Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/Z50cpKbH90GHCLdX1OTjZ-xPcOE.roa
File: Z50cpKbH90GHCLdX1OTjZ-xPcOE.roa (raw, json)
Hash identifier: O8Z0/ByBDmOVJf8lr6SsxJCR6Zg4hCe3RKpA7k0aSgM=
Subject key identifier: 67:9D:1C:A4:A6:C7:F7:41:87:08:B7:57:D4:E4:E3:67:EC:4F:70:E1
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 018CC26D5A5354EEE0DDD9B50AF3AA49A6EC
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/Z50cpKbH90GHCLdX1OTjZ-xPcOE.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208972
IP address blocks: 146.19.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:53:54:ee:e0:dd:d9:b5:0a:f3:aa:49:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679d1ca4a6c7f7418708b757d4e4e367ec4f70e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:31:e0:d7:02:ea:fc:9a:c2:42:da:f0:7c:
a0:b7:d3:46:5d:58:d2:ed:5e:d9:fd:f5:99:d5:30:
31:b0:1d:ea:37:c6:87:58:c6:82:92:42:a6:93:e0:
63:e5:f3:64:de:de:4d:b2:a3:16:a9:cd:9e:54:4f:
75:c1:6e:db:00:54:e1:4b:5b:d1:3f:1d:ed:e9:04:
67:3c:9d:5b:23:f5:c2:34:d4:9f:7f:b1:85:a2:b3:
85:67:82:5d:53:f8:60:57:00:5c:5e:be:43:32:01:
09:95:91:eb:a5:f1:d5:47:e2:07:fb:2f:3a:4e:17:
1c:ad:e2:89:68:67:5d:b0:52:3d:36:ca:85:c1:92:
c7:f3:d8:9c:71:cc:d1:68:6a:bb:72:9f:78:85:79:
83:13:35:df:7d:66:44:4b:26:56:61:2e:1b:94:10:
93:42:a8:2b:2c:90:f6:41:b5:c7:0a:3c:36:5b:ca:
7a:6a:d9:4c:67:1d:6c:9d:16:26:d3:d6:b3:e1:9c:
03:14:0c:cd:a9:e5:52:76:4d:fe:7a:ab:30:1b:22:
27:1e:02:b8:84:d7:1a:10:59:09:47:1d:d0:ce:ac:
20:01:15:4e:7e:88:4e:c2:ca:52:38:0e:ab:c0:fb:
c5:60:5a:e9:5c:12:f5:b9:30:87:08:61:e7:ea:79:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:1C:A4:A6:C7:F7:41:87:08:B7:57:D4:E4:E3:67:EC:4F:70:E1
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/Z50cpKbH90GHCLdX1OTjZ-xPcOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f1:b3:b9:45:b6:e2:8e:7f:39:cd:cf:fe:66:99:dc:0a:d2:
ed:ee:04:2e:34:35:36:b5:7e:77:7d:c5:f7:44:94:0b:43:9e:
26:be:51:47:d3:ac:71:55:d2:66:48:86:34:88:df:b5:24:2b:
b0:30:ab:80:47:b5:7e:53:e6:ac:10:d1:e7:61:8a:45:9a:d6:
c6:ba:03:eb:20:02:41:3e:62:f7:3b:86:ea:07:2b:c5:4a:66:
e0:c5:85:ff:d5:d1:0a:fc:a2:77:1f:e8:a1:74:fb:5b:2f:08:
59:c8:f1:9e:a4:98:63:69:4a:9c:df:52:09:11:08:bb:2e:c5:
59:57:29:32:b7:56:d9:fc:5c:32:62:42:10:7b:88:02:ec:38:
2d:d1:bc:0f:48:04:de:ee:d7:f0:fa:2a:db:87:71:0f:29:22:
ef:bc:6e:ea:cd:9a:de:91:bc:1e:b5:cd:f6:c7:e9:e1:5d:cb:
eb:b1:cf:64:40:b0:0b:69:a6:df:8f:6c:8a:27:4c:78:f4:8c:
79:7c:a1:5f:33:d6:63:3d:2f:27:e3:3a:07:26:f6:dd:e2:ac:
32:7b:6c:8a:99:ec:f8:65:36:f0:0b:41:52:ae:95:44:93:66:
61:4a:60:2d:f6:b3:3d:fb:a9:e0:23:b7:22:8e:63:98:4d:5a:
e7:e3:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:38:39 2024 by rpki-client on console.sobornost.net