Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/NR8UXrSSvDTTv6txjZudGXFBMEk.roa
File: NR8UXrSSvDTTv6txjZudGXFBMEk.roa (raw, json)
Hash identifier: hYorxoX/+3GW6+WGUgILrhukSdGEbgfGb5/zNwXZ5ZQ=
Subject key identifier: 35:1F:14:5E:B4:92:BC:34:D3:BF:AB:71:8D:9B:9D:19:71:41:30:49
Certificate issuer: /CN=c9db05794792cae4ce3e6a53eb17e39eeb56a924
Certificate serial: 018570DE682FAB95763AEF75CFBB6AA9D3E5
Authority key identifier: C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/NR8UXrSSvDTTv6txjZudGXFBMEk.roa
Signing time: Mon 02 Jan 2023 05:05:01 +0000
ROA not before: Mon 02 Jan 2023 05:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:68:2f:ab:95:76:3a:ef:75:cf:bb:6a:a9:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9db05794792cae4ce3e6a53eb17e39eeb56a924
Validity
Not Before: Jan 2 05:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=351f145eb492bc34d3bfab718d9b9d1971413049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:67:65:de:61:34:52:b1:d9:2c:a2:64:ad:
1e:23:4e:9d:cb:16:ee:c6:60:66:c3:99:5f:71:da:
b8:6d:1a:cd:60:ab:da:53:a5:01:d4:81:5b:90:5b:
3a:17:22:9c:28:53:97:78:57:01:28:2f:be:71:70:
ac:df:03:3e:96:50:93:15:b5:53:44:ef:16:1c:f9:
c6:8c:4c:71:2c:ae:5e:0a:52:9d:32:69:e4:6f:e5:
2c:c7:3c:2d:b1:4b:70:a1:39:89:b1:35:de:e7:fc:
87:21:71:63:f3:53:89:08:cc:93:a2:48:91:36:d8:
51:d5:b4:2c:0c:0c:07:9c:9c:4b:4a:83:30:d2:4a:
d8:f8:f4:1c:e0:b0:1b:64:c5:d5:90:ca:b4:0d:7b:
d1:45:47:ac:a3:0e:5e:02:27:65:2b:c2:49:25:ef:
76:0d:11:72:c7:76:76:db:8c:ff:2e:61:15:63:ee:
97:93:c6:e6:7c:25:64:08:77:6d:54:9b:a1:1c:8d:
03:77:09:e1:4d:91:53:58:c4:89:60:dc:6b:90:a4:
0e:aa:0c:c7:bb:4f:4b:ff:20:96:a7:8b:42:2a:76:
49:60:4d:82:58:ee:89:41:20:48:e4:e5:80:87:7e:
8f:1d:fa:cc:19:4f:52:9b:e6:ae:c1:4d:b2:fd:5e:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:14:5E:B4:92:BC:34:D3:BF:AB:71:8D:9B:9D:19:71:41:30:49
X509v3 Authority Key Identifier:
keyid:C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/NR8UXrSSvDTTv6txjZudGXFBMEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/ydsFeUeSyuTOPmpT6xfjnutWqSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.187.0/24
Signature Algorithm: sha256WithRSAEncryption
33:49:1f:d5:75:59:ef:0e:57:2a:f3:10:9b:79:f6:cb:e3:85:
98:81:bd:43:17:09:7d:a7:43:a1:1a:38:66:9d:bf:7f:89:e7:
9c:89:e3:0c:ba:37:af:e8:79:dc:e2:5e:45:23:0b:33:5d:f9:
3d:7b:78:20:14:67:64:a7:71:17:92:26:6a:38:ce:24:41:66:
50:e0:50:ed:9d:a5:86:23:6a:8d:cd:e9:5b:83:24:71:07:6a:
96:1a:ab:24:4d:64:da:59:0c:35:5e:1c:23:6e:37:fa:3e:db:
22:a9:bb:4e:a6:fd:c9:13:d6:a3:42:12:ca:39:cb:48:67:b2:
dd:44:43:d9:6f:70:e9:34:83:d0:a4:3d:c5:53:b8:7c:38:d9:
72:a0:6d:e4:9d:79:f2:e7:76:fd:60:c5:2f:ed:02:23:a2:5f:
6a:05:02:8a:0e:8e:85:c3:eb:09:af:75:8e:6c:7c:e6:c0:04:
e1:8f:57:56:29:ab:c0:3e:44:74:b8:f8:a9:c8:17:c5:4b:37:
8a:23:8f:15:78:61:26:f6:93:26:37:b7:35:20:ed:6b:60:9d:
55:35:87:c0:69:49:ef:d9:8d:64:21:da:3c:7e:0b:5a:53:cc:
55:5c:7a:46:e9:0d:cf:9e:59:f4:c3:de:a4:1a:c8:e0:49:7c:
49:c5:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:07 2024 by rpki-client on console-ams.rpki-client.org