Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/xouDvh7J7jwDbuNh9YUUcM2_6QU.roa
File: xouDvh7J7jwDbuNh9YUUcM2_6QU.roa (raw, json)
Hash identifier: Djce5yvwlWekRBSKyLZYCsVi3vHh89MZ3rSOCuy/4is=
Subject key identifier: C6:8B:83:BE:1E:C9:EE:3C:03:6E:E3:61:F5:85:14:70:CD:BF:E9:05
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 01905ED42031BC46387793D8257281C206C8
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/xouDvh7J7jwDbuNh9YUUcM2_6QU.roa
Signing time: Fri 28 Jun 2024 12:31:18 +0000
ROA not before: Fri 28 Jun 2024 12:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:d4:20:31:bc:46:38:77:93:d8:25:72:81:c2:06:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Jun 28 12:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68b83be1ec9ee3c036ee361f5851470cdbfe905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:dd:72:4e:b0:c9:80:2f:af:3c:86:98:da:
fa:9f:da:02:7b:f0:d6:b2:2d:73:4b:be:0f:09:50:
af:55:03:52:e2:fc:06:4b:9b:25:b1:1f:b0:93:12:
ff:5a:68:61:a7:2c:92:72:e9:fc:01:25:fd:36:d1:
5d:0f:29:0e:0a:60:8b:49:1c:5a:a5:25:de:79:ba:
c3:5a:d9:c1:c6:08:07:cc:21:75:ef:03:32:b2:ef:
d0:bf:25:21:cd:e1:c6:cc:c8:e2:42:f4:fd:fe:a9:
fe:c2:66:73:91:19:6a:05:dd:1c:7e:b0:cb:1c:3b:
e4:1e:c6:3a:97:1d:0e:f5:02:7d:19:3e:87:30:91:
91:a1:53:98:fe:1d:16:92:a3:f8:81:fd:d9:9e:a8:
f2:06:d3:e5:11:86:30:25:4e:4a:45:6f:9b:38:5a:
e6:2d:90:22:56:e7:6b:f1:a6:05:b7:08:92:0c:66:
9f:5e:dd:71:df:24:f2:a2:51:98:36:10:af:8b:90:
7f:d2:cd:ff:ab:fe:75:73:ec:f5:af:b4:a8:cb:46:
ff:64:8a:13:b9:77:ff:2e:45:39:bb:86:b3:d0:a8:
59:27:6b:c6:6a:d4:09:5c:3c:db:f5:01:09:c0:f7:
0a:99:0d:c5:a2:6c:3a:42:c1:4f:f7:76:c2:b5:f8:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:83:BE:1E:C9:EE:3C:03:6E:E3:61:F5:85:14:70:CD:BF:E9:05
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/xouDvh7J7jwDbuNh9YUUcM2_6QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
72:98:cb:4d:26:c2:e6:df:f5:3a:36:09:fe:d0:37:e2:11:5b:
bc:3c:9e:d8:4c:a4:10:fd:5f:46:a8:61:27:68:64:32:ce:53:
ce:d0:04:29:57:d7:4c:9c:99:b1:9a:f5:d2:ee:2c:44:6c:e5:
16:82:a7:eb:19:78:62:2f:44:1f:05:dd:14:53:f3:8a:86:a6:
c4:02:66:72:33:dc:3f:cf:5a:6a:7e:81:f7:78:ac:e9:78:28:
7a:ec:2c:80:2d:2a:66:8b:da:ea:c7:c9:0a:59:85:37:8b:e4:
3a:a1:ee:1f:a0:ab:b8:07:9b:dc:e1:e2:3c:bd:28:e0:2a:ee:
6b:8d:4d:7b:23:38:1c:6e:d0:de:4f:ca:0b:5b:13:30:b7:bc:
0a:ba:89:5d:4b:ab:15:57:84:87:c8:7e:5d:ad:cd:ee:b2:c5:
54:6b:d0:d1:fa:06:d1:d7:42:11:b7:51:6c:e5:5d:38:de:8c:
2e:8f:47:f2:15:65:c4:a4:a3:7b:f7:09:37:a0:87:91:3e:06:
cc:ef:af:65:a0:f3:c0:e0:9f:6e:27:1a:40:23:8f:35:67:15:
d8:f5:e6:7c:75:db:69:6e:30:c9:09:f0:17:d3:b5:8a:ee:01:
bb:38:a7:ce:38:4b:00:99:2a:26:84:d9:18:4b:8a:f2:b8:ae:
28:de:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 00:28:20 2024 by rpki-client on console.sobornost.net