Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Hn77aVVMGm2OdgFEQTkZ70tWeJk.roa
File: Hn77aVVMGm2OdgFEQTkZ70tWeJk.roa (raw, json)
Hash identifier: VuXNd28V3fmdgExA7L5xnoAKeDPnzhgzMbH1NwV+lrg=
Subject key identifier: 1E:7E:FB:69:55:4C:1A:6D:8E:76:01:44:41:39:19:EF:4B:56:78:99
Certificate issuer: /CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Certificate serial: 01856E0ADE14A18213DDD2D0BEA527BA61C1
Authority key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Hn77aVVMGm2OdgFEQTkZ70tWeJk.roa
Signing time: Sun 01 Jan 2023 15:54:44 +0000
ROA not before: Sun 01 Jan 2023 15:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 146.19.114.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:de:14:a1:82:13:dd:d2:d0:be:a5:27:ba:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Validity
Not Before: Jan 1 15:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7efb69554c1a6d8e760144413919ef4b567899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:8f:b2:f3:9f:d8:87:af:78:79:ac:f3:64:
50:db:f7:6c:74:4d:da:9d:bd:14:07:ee:ad:46:78:
3f:9c:9b:55:a3:ed:a1:cd:77:73:73:d4:9a:ff:90:
5d:79:38:5a:39:48:e2:c1:c4:d4:2a:27:61:c2:e5:
0a:fd:ce:4c:65:91:88:8a:75:7a:97:45:fd:ff:df:
cb:9e:1e:29:a7:e0:34:c4:d1:b5:ad:48:ea:39:61:
32:f2:c6:1b:d3:13:9d:56:8c:bc:b6:78:a6:0a:05:
59:14:97:06:56:8c:06:72:0c:1f:1d:b7:da:2c:aa:
d9:6f:b2:5f:43:ef:0f:3c:a8:63:cb:87:fd:45:a7:
3f:4a:96:98:74:e1:d7:07:f9:b9:4b:e2:09:29:82:
62:23:a7:fd:69:64:f3:27:c3:89:5b:54:55:97:99:
f7:83:11:13:80:87:79:0f:27:e5:c0:35:ef:f5:a3:
c6:cf:56:56:11:9e:01:2d:5e:ab:64:19:e8:19:03:
3b:27:b8:de:29:c9:73:8e:38:7a:e9:25:0b:79:66:
3c:38:85:65:6d:e8:36:f1:21:2e:1e:62:9e:7e:3f:
b4:e3:7a:43:ca:78:c2:71:bf:7b:3e:29:04:16:f3:
e5:0f:b8:c2:b4:6e:6e:b6:09:fb:df:0e:f3:ea:47:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:FB:69:55:4C:1A:6D:8E:76:01:44:41:39:19:EF:4B:56:78:99
X509v3 Authority Key Identifier:
keyid:B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Hn77aVVMGm2OdgFEQTkZ70tWeJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6f:1e:5b:1d:8d:dc:c8:63:0a:04:c0:cf:79:55:9a:81:da:
35:f9:7b:69:d0:13:97:71:29:0b:8d:e3:40:71:92:ca:13:6f:
06:44:ae:a2:bc:d0:98:95:45:a5:71:81:9d:aa:12:be:b5:17:
df:39:69:ee:4b:d9:ae:1f:1a:ba:44:b4:81:73:9b:15:9d:15:
65:a0:5f:43:a0:2a:40:85:2e:50:cb:67:ea:8d:e5:e2:69:03:
1d:6f:61:37:80:46:69:47:06:1f:9c:0e:67:45:be:82:7b:70:
81:c1:3a:2e:fb:c3:9d:40:b3:ae:50:d8:1b:f3:ce:05:b6:bd:
59:fe:9d:5e:70:c7:31:f4:e1:00:93:3c:94:07:26:6a:06:3e:
e8:3f:0b:c6:6e:62:29:fe:25:31:10:29:8f:37:ae:49:7c:88:
57:50:5d:3d:5d:eb:e4:b7:ad:fb:9c:55:33:f9:43:3c:02:23:
92:eb:7e:4f:24:ff:05:8a:51:67:f2:45:48:3f:10:74:d4:30:
fc:08:5a:de:24:34:5d:33:72:4d:b1:10:cd:16:91:50:ac:ca:
8d:fc:9d:a4:44:f4:5a:13:44:ae:71:1c:1b:b7:91:12:01:d5:
a8:73:84:a1:7a:10:5d:f9:1a:95:3b:50:3e:a6:29:fc:32:c2:
86:2b:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:50 2024 by rpki-client on console-fra.rpki-client.org