Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/l9r9ZQjQ4NVlsNcDon0JskT_ATU.roa
File: l9r9ZQjQ4NVlsNcDon0JskT_ATU.roa (raw, json)
Hash identifier: liH8No3pvLpDk2FR+4XIuvqmXDX+fgdzsjznAESFSWA=
Subject key identifier: 97:DA:FD:65:08:D0:E0:D5:65:B0:D7:03:A2:7D:09:B2:44:FF:01:35
Certificate issuer: /CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Certificate serial: 01856FC24AC2C705EBAD731AB33F6B7A0E7B
Authority key identifier: AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/l9r9ZQjQ4NVlsNcDon0JskT_ATU.roa
Signing time: Sun 01 Jan 2023 23:54:42 +0000
ROA not before: Sun 01 Jan 2023 23:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 146.19.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:4a:c2:c7:05:eb:ad:73:1a:b3:3f:6b:7a:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Validity
Not Before: Jan 1 23:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97dafd6508d0e0d565b0d703a27d09b244ff0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:77:41:29:d5:15:41:fc:e7:49:be:09:59:
99:79:02:94:78:7d:37:f6:3c:ce:f2:b8:13:a6:5c:
44:06:1c:50:1b:01:d4:3d:9e:36:9f:b7:a6:0f:fe:
75:d1:ae:e4:73:9d:82:74:62:a3:ca:7b:c4:9a:16:
2a:05:3f:d1:85:d4:e8:47:ad:e8:bc:30:d7:8f:d3:
4e:33:8e:81:7a:7e:1a:5e:2c:0d:24:4f:ea:c3:14:
2e:e5:ac:86:66:58:0c:3f:d0:e5:87:43:4d:b4:2d:
ff:9a:01:c1:24:4c:81:ee:7c:58:62:33:3c:f8:99:
c5:6c:94:ae:d4:e5:9a:8a:f6:6f:7e:34:1e:d2:73:
66:1e:a3:da:e3:92:5f:f1:0a:d1:5e:10:7d:88:06:
0c:a2:ab:51:73:14:2f:74:ff:eb:c7:4a:22:88:02:
75:fa:eb:df:41:27:a0:11:4a:93:64:c7:43:aa:9f:
4e:81:ef:26:50:ed:6f:1c:da:23:9c:b4:4d:f1:ff:
56:03:66:bc:9b:9b:75:d2:4a:49:48:c7:0b:c3:d4:
6e:2a:99:52:50:fc:40:a0:51:d4:ac:d0:21:d0:df:
41:d7:f7:57:d0:eb:3d:9e:c1:42:1f:00:3c:f7:5c:
38:5a:48:e6:a9:57:75:7e:73:93:f9:04:7f:9a:1b:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DA:FD:65:08:D0:E0:D5:65:B0:D7:03:A2:7D:09:B2:44:FF:01:35
X509v3 Authority Key Identifier:
keyid:AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/l9r9ZQjQ4NVlsNcDon0JskT_ATU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9a:8a:8c:e8:96:84:44:f4:c8:93:b1:4e:f1:c7:77:c5:cd:
e6:4a:85:2d:05:7e:1f:ef:65:37:44:3a:d5:9d:77:f5:60:5c:
ce:dc:fe:20:29:75:46:95:f9:13:70:3c:dc:1a:78:8c:89:05:
9f:30:47:9f:09:73:fc:90:7d:2c:f9:ed:d5:3a:5e:00:1f:4a:
fa:51:b3:d6:7a:be:05:1a:86:e6:2d:9b:92:c2:fc:f3:11:6f:
ab:b0:b7:b0:f0:90:64:b6:5e:3c:fc:39:1b:c0:70:a8:d7:84:
8d:ef:30:e1:d5:fb:44:58:c9:ba:90:54:94:8c:ac:49:6e:82:
1b:bd:fe:b2:54:50:01:bf:6f:fa:0b:98:eb:94:4a:1c:f9:1c:
53:4e:4c:88:d3:62:7d:8a:ae:15:e6:87:31:b0:cf:27:23:cc:
a3:50:25:dc:ca:95:e2:6d:80:0a:85:34:9a:95:eb:1c:4d:e8:
d4:ae:69:19:a3:a3:fb:5c:a3:d7:78:e4:76:3b:2d:da:a5:ac:
d5:4d:dc:b2:10:2b:37:88:66:4a:e8:79:8e:64:8f:4c:48:ad:
ad:00:90:39:48:71:f2:ad:0e:29:af:95:d0:cd:67:d6:15:d3:
ec:a7:6f:ca:8d:75:10:4d:c6:4f:92:cf:7d:3a:5d:60:25:e8:
79:62:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:48 2024 by rpki-client on console-ams.rpki-client.org