Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/tft9M7PG7wZtwlmfod4zmfkNGsM.roa
File: tft9M7PG7wZtwlmfod4zmfkNGsM.roa (raw, json)
Hash identifier: tof+D1pk+EzRm7x5PBb7bBf7chu9L8wQwdeONz1YXtU=
Subject key identifier: B5:FB:7D:33:B3:C6:EF:06:6D:C2:59:9F:A1:DE:33:99:F9:0D:1A:C3
Certificate issuer: /CN=880369c01e0f62570710f7b702302928250f65da
Certificate serial: 010898B0
Authority key identifier: 88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iANpwB4PYlcHEPe3AjApKCUPZdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/tft9M7PG7wZtwlmfod4zmfkNGsM.roa
Signing time: Mon 07 Mar 2022 17:38:56 +0000
ROA not before: Mon 07 Mar 2022 17:38:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17340592 (0x10898b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880369c01e0f62570710f7b702302928250f65da
Validity
Not Before: Mar 7 17:38:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5fb7d33b3c6ef066dc2599fa1de3399f90d1ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:4d:7b:c1:7b:2b:ba:a5:66:e2:b2:38:6b:
b7:66:b9:e3:6b:cd:7b:bb:35:8d:03:e6:d8:2c:b4:
50:35:12:04:38:29:bd:3d:cc:a6:73:cb:cb:5d:b6:
54:04:cf:a9:01:d0:b0:be:ba:a1:a8:4f:a2:38:39:
57:cd:e1:6a:78:61:90:cd:fe:b6:1d:16:c8:0e:dc:
e9:36:47:f2:87:94:b5:2d:bf:ae:cf:7f:92:6c:79:
7f:4a:06:52:58:07:31:14:d4:2f:19:49:95:2b:4f:
cb:bb:14:93:f6:50:97:3c:36:a6:0c:82:6a:29:c4:
b4:f0:da:59:9e:70:da:4e:55:38:f8:66:6f:2e:c9:
ca:90:45:a1:1b:7d:db:07:ff:5b:ba:58:35:3d:07:
09:3c:5c:50:ef:8d:76:f5:71:1d:5c:6d:63:75:8e:
41:7f:75:b2:a1:c9:b7:d0:dd:32:81:8b:d1:08:ee:
12:d3:24:ce:1b:7c:df:3c:ba:3d:e4:e6:1d:b9:90:
3a:6a:25:f2:d8:9b:8c:09:53:ba:93:ef:5d:f7:a9:
55:7a:99:65:f4:33:34:d3:3c:2a:93:cc:95:8f:19:
79:ab:d0:f1:b9:25:eb:28:35:c3:97:eb:b7:a1:d2:
6d:cd:d4:9d:13:39:98:a1:5c:91:ff:82:f1:e3:2e:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:7D:33:B3:C6:EF:06:6D:C2:59:9F:A1:DE:33:99:F9:0D:1A:C3
X509v3 Authority Key Identifier:
keyid:88:03:69:C0:1E:0F:62:57:07:10:F7:B7:02:30:29:28:25:0F:65:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iANpwB4PYlcHEPe3AjApKCUPZdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/tft9M7PG7wZtwlmfod4zmfkNGsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cbefb-42a8-47e4-b484-bcede3bea77e/1/iANpwB4PYlcHEPe3AjApKCUPZdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.67.0/24
Signature Algorithm: sha256WithRSAEncryption
18:62:3b:df:5c:5f:7a:2c:1c:6c:ff:2b:30:10:de:87:5b:67:
8d:cb:6e:87:57:e3:22:97:b7:c2:32:1a:3a:70:06:d3:16:c6:
91:0b:19:f5:8d:51:37:6c:a8:4b:ae:0e:d1:33:5b:fa:24:d2:
78:b7:1e:42:84:49:11:b9:9b:b9:8e:e3:6b:52:4f:4b:1c:e6:
47:e2:8b:79:b5:59:49:d4:a9:6a:11:97:52:5a:c9:13:88:eb:
57:5f:19:14:c2:06:79:cd:6c:e2:a9:4a:4e:41:a1:4b:88:a2:
47:e7:95:47:7c:e3:5e:52:43:f5:44:85:cb:43:36:73:48:02:
ea:de:91:f5:0c:b7:6f:45:5f:ae:e3:b2:a3:c1:b6:ce:dc:78:
f8:3b:b4:3c:8f:85:81:f1:3a:6d:fe:65:04:3f:d1:f9:f1:67:
fc:4d:96:06:15:1d:c2:6c:69:70:cb:7c:8e:71:0e:bf:20:18:
02:87:89:85:70:89:42:af:b9:de:be:67:1e:ae:55:58:a0:73:
ce:34:3e:41:d0:07:34:c1:5a:8d:a7:1d:19:07:69:53:38:d7:
57:76:95:24:41:82:67:0d:a4:dd:3f:cb:56:f5:61:5d:d8:64:
c8:4e:b5:fe:2e:7b:59:3d:83:aa:e5:f5:9c:e8:7e:f6:54:8e:
4d:59:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:45 2023 by rpki-client on console.sobornost.net