Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/Y4sjCmuuEqNNxEsRfddhGjcEK8Y.roa
File: Y4sjCmuuEqNNxEsRfddhGjcEK8Y.roa (raw, json)
Hash identifier: NtTYJ19q9jjCLz9PfuobGlJxbmQ2CoaRdD6eTbbF0XQ=
Subject key identifier: 63:8B:23:0A:6B:AE:12:A3:4D:C4:4B:11:7D:D7:61:1A:37:04:2B:C6
Certificate issuer: /CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Certificate serial: 01857039762A9D83309A86479A626C25C0D0
Authority key identifier: 72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/Y4sjCmuuEqNNxEsRfddhGjcEK8Y.roa
Signing time: Mon 02 Jan 2023 02:04:51 +0000
ROA not before: Mon 02 Jan 2023 02:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:76:2a:9d:83:30:9a:86:47:9a:62:6c:25:c0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Validity
Not Before: Jan 2 02:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=638b230a6bae12a34dc44b117dd7611a37042bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:b0:f9:d7:d1:e4:b7:85:fc:df:06:59:43:
07:13:c7:49:10:db:db:f1:e0:f5:45:1b:4e:b6:4d:
8f:bf:86:31:97:a1:3c:da:0b:9c:2a:4a:f4:fd:4c:
e3:1c:98:a4:7b:2e:19:22:cd:91:60:d1:89:22:e7:
f8:31:94:84:7f:45:02:29:4b:d8:f4:6b:ca:e0:f1:
76:4e:41:99:8a:3e:66:26:8c:5d:82:de:36:af:ef:
ec:f3:da:65:3a:8c:50:d2:fa:21:24:4d:9b:be:e7:
c5:40:73:0c:30:a1:e1:4c:67:d1:24:48:67:b5:ee:
79:67:c0:a9:49:5d:75:d6:cc:4a:64:f0:c7:31:c7:
8a:5f:2a:17:25:41:4d:b1:20:e6:b2:66:e6:2d:fe:
cb:de:da:c2:e5:00:a2:c9:03:7f:35:e7:c0:9b:a3:
65:40:da:0c:7e:19:b5:b4:46:d1:59:25:b4:d6:ca:
f0:f8:94:91:5d:9d:d2:15:43:44:84:09:a2:6e:12:
1d:ab:ff:28:35:2f:29:55:5c:c1:a9:89:3e:c9:d4:
ab:86:71:50:46:cb:27:00:70:e7:c6:f0:cf:f8:8f:
a5:7b:90:65:03:b8:95:bd:a3:97:b7:25:f7:fd:66:
84:31:52:88:c1:94:12:fb:60:bf:ea:a4:7a:9e:9b:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:23:0A:6B:AE:12:A3:4D:C4:4B:11:7D:D7:61:1A:37:04:2B:C6
X509v3 Authority Key Identifier:
keyid:72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/Y4sjCmuuEqNNxEsRfddhGjcEK8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.68.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d6:2b:e2:36:21:7b:19:50:56:3e:67:1a:f6:1d:ba:d9:c2:
19:99:69:da:9e:39:43:90:7a:b1:e4:4b:b1:4e:c6:2a:55:c7:
17:cf:67:52:c9:1b:03:06:7f:be:aa:11:0d:af:13:1a:75:a9:
89:43:50:b0:2a:a5:f8:9d:22:3b:83:4f:c1:7d:1b:5b:8d:1a:
9c:48:ba:ae:81:2a:a3:32:7b:a9:e5:1b:b2:aa:5c:5c:33:15:
71:13:5e:fe:71:f2:9e:47:18:1b:ff:97:14:2a:91:48:85:cd:
fe:61:1e:9a:18:bb:9f:20:f0:aa:85:a1:88:07:dd:05:2b:37:
a6:52:c5:86:18:e2:75:a9:9d:b4:52:3f:b4:df:f6:b8:50:bc:
2c:d2:3e:7a:31:5f:e3:9a:64:28:d4:c7:5b:3a:04:b6:2c:95:
e0:9e:d5:1d:a2:f5:e8:d8:79:6a:c2:b6:6a:fe:71:1c:1c:68:
57:48:83:57:78:79:8a:bf:86:db:65:4c:91:17:dc:83:09:18:
57:34:09:72:95:31:73:e7:64:1f:d7:70:4a:e2:b8:37:42:91:
82:cc:7a:d6:85:d4:0f:4e:4f:b8:50:fa:cd:28:db:e0:75:ec:
3e:40:61:df:bd:c1:e6:2d:da:65:60:2b:c4:c5:c5:54:9b:b7:
c7:4c:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net