Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/V0Vwz380aDG5IlgTiOJeBA2qu3c.roa
File: V0Vwz380aDG5IlgTiOJeBA2qu3c.roa (raw, json)
Hash identifier: cFbV77pavtwHg0U92T8Rme4pS/ISoZw2aMSpn4MzSsc=
Subject key identifier: 57:45:70:CF:7F:34:68:31:B9:22:58:13:88:E2:5E:04:0D:AA:BB:77
Certificate issuer: /CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Certificate serial: 01856FC2498937DDFDC1FE35B9171CB623C6
Authority key identifier: AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/V0Vwz380aDG5IlgTiOJeBA2qu3c.roa
Signing time: Sun 01 Jan 2023 23:54:41 +0000
ROA not before: Sun 01 Jan 2023 23:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 146.19.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:49:89:37:dd:fd:c1:fe:35:b9:17:1c:b6:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Validity
Not Before: Jan 1 23:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574570cf7f346831b922581388e25e040daabb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:5b:26:55:47:81:95:92:70:b2:76:4e:3e:
a0:09:39:dd:dd:26:34:3e:b0:c5:50:aa:92:cd:3e:
0a:3c:23:9e:39:fb:92:4e:7c:18:97:ec:31:31:1c:
62:ee:da:d7:65:70:54:8b:b7:98:46:1c:25:72:cf:
7c:a7:31:11:71:42:ca:a2:d8:48:38:1a:d9:53:0e:
60:5e:13:09:9c:37:c5:99:d0:59:db:2d:e1:5c:09:
ff:b2:52:de:bf:35:70:4e:53:b2:47:45:43:d7:bf:
e0:07:73:30:98:32:1a:17:0b:e2:a2:ff:ed:0d:34:
10:9f:81:63:b3:cb:53:b3:58:29:d1:d8:0f:92:f2:
f4:98:d4:5e:b0:0d:26:b7:42:8d:2c:35:91:fd:ed:
8a:9c:4f:a7:c3:81:1a:cd:5e:da:0b:88:ce:3d:d3:
44:47:6e:6e:d2:8e:f7:6b:9f:40:ae:d2:aa:b2:04:
a6:15:2d:66:87:0f:92:1a:8b:48:80:37:98:18:c8:
8e:8e:61:ee:84:de:e4:86:da:a0:57:be:cd:ef:67:
63:05:88:e3:c0:1c:cf:89:1f:19:8e:4d:fa:30:ea:
1b:3d:78:00:64:25:14:52:89:31:7f:c6:26:76:cf:
d3:b4:4f:2f:5e:d8:80:2e:48:ed:fe:ce:f2:8b:d8:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:70:CF:7F:34:68:31:B9:22:58:13:88:E2:5E:04:0D:AA:BB:77
X509v3 Authority Key Identifier:
keyid:AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/V0Vwz380aDG5IlgTiOJeBA2qu3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:60:ca:1b:a9:a8:11:15:29:b4:20:0f:6a:40:53:dd:96:cc:
71:af:0b:c7:5c:2f:a6:d4:ce:80:42:eb:5a:cd:84:1d:09:33:
77:5f:c1:8f:4e:a8:c2:9a:29:54:f0:83:f3:32:a8:62:8d:5b:
95:26:3c:07:3d:a0:7b:77:4a:f1:72:10:b0:ce:15:3f:47:cb:
c7:00:be:9e:50:8e:71:51:a1:5a:66:9b:fc:9b:8e:97:11:e1:
cf:13:42:41:8c:23:ec:c0:92:d0:47:d7:b8:5f:0e:ee:d2:3e:
b7:1c:32:58:18:a6:31:af:8e:d4:2d:85:45:ff:d7:14:aa:38:
12:3c:c8:32:42:d9:17:e3:1a:78:e6:0e:93:50:34:67:db:3e:
62:23:bb:3e:82:62:fb:a8:25:b5:6d:c9:b2:e0:bf:26:c8:71:
45:16:3e:62:a4:4e:26:df:21:e5:4d:27:0f:2d:bd:cb:91:41:
af:a3:25:c1:a4:eb:0a:49:72:75:ef:4f:94:d3:79:54:66:2d:
c3:b7:ad:0b:e4:c4:af:a6:48:f1:e3:aa:d4:b4:09:a9:a9:3e:
e4:54:32:87:24:c0:46:0e:28:d8:89:03:96:2b:31:11:fb:e7:
e7:e1:e2:22:1d:3b:2c:8e:b9:42:4a:01:68:42:53:ed:8f:52:
b3:d5:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:48 2024 by rpki-client on console-ams.rpki-client.org