Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/kUAZmv-KKco8BhvQnH2ds_a7XjQ.roa
File: kUAZmv-KKco8BhvQnH2ds_a7XjQ.roa (raw, json)
Hash identifier: qjjsbngWhjjQxPF6vYffOZtILwfVoxZqtTv8DJb1AN0=
Subject key identifier: 91:40:19:9A:FF:8A:29:CA:3C:06:1B:D0:9C:7D:9D:B3:F6:BB:5E:34
Certificate issuer: /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial: 0DF2C5
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/kUAZmv-KKco8BhvQnH2ds_a7XjQ.roa
Signing time: Fri 25 Mar 2022 08:50:18 +0000
ROA not before: Fri 25 Mar 2022 08:50:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914117 (0xdf2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Validity
Not Before: Mar 25 08:50:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9140199aff8a29ca3c061bd09c7d9db3f6bb5e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:dc:3d:2e:01:f1:74:01:eb:cd:35:84:0b:
b7:25:8d:92:85:a4:c3:81:88:d3:2a:df:07:9b:03:
11:58:b2:3c:85:32:81:9f:d7:48:c5:09:8f:10:27:
33:4a:29:e8:08:94:2f:64:95:26:a1:de:6f:58:c6:
e7:00:e1:75:1e:07:2c:77:04:a9:28:45:f9:05:1d:
fe:fc:56:77:50:02:23:3a:d2:92:4a:ac:ef:89:92:
fb:89:97:c2:4f:c8:e7:39:31:11:99:a3:c5:c1:b8:
86:62:45:07:10:be:4d:db:5d:d4:e4:ec:06:22:5a:
38:24:53:c1:7c:00:58:e1:59:c1:b6:f8:f3:5a:d6:
a3:f8:28:8f:57:09:4d:a3:4e:0e:65:f6:72:f8:dc:
08:7c:4f:c1:54:c6:07:e7:ae:c1:90:b7:12:d7:ac:
8c:df:ff:79:4c:be:e9:62:79:23:55:c5:a5:7e:58:
3e:77:81:8b:89:b2:90:22:7d:a7:03:cf:13:8b:91:
05:45:48:66:2e:58:68:03:22:de:1c:80:16:8a:27:
aa:34:65:3b:7c:fc:0a:51:07:73:c0:7b:a5:6f:4b:
97:4c:01:24:76:a6:27:09:d7:9f:58:10:6e:c5:fb:
70:72:4e:e5:5b:30:19:1d:af:82:5f:54:c5:c4:ab:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:19:9A:FF:8A:29:CA:3C:06:1B:D0:9C:7D:9D:B3:F6:BB:5E:34
X509v3 Authority Key Identifier:
keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/kUAZmv-KKco8BhvQnH2ds_a7XjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
32:75:35:72:a7:79:17:b7:2d:9e:c4:ce:6f:a5:79:a0:28:88:
8e:2f:9d:d6:e2:fe:27:22:72:a4:d9:81:1c:76:2e:04:79:ae:
99:20:d0:54:fc:52:02:76:8d:48:34:e5:a3:e8:d3:c7:78:b7:
69:75:f9:6c:f3:3e:79:12:b3:1c:33:79:42:d2:97:77:dc:a6:
f9:dd:6f:31:23:c2:f5:1c:cd:3b:d4:9e:ff:67:ca:e0:ec:85:
71:ea:82:cc:d7:79:12:80:c5:cb:fb:4c:61:66:6f:2a:26:1a:
42:d7:2d:16:86:80:e9:f9:6b:0b:2e:63:eb:6d:6d:83:40:d6:
6d:c4:37:ce:3e:5f:18:fb:fd:fc:fe:f4:c2:16:90:7c:ce:8b:
87:10:90:4d:3c:ea:ba:8a:f5:2b:e4:05:8c:a3:6f:45:04:01:
ab:f4:8a:7c:9b:00:5f:82:df:9a:f6:35:91:f8:1a:f6:7f:42:
a6:bb:24:bf:f1:ba:26:d4:87:d5:c6:f5:81:bc:ee:3e:b6:33:
df:7a:3a:b8:bb:bc:bc:06:ae:02:eb:ed:7f:5f:70:0a:50:3e:
15:de:bb:5e:11:c3:9e:38:10:b4:b7:b3:15:e3:d8:3e:40:8f:
62:1d:53:85:43:d0:b7:ea:e2:35:53:23:e4:b6:7b:fe:9e:28:
d7:a1:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net