Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/iN43kPXylNDX3a4dBRBwOKkS994.roa
File: iN43kPXylNDX3a4dBRBwOKkS994.roa (raw, json)
Hash identifier: q5wbuJLHW7HZNvvoCWNT8esMdp3ZHlTu6p3vfFm8fRo=
Subject key identifier: 88:DE:37:90:F5:F2:94:D0:D7:DD:AE:1D:05:10:70:38:A9:12:F7:DE
Certificate issuer: /CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Certificate serial: 01856E0ADF87E2F0BA2147176FFFB9B48889
Authority key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/iN43kPXylNDX3a4dBRBwOKkS994.roa
Signing time: Sun 01 Jan 2023 15:54:44 +0000
ROA not before: Sun 01 Jan 2023 15:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 146.19.114.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:df:87:e2:f0:ba:21:47:17:6f:ff:b9:b4:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Validity
Not Before: Jan 1 15:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88de3790f5f294d0d7ddae1d05107038a912f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:da:8f:11:b8:c7:b0:5d:be:0f:6f:34:3d:
e0:61:ff:3b:07:9f:63:b5:df:98:bd:10:f3:dc:9a:
7c:8a:ee:fe:49:66:51:70:ce:14:4e:c4:ec:98:68:
f1:73:1f:9a:14:b5:ce:18:f0:4f:97:a5:7c:d6:35:
61:6b:e5:02:4d:91:e9:c4:50:b4:fc:19:ce:a0:b4:
2a:e1:c0:f9:af:2f:9e:6b:a8:cb:59:d4:bb:fe:d9:
7b:d3:2e:bc:27:9d:54:3f:c1:93:07:e6:db:59:2d:
41:e7:27:10:ee:49:c1:73:bd:f9:6a:49:7c:38:bc:
7b:71:11:83:fb:5e:f9:01:3d:11:00:87:ec:0f:f9:
fa:4c:ea:da:7f:f7:e9:ce:4c:d2:c1:d1:3c:be:2d:
80:1b:59:3f:3a:a4:3d:67:8b:74:06:9d:d6:e6:ee:
d3:6d:bb:f9:54:c2:f2:31:64:e9:3c:e0:ef:f2:9f:
e1:1e:90:09:56:d9:69:42:bb:50:d8:91:ea:f8:01:
36:49:24:42:a8:33:51:11:08:3d:1d:ff:46:50:20:
08:ff:56:17:a8:b3:ae:01:57:7e:d5:4e:4a:a1:e9:
b5:fa:a0:cb:eb:3e:13:64:e6:ea:6c:8d:42:14:97:
56:17:0b:70:d3:04:10:ef:b7:97:3b:aa:c1:40:0b:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DE:37:90:F5:F2:94:D0:D7:DD:AE:1D:05:10:70:38:A9:12:F7:DE
X509v3 Authority Key Identifier:
keyid:B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/iN43kPXylNDX3a4dBRBwOKkS994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.114.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2c:54:7a:0b:19:df:26:8e:32:7e:e4:13:a8:6d:2a:b1:5c:
49:f9:69:37:88:8a:d6:1c:ea:e5:d9:51:78:dd:1c:f9:eb:33:
a2:67:8f:07:5b:1a:99:b9:1d:ca:f0:b6:3e:b7:c8:e2:7a:1c:
ef:a0:df:ca:e0:51:69:76:27:c1:f3:7f:25:e8:48:75:e7:ce:
38:fe:5a:cb:a7:da:f5:b3:43:f3:41:98:20:93:99:ed:48:dc:
59:a5:f6:8d:2e:83:d9:cf:73:7f:26:5c:72:48:dd:31:7f:18:
3d:10:a4:90:b8:d8:0e:d8:0f:91:af:d0:19:9b:6d:2f:51:70:
4a:35:b2:e0:a8:1d:37:6d:9a:4c:75:44:c8:22:11:cc:23:46:
a4:0f:e6:ad:e8:25:c5:1b:b8:45:93:45:9d:ab:88:0f:78:94:
51:9d:23:1d:37:f3:17:f6:46:cc:1d:64:19:ac:20:cf:e8:dc:
15:03:d0:e7:e0:2c:3d:46:ab:54:1e:c7:57:90:e0:7c:64:80:
6d:17:14:7e:38:ad:34:a0:13:44:d4:32:3d:47:3b:59:61:82:
3b:34:cb:8a:8c:07:4d:dd:4e:69:1c:f7:02:9f:5d:77:ae:cd:
05:b3:60:33:84:0f:45:bb:72:34:7e:ba:3a:08:be:a3:3a:0c:
5e:e8:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:50 2024 by rpki-client on console-fra.rpki-client.org