Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/uA4RAWY-WUp23oy2FsWOFlcb2tU.roa
File: uA4RAWY-WUp23oy2FsWOFlcb2tU.roa (raw, json)
Hash identifier: hu1gLNcAqsUyUm22J8VI8EBRj7SR+mn4CQdNsPWq/a0=
Subject key identifier: B8:0E:11:01:66:3E:59:4A:76:DE:8C:B6:16:C5:8E:16:57:1B:DA:D5
Certificate issuer: /CN=281597558437c58185d4c2fe71b9d52779d800d6
Certificate serial: 018746355B18C1EBB887E2AB80CBF749CAB1
Authority key identifier: 28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/uA4RAWY-WUp23oy2FsWOFlcb2tU.roa
Signing time: Mon 03 Apr 2023 08:21:54 +0000
ROA not before: Mon 03 Apr 2023 08:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:35:5b:18:c1:eb:b8:87:e2:ab:80:cb:f7:49:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281597558437c58185d4c2fe71b9d52779d800d6
Validity
Not Before: Apr 3 08:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80e1101663e594a76de8cb616c58e16571bdad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:42:3a:e2:b7:9e:98:0b:68:ce:71:3b:41:
39:62:4d:01:f9:c2:5b:b6:a5:ef:69:20:53:eb:04:
77:cb:d6:d5:06:36:16:a8:b3:15:0c:e4:a5:7a:a9:
20:60:49:2f:68:0e:39:b0:00:15:7a:74:c6:b2:79:
4f:7f:89:1d:1e:d2:17:cc:3a:d6:74:67:3e:04:47:
c2:6f:bf:d1:27:95:91:71:b1:9b:a0:ed:36:7b:34:
2e:c1:9b:19:1b:a1:c9:5b:15:e6:05:e9:1e:57:b6:
be:d9:2c:91:f1:4c:07:70:21:93:dc:1a:c7:1b:b8:
55:15:4f:48:47:04:3d:e3:5c:6b:12:04:0e:5d:e6:
14:be:04:35:f7:65:37:05:5c:d1:76:7a:77:55:11:
c5:15:1f:d0:01:9b:d5:61:d2:ed:fd:a4:91:97:55:
23:e1:ea:69:b7:f1:b0:10:8a:0b:62:e5:c2:ab:36:
23:4a:07:58:a8:c3:8a:11:8c:e7:bf:b0:8e:e1:e4:
fd:61:e1:34:e6:d5:12:2f:95:86:84:00:3a:f5:29:
f9:7b:19:24:8c:df:38:20:0b:3d:bb:22:37:9b:d5:
33:a6:0d:89:b5:c8:55:a3:89:b0:b2:23:28:20:ba:
eb:bd:b1:bd:d8:ca:e2:77:fe:e9:d9:ec:3a:fe:e4:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:11:01:66:3E:59:4A:76:DE:8C:B6:16:C5:8E:16:57:1B:DA:D5
X509v3 Authority Key Identifier:
keyid:28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/uA4RAWY-WUp23oy2FsWOFlcb2tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5c:0e:dd:6e:b7:d3:df:14:c8:09:cd:f4:e8:b1:28:3e:6a:
20:d3:5a:58:87:04:86:41:46:27:3f:10:6e:57:27:21:a2:8b:
c2:ff:08:ad:bb:8d:b8:94:96:4e:09:7d:3b:45:84:dc:69:d3:
06:ce:83:33:0f:4a:db:af:41:ad:98:cc:98:01:c1:a1:98:fe:
73:fe:8e:aa:80:71:93:cd:f3:79:82:f9:9d:3a:ce:3f:84:d0:
42:43:6e:7a:29:74:51:a0:41:db:e1:26:b1:23:f9:29:86:4f:
dc:d7:30:20:62:e2:5b:65:13:06:41:b1:5c:a9:5f:8f:4a:80:
a3:69:38:7b:13:0f:de:9f:fb:04:33:a3:db:df:78:1c:9e:a4:
00:d6:34:be:a7:e7:e4:f0:a2:80:b6:ed:1b:4f:44:f7:3d:62:
c7:94:a3:86:5a:28:fc:7d:4b:27:71:57:36:8c:be:92:32:d6:
db:f2:a4:6a:a6:46:e7:92:b7:f8:a4:71:48:14:e6:19:4f:a4:
aa:fa:8e:c6:9c:86:a9:f2:fd:14:6f:79:d9:bc:23:ca:f2:42:
8b:35:bc:73:a2:f9:95:9c:15:cb:e2:79:82:84:be:f7:32:5b:
a4:96:a8:dd:0b:79:98:0f:c4:bc:f2:2f:d4:ca:e9:74:ca:82:
b0:77:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net