Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/QhTOu6HbsY8GdbYbGbXgzoWChfw.roa
File: QhTOu6HbsY8GdbYbGbXgzoWChfw.roa (raw, json)
Hash identifier: VHYuXK7Z4HcColpdkLj58XOfNJKogQcTRQ3JDJHgHlo=
Subject key identifier: 42:14:CE:BB:A1:DB:B1:8F:06:75:B6:1B:19:B5:E0:CE:85:82:85:FC
Certificate issuer: /CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Certificate serial: 82A9
Authority key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/QhTOu6HbsY8GdbYbGbXgzoWChfw.roa
Signing time: Sun 06 Mar 2022 07:57:19 +0000
ROA not before: Sun 06 Mar 2022 07:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50131
IP address blocks: 146.19.114.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33449 (0x82a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Validity
Not Before: Mar 6 07:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4214cebba1dbb18f0675b61b19b5e0ce858285fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:38:59:e8:f0:5a:ad:27:51:97:6b:7d:14:
25:15:6d:2d:20:dc:19:a2:6a:bb:44:81:d0:9e:b9:
1e:8d:2c:dc:25:a8:e9:4e:e9:5c:28:09:18:dd:6e:
d4:2f:28:9e:94:ac:31:00:7a:08:ec:b7:e0:bb:87:
58:9a:1a:29:37:16:4f:3d:58:3c:d0:25:77:32:e7:
d8:c4:e8:d7:7a:9c:5a:3b:fd:04:24:7a:7e:b3:73:
18:e1:c9:cc:5e:a8:80:8d:2f:17:c1:1c:05:57:87:
0b:4b:73:c0:04:49:04:7e:80:dd:c6:84:61:32:55:
b9:83:8e:75:56:c6:82:ce:b8:09:7f:65:37:61:f7:
e6:d1:50:3f:33:09:20:cf:3b:6e:51:9e:bb:c2:47:
2b:e8:d2:38:e9:56:ea:f7:18:de:98:9d:b6:ef:1a:
12:ca:b2:62:47:dd:12:1f:9e:ec:53:a5:90:2a:d8:
85:f0:59:d9:e0:d7:ed:ec:78:97:10:14:e0:d9:54:
4c:2c:be:41:8c:b1:1a:1a:20:f4:d0:15:8b:5c:6d:
e4:06:3a:3d:43:96:96:93:1d:98:d3:fb:ba:bc:ad:
2a:f3:d5:ac:06:0b:ad:98:ae:9a:aa:91:d6:52:b4:
e1:cd:4d:0e:ab:25:97:ea:cf:be:c2:77:b7:b6:a8:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:CE:BB:A1:DB:B1:8F:06:75:B6:1B:19:B5:E0:CE:85:82:85:FC
X509v3 Authority Key Identifier:
keyid:B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/QhTOu6HbsY8GdbYbGbXgzoWChfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.114.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ec:24:88:2f:f5:ba:d6:cf:f8:d5:7e:e4:5d:7a:33:53:d2:
33:b6:4c:2c:f7:27:ed:cd:2e:09:24:78:21:86:b3:96:64:3a:
af:be:1c:71:d6:b3:cd:6f:2c:ce:f5:02:be:59:bd:16:51:69:
70:0d:f5:66:3b:e8:4e:93:5a:99:7f:2a:f2:f4:ba:47:ac:9c:
bc:b3:06:40:62:9d:bb:ec:73:9e:ec:f9:29:7b:e7:0a:65:12:
3a:8b:53:55:f0:4b:f2:ed:a9:c4:69:83:60:79:e0:3f:4a:74:
17:2a:d2:e6:6f:f4:00:59:5d:66:4b:37:f0:0e:08:16:8c:71:
df:80:c1:98:49:0a:9c:21:41:5e:c9:e0:f4:04:6f:6e:d8:5c:
0f:58:63:c3:87:b6:58:79:e5:14:9f:62:32:d5:49:e7:0c:fb:
3a:87:95:4c:c1:18:8e:56:21:36:e2:61:2c:2f:e2:98:ea:b6:
88:56:71:11:ad:97:0d:8b:39:95:32:58:a0:7c:20:99:b7:bf:
7a:73:ff:85:1d:ee:5c:e9:42:87:e4:69:53:6e:81:ec:ab:62:
5a:3b:ae:8d:90:6c:cf:ac:6f:11:db:bd:99:ca:06:c4:c4:db:
4c:77:83:03:0e:5b:81:74:8b:e1:cb:1f:d0:e3:58:f1:1c:56:
4c:f5:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:17 2024 by rpki-client on console-ams.rpki-client.org