Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/5IyOj-O6ckC_2qxkdAfxkPj7MSs.roa
File: 5IyOj-O6ckC_2qxkdAfxkPj7MSs.roa (raw, json)
Hash identifier: 08Eg43JhmNErx8P8hc7TDTbyWZ3LOkNEKniimHpwev4=
Subject key identifier: E4:8C:8E:8F:E3:BA:72:40:BF:DA:AC:64:74:07:F1:90:F8:FB:31:2B
Certificate issuer: /CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Certificate serial: 01856D6F441757403E881C392AB026C6DED4
Authority key identifier: 40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/5IyOj-O6ckC_2qxkdAfxkPj7MSs.roa
Signing time: Sun 01 Jan 2023 13:04:46 +0000
ROA not before: Sun 01 Jan 2023 13:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:44:17:57:40:3e:88:1c:39:2a:b0:26:c6:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Validity
Not Before: Jan 1 13:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e48c8e8fe3ba7240bfdaac647407f190f8fb312b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:0c:1f:f2:28:da:96:6d:f4:36:c1:83:e1:
08:3b:10:c6:da:52:d9:95:74:a0:2a:5d:5e:03:aa:
2e:fe:74:52:79:d2:f8:20:2c:8b:f0:03:cb:45:2c:
6b:f0:98:a4:f4:80:d2:4f:65:9d:98:09:ee:4c:65:
94:80:63:42:22:b7:cb:81:4b:54:21:0c:3a:88:ed:
5f:a1:a9:fa:fc:9f:00:0e:6e:8d:2b:f4:fe:98:4c:
a7:04:98:0d:76:d3:2a:48:3b:2c:f9:63:6d:da:46:
77:31:aa:76:d8:0c:42:29:4d:69:96:2f:a2:52:2b:
88:61:af:48:b8:6b:1e:52:b3:10:a9:81:00:5e:42:
b3:d0:da:93:c6:08:f7:06:ab:d9:cc:6f:82:82:15:
f9:16:88:e5:e8:22:8e:1a:5c:33:40:ef:e3:72:e5:
ff:0d:24:77:cd:0d:e8:84:a5:bc:70:f8:36:2b:ef:
ec:d2:6f:42:d9:14:3a:30:83:b6:52:75:75:a0:39:
e5:ec:6f:1c:9f:dd:5b:04:84:a7:8a:3d:25:f3:5f:
40:16:7a:ea:f3:8e:08:19:cd:39:66:e2:0b:0f:20:
06:57:ff:df:ca:12:d5:96:1f:1c:6f:86:1a:77:da:
dd:7e:a8:88:4e:46:03:c3:66:ce:b8:9e:37:7a:a3:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:8E:8F:E3:BA:72:40:BF:DA:AC:64:74:07:F1:90:F8:FB:31:2B
X509v3 Authority Key Identifier:
keyid:40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/5IyOj-O6ckC_2qxkdAfxkPj7MSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/QJjx05CtQiZLX8Tm62-DCXtXnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
89:da:a2:7f:c0:b9:64:53:68:8d:f5:64:07:09:a4:1e:67:ca:
3f:d6:d4:e8:fd:fc:6f:3a:c0:37:11:be:bc:d6:6a:0c:da:43:
36:0d:8c:6a:d5:c4:18:bf:ea:3c:a6:b7:9b:f6:03:67:13:e3:
91:b0:3a:79:45:16:17:2a:e7:9e:68:61:f1:3c:05:c2:df:4c:
40:46:25:2b:1c:37:20:7c:7e:2b:e4:a5:dc:df:eb:34:03:01:
c1:e4:58:fd:e4:d6:1f:b8:83:81:3d:e1:37:fc:58:5f:57:91:
4f:95:39:6d:6c:4a:09:8c:09:25:88:35:31:30:ef:55:51:35:
a6:43:d7:de:c0:77:e7:76:c7:0d:35:7c:e3:5e:9c:2c:ec:4c:
b4:1f:0f:fc:50:c9:4f:23:04:03:96:7c:5c:9b:09:54:81:2c:
9c:47:0b:f1:c6:25:74:86:81:c6:28:e5:30:5d:61:21:f6:6e:
96:f2:61:ec:5b:dd:67:3a:b8:dc:ae:d4:fd:82:d0:34:cf:d0:
ad:c8:e9:18:7b:32:78:6b:2f:7c:f9:12:a4:8b:5e:3c:8e:8f:
f5:4a:d6:58:f3:e7:7f:30:e4:8c:3e:7e:d6:63:8f:37:4d:0d:
c0:e0:d0:c3:9c:9f:75:08:dd:2b:fa:08:cd:9f:02:35:0a:75:
0e:24:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net