Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/CmPxF0d4gTa_bdqN9V_D18rqHRw.roa
File: CmPxF0d4gTa_bdqN9V_D18rqHRw.roa (raw, json)
Hash identifier: Pwe/xgDI7bE3AHSnuL6s+GXtnNdA4SUeYOXW0rmgP9U=
Subject key identifier: 0A:63:F1:17:47:78:81:36:BF:6D:DA:8D:F5:5F:C3:D7:CA:EA:1D:1C
Certificate issuer: /CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Certificate serial: 0184A1042BF4FF626A78028F6CDA5CD3B4DC
Authority key identifier: 25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/CmPxF0d4gTa_bdqN9V_D18rqHRw.roa
Signing time: Tue 22 Nov 2022 20:25:15 +0000
ROA not before: Tue 22 Nov 2022 20:25:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:04:2b:f4:ff:62:6a:78:02:8f:6c:da:5c:d3:b4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Validity
Not Before: Nov 22 20:25:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a63f11747788136bf6dda8df55fc3d7caea1d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:74:a1:9c:bc:f2:c5:e0:de:b8:3e:51:d0:
e8:df:50:4f:da:39:ff:cc:e5:40:44:bb:92:00:66:
bc:66:48:fd:f7:fe:09:4b:a6:b1:b3:fc:5e:ee:ed:
3a:bb:98:37:dc:a5:4a:2f:6e:73:13:8f:c4:8d:41:
15:42:ba:d8:fe:7e:48:b2:0d:57:2f:50:9f:8a:b7:
82:9d:c4:d4:50:d3:75:d7:b7:42:44:94:87:a9:a6:
c4:63:dc:a2:27:1f:6a:73:46:0a:8c:dd:7f:db:dc:
8a:2b:54:13:94:8b:ca:3e:e3:65:81:d5:32:1d:ee:
d7:c7:fb:09:a6:1f:1c:fa:57:28:f5:48:c5:1e:62:
99:54:a6:4f:67:3d:85:72:98:72:a6:f1:1b:5e:25:
a2:5a:c5:6f:ea:39:89:b3:65:5b:3d:7c:69:95:85:
69:19:b3:32:a9:77:e0:00:17:7b:83:4f:51:e5:30:
8d:a4:a7:83:94:a7:29:5a:01:37:bc:02:c5:e8:74:
51:88:4d:3e:dd:ba:17:d0:b3:df:82:f8:90:34:2d:
31:83:bc:65:88:22:46:6e:e8:1c:f0:48:a0:ef:e8:
c5:b3:d9:da:a7:c0:84:79:7f:62:bc:87:3f:1b:12:
10:eb:ab:a4:06:28:62:28:41:97:e3:16:da:c3:76:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:F1:17:47:78:81:36:BF:6D:DA:8D:F5:5F:C3:D7:CA:EA:1D:1C
X509v3 Authority Key Identifier:
keyid:25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/CmPxF0d4gTa_bdqN9V_D18rqHRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d2:b1:51:4d:c9:a3:e4:0c:af:c4:68:6e:c9:f1:aa:f6:6b:
d0:b6:b8:60:a5:f2:3e:cd:ef:42:df:45:3d:ad:4f:1b:e6:73:
07:4a:9d:1e:71:1e:7b:4a:b6:c0:03:b0:8e:6a:e7:a4:8d:db:
28:c1:0a:0a:aa:4f:00:0f:cb:86:ac:8b:22:2c:30:89:37:6c:
ce:bd:14:bf:c3:c8:bb:89:8f:f7:df:b3:e2:d9:36:c6:a3:51:
d0:c9:05:8b:1f:72:20:b0:ba:22:53:d3:d9:ff:9d:cd:9a:c1:
48:a6:09:01:37:57:d9:b9:c6:b2:69:7b:82:7f:8a:96:35:19:
53:3e:78:76:d6:bc:58:33:c3:6d:9e:7f:9b:ce:02:f7:cb:3d:
20:7c:37:42:e7:d0:3a:2c:02:b1:ed:22:81:d8:e9:32:d5:e2:
86:3c:7e:c8:c2:b5:cc:bf:ef:48:13:15:2b:c5:39:bd:ea:73:
47:06:25:08:44:c2:73:be:24:9f:9d:73:4b:75:46:51:96:07:
5a:33:cd:21:f2:09:4e:fd:14:c7:c4:c8:0d:68:16:14:ac:9b:
61:eb:31:5f:30:8f:d9:93:8b:2c:06:a7:62:fc:52:7f:fa:e6:
03:95:1f:ab:f1:b6:34:2a:8e:33:a8:6e:ec:c8:3b:ee:1f:14:
76:c5:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-fra.rpki-client.org