Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa
File: tQoZ3k915cvBuohyXTBA2mONmo4.roa (raw, json)
Hash identifier: sVwc1hN/cdnt7UEgOmnXY1Et6n7cmOylr7AlaetTr8Y=
Subject key identifier: B5:0A:19:DE:4F:75:E5:CB:C1:BA:88:72:5D:30:40:DA:63:8D:9A:8E
Certificate issuer: /CN=a1234bb888ec5734f579747455363171eefb1a43
Certificate serial: 0182F829743ABDD12AEBEFA61BD21A24777E
Authority key identifier: A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa
Signing time: Thu 01 Sep 2022 08:27:22 +0000
ROA not before: Thu 01 Sep 2022 08:27:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 146.19.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:29:74:3a:bd:d1:2a:eb:ef:a6:1b:d2:1a:24:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1234bb888ec5734f579747455363171eefb1a43
Validity
Not Before: Sep 1 08:27:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b50a19de4f75e5cbc1ba88725d3040da638d9a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:2b:56:99:c9:2c:02:bf:b4:88:45:4a:3a:
fa:76:bc:d4:96:a1:1c:6d:5f:d7:53:80:57:b0:39:
0d:43:dc:f9:64:90:19:96:06:03:b6:06:e4:ca:ba:
1f:87:0c:13:64:8c:bb:da:fe:a0:4a:12:df:6f:0b:
c5:41:e0:2b:7f:17:15:c9:bc:b3:47:8c:1e:35:b4:
cd:d5:2f:1e:6e:89:7c:ac:d7:59:5c:de:24:77:39:
53:aa:32:42:d2:50:6d:e9:81:8a:f8:10:86:c8:b8:
43:a7:b0:6d:56:88:ef:a0:7f:1c:ab:94:40:a6:a0:
2a:91:bb:9f:ff:b0:ed:cb:b8:51:03:59:5c:70:a5:
c1:28:d8:44:88:22:a8:9e:82:da:d9:02:a8:62:5a:
a3:3e:08:83:f0:48:b9:d4:7d:7c:26:b0:76:de:06:
8e:84:5f:f1:46:ed:d7:a6:8d:91:ad:5e:d6:9e:da:
bb:9b:22:67:2e:f7:d3:80:d0:43:a6:d5:d3:49:4f:
81:e6:b4:81:4f:04:53:d4:34:05:c5:4f:e9:15:bd:
89:d7:c2:f2:8c:65:45:d2:52:bd:38:d0:8a:de:5e:
fa:1d:1e:e1:6c:fb:90:ac:3c:31:42:28:af:61:e0:
49:9e:6b:26:c6:ae:eb:53:59:c0:68:46:f5:ed:00:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0A:19:DE:4F:75:E5:CB:C1:BA:88:72:5D:30:40:DA:63:8D:9A:8E
X509v3 Authority Key Identifier:
keyid:A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.237.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cd:6d:6b:ad:d1:23:2d:e1:fd:5b:2c:a1:10:3b:0c:3b:d0:
ea:6c:49:7b:0a:72:82:71:27:57:f9:b9:7f:02:1d:a7:8d:47:
da:8c:46:e9:61:aa:b4:6d:ac:f3:27:79:df:45:a8:1e:75:32:
c8:d3:67:32:1c:70:c8:11:9b:14:75:3e:bb:6c:aa:60:f8:f2:
6e:91:f9:7d:9a:d6:3a:0e:87:45:0c:92:6f:36:56:06:17:31:
82:94:5d:21:39:d1:a4:0d:a8:05:27:9f:6b:44:3c:a0:50:d6:
0d:51:a7:97:1a:15:a9:5d:4e:80:96:35:05:67:b7:87:99:1a:
bc:98:ae:06:10:d3:1b:88:15:e5:83:32:b7:94:3b:04:e0:8d:
ce:e7:35:44:6d:b4:20:5d:34:4d:f0:ef:53:22:ba:2c:eb:a3:
57:96:35:fe:e2:b4:34:8c:2c:25:a7:14:fd:6b:cb:de:58:14:
3a:29:2b:1d:a7:b0:11:d2:da:06:d7:90:35:08:6a:72:56:bd:
bd:62:4a:63:53:38:5d:aa:3b:0e:12:c5:30:73:61:d0:90:77:
9d:e3:f1:5b:7c:fa:5a:bc:1a:31:83:33:f5:f2:0b:c3:c0:db:
27:de:f6:68:61:1f:26:3d:d4:f3:08:52:03:94:6b:aa:91:79:
1e:2e:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net