Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/qHQSR13WgsASosHOL8xjVBiFw-U.roa
File: qHQSR13WgsASosHOL8xjVBiFw-U.roa (raw, json)
Hash identifier: vQTaPccETy9AZnMhsRckIDU2EkH7F9XJIXKWvuO4el4=
Subject key identifier: A8:74:12:47:5D:D6:82:C0:12:A2:C1:CE:2F:CC:63:54:18:85:C3:E5
Certificate issuer: /CN=5dddc965c3e90a82200f4afbb92991904d06422c
Certificate serial: 01867478C50B7D1CEE3928323B87711BE31F
Authority key identifier: 5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/qHQSR13WgsASosHOL8xjVBiFw-U.roa
Signing time: Tue 21 Feb 2023 14:55:17 +0000
ROA not before: Tue 21 Feb 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 146.19.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:78:c5:0b:7d:1c:ee:39:28:32:3b:87:71:1b:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dddc965c3e90a82200f4afbb92991904d06422c
Validity
Not Before: Feb 21 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a87412475dd682c012a2c1ce2fcc63541885c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:e7:63:a7:91:72:24:5a:77:de:3c:4d:1d:
55:1b:83:60:3f:dd:5a:3e:5c:23:41:b0:c9:42:43:
6c:b0:e5:d6:bd:c3:95:bf:4c:ab:01:5f:77:20:41:
e7:f7:9b:0c:05:93:5d:cc:8a:b0:da:c3:3e:8b:7d:
1e:db:fd:02:75:15:e1:48:e7:23:60:3a:e5:fd:3b:
69:94:ba:69:8e:f0:0d:79:7d:00:a8:3b:f2:e1:db:
47:28:cd:db:6a:bf:7b:fd:22:48:92:e4:32:50:8e:
1a:06:6b:f4:48:2e:b3:b0:0a:76:fe:11:22:c2:86:
cb:77:ce:20:7d:bf:9e:0d:8d:ae:ba:51:3d:c0:8a:
9c:3d:35:ba:09:0b:7d:05:6d:70:84:6c:f1:d1:fe:
ce:e1:c3:fe:18:ce:21:8c:9e:bc:89:59:cb:61:0c:
a3:a0:86:66:24:77:fb:65:7a:f1:6f:13:d0:d8:b2:
fa:64:01:72:83:85:96:6f:06:59:8b:06:72:2f:4f:
ad:c7:ec:13:21:ab:19:f1:02:c7:03:e1:30:4f:07:
99:ce:3a:5e:ea:6a:0f:fd:64:d4:67:e5:58:f2:22:
d0:e1:40:92:74:87:a0:0b:42:f9:6c:5e:90:b7:65:
61:67:52:44:fa:e4:58:86:16:f3:d3:6b:5d:50:22:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:12:47:5D:D6:82:C0:12:A2:C1:CE:2F:CC:63:54:18:85:C3:E5
X509v3 Authority Key Identifier:
keyid:5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/qHQSR13WgsASosHOL8xjVBiFw-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.7.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f8:e4:1e:a8:20:22:b7:29:bf:99:52:72:5e:3c:ce:80:fd:
3d:94:66:4d:cd:d8:8f:65:5c:60:e2:66:d6:54:dd:16:3f:2c:
02:53:2c:60:31:e3:08:03:78:90:11:1d:e6:45:d6:f0:97:9a:
6c:b2:b5:56:47:f6:9c:22:5a:7e:01:45:8d:59:39:70:62:20:
96:30:c1:56:ee:81:bf:5d:b9:1c:3c:cb:36:4c:5e:7d:a0:64:
de:69:a8:29:ef:85:7e:cc:ea:7d:32:ba:ed:33:14:ce:33:70:
5a:54:58:8a:b0:c0:4d:e4:27:e5:82:b6:04:bd:cb:51:23:05:
a0:d3:a6:fe:30:0b:f5:51:1d:c3:45:28:9d:33:1c:f7:44:61:
d7:13:5e:19:f1:0e:e9:da:ab:7c:05:74:ef:d9:25:88:d8:0c:
df:5e:a0:1a:ba:1c:6b:34:fa:98:91:44:0c:c2:be:d4:eb:16:
ae:bf:0a:98:5f:65:43:36:0c:05:d8:dc:f4:c8:0e:5e:aa:ac:
13:fe:98:25:99:1a:55:51:fb:8f:66:d5:04:4e:7c:30:72:fc:
bf:f3:93:38:7e:53:c3:fe:41:3e:ac:2c:2a:30:9b:b3:74:37:
21:89:4a:67:cc:88:bc:ad:38:74:b5:a6:9c:48:e1:fc:68:ce:
4d:61:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net