:8e:ec:ff:5d:1b:
98:39:7b:23:52:eb:e3:57:4f:9a:d4:0c:72:a7:97:51:b7:4a:
74:0c:d0:67:62:0e:56:cd:b0:99:fe:6b:36:52:e0:24:11:36:
14:17:7d:e3:97:07:91:9d:66:32:04:45:f1:75:50:24:9a:ed:
bd:78:88:34:a4:e7:aa:45:e7:ec:6f:87:7b:c7:01:c0:b1:17:
e4:01:ac:99:e1:0a:fb:0d:35:01:80:74:74:b6:bf:e2:95:1c:
03:42:50:8d:09:3e:8a:ab:a0:85:da:ab:45:4f:3c:d1:e8:b1:
17:3c:60:8f:6d:af:e4:48:f2:14:80:69:22:a0:10:e1:8d:53:
9d:d2:c2:44:6d:70:43:cb:1a:5a:36:56:92:fc:b3:aa:b6:2b:
8a:ea:30:b1:4e:38:a9:ff:2f:ab:5b:fe:21:a4:64:11:66:a1:
d5:59:eb:d1:fa:b8:2f:27:bb:0a:f4:21:fc:3a:4a:53:20:a9:
16:37:b0:be:78:65:88:25:3f:ba:c0:58:6f:c5:8b:9e:4f:48:
69:82:ff:7b:17:4e:fd:b9:aa:b0:98:0b:a5:d9:a7:23:cb:31:
36:4e:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org