Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/b0vZGeIjb3r5pCTY42MvrQ_Y22Q.roa
File: b0vZGeIjb3r5pCTY42MvrQ_Y22Q.roa (raw, json)
Hash identifier: MbjbTL10joDvaEA2KwJQDJ36pOrR4ljh7ruH9NxtzpI=
Subject key identifier: 6F:4B:D9:19:E2:23:6F:7A:F9:A4:24:D8:E3:63:2F:AD:0F:D8:DB:64
Certificate issuer: /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial: 0186CBD53A681551BF64C2C905A59BB47B2A
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/b0vZGeIjb3r5pCTY42MvrQ_Y22Q.roa
Signing time: Fri 10 Mar 2023 14:03:14 +0000
ROA not before: Fri 10 Mar 2023 14:03:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200010
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:d5:3a:68:15:51:bf:64:c2:c9:05:a5:9b:b4:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
Validity
Not Before: Mar 10 14:03:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4bd919e2236f7af9a424d8e3632fad0fd8db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:19:aa:5b:ab:48:ab:1c:47:36:95:27:44:
15:dc:63:d0:e1:d8:46:12:ea:f5:82:17:fc:6f:45:
c0:02:df:c2:e3:d6:a0:19:56:da:01:44:18:23:6d:
1b:25:98:39:4b:70:8f:2b:05:5f:f1:1e:5e:d2:fb:
3d:32:40:bb:27:01:69:6d:e8:14:eb:f2:0e:da:a8:
05:4b:53:0d:5f:2a:63:96:a1:70:b9:72:2d:de:43:
2a:03:05:e9:b4:36:ff:d9:bd:3d:2b:ea:69:9c:0a:
41:ba:3f:bf:c1:3a:ff:06:c1:4a:90:b8:dc:a0:8b:
6a:08:85:53:7d:3d:9c:32:b5:37:3f:a7:20:9e:23:
f3:ae:11:bb:b6:f2:9c:7d:d9:a4:23:aa:39:7b:66:
01:2a:73:f3:27:27:59:f6:10:dd:cb:ef:a8:38:67:
28:e8:15:bb:1e:34:b3:6f:b8:35:3f:33:f0:21:1e:
f0:62:e4:56:a4:51:e2:10:85:6c:98:5e:e3:79:b3:
50:df:e2:87:a8:f4:6d:52:7f:b2:11:9c:97:40:6b:
9f:7e:e1:a5:9f:a4:ea:06:25:ad:c9:38:aa:12:4a:
be:ed:82:35:3a:4e:50:7d:a8:e1:7f:bc:ad:9b:da:
be:15:ae:2d:78:bd:28:c9:5e:0c:02:47:48:5e:f7:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:D9:19:E2:23:6F:7A:F9:A4:24:D8:E3:63:2F:AD:0F:D8:DB:64
X509v3 Authority Key Identifier:
keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/b0vZGeIjb3r5pCTY42MvrQ_Y22Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
63:25:64:1e:72:b2:06:aa:8e:ae:d5:1d:e8:ab:60:11:1b:58:
e5:78:79:43:49:a9:d5:40:73:ce:9c:62:76:b6:dd:bd:32:63:
ca:b7:a8:21:0b:5a:16:8c:5e:a1:60:5d:08:bc:d0:03:60:fa:
cc:5d:0c:ca:bc:c7:57:3c:07:8d:f0:df:ad:7a:52:0d:4e:81:
32:7a:0c:5e:13:47:d8:38:bb:87:ee:92:d2:5e:4f:2e:81:65:
d9:d9:73:ad:ba:89:11:f5:fc:8f:5f:36:c8:a8:a2:22:04:2b:
f1:c1:44:9b:4e:32:b4:a2:f4:c8:6e:c7:f3:a8:a2:3d:5d:d5:
d6:e3:ff:b4:a5:44:e2:ff:c8:2d:53:a5:87:20:fa:3e:ad:26:
9d:03:76:66:31:4b:02:23:11:cf:bf:6d:4d:72:7b:13:8f:41:
7b:de:9f:8b:9c:fe:a6:0c:6c:a2:3e:c9:6f:6d:72:eb:59:e4:
10:fe:be:d5:b1:21:d5:5a:59:d7:f0:d9:f2:fc:94:33:0b:1a:
83:03:83:78:ee:47:a9:91:07:01:0c:4c:7e:44:35:57:84:05:
9b:ee:07:f6:0e:93:f7:76:43:53:5a:8b:a2:af:a9:36:c8:be:
3b:72:e7:a2:43:8d:eb:e3:b6:65:4b:9b:2e:66:0d:ee:fd:ed:
c9:df:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net