Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/1-be1GdH5k8yz0ajxVUJ4iDGbcY8.roa
File: 1-be1GdH5k8yz0ajxVUJ4iDGbcY8.roa (raw, json)
Hash identifier: TvXLHDjpN1QCDzDePKoEG3YdFbg7VOF87QU3dnfBdKA=
Subject key identifier: F9:B7:B5:19:D1:F9:93:CC:B3:D1:A8:F1:55:42:78:88:31:9B:71:8F
Certificate issuer: /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial: 01A2C89A
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/1-be1GdH5k8yz0ajxVUJ4iDGbcY8.roa
Signing time: Mon 30 May 2022 09:35:16 +0000
ROA not before: Mon 30 May 2022 09:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 146.19.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27445402 (0x1a2c89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
Validity
Not Before: May 30 09:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9b7b519d1f993ccb3d1a8f155427888319b718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:4d:e6:24:f0:43:42:2a:b2:27:da:fb:e2:
f9:2a:d8:b5:6c:0c:7b:21:54:a5:d3:3d:ab:18:d8:
47:e7:c5:88:51:cf:f8:aa:6e:81:bd:48:74:f9:4d:
5d:0e:11:ea:5e:65:4d:82:f9:03:be:e8:ce:66:55:
c5:1e:e3:18:fa:42:64:77:d3:95:1d:76:c1:2a:f1:
a6:e9:3b:c3:27:ec:77:60:70:d6:69:11:c7:95:e9:
ee:c7:78:4d:f9:37:4a:1c:8f:ed:90:44:5e:1b:af:
b0:75:96:d7:62:e4:5e:44:7b:47:a2:81:6f:ec:e2:
96:e0:6b:59:7e:40:04:ad:8c:ca:01:6f:73:4c:4e:
a7:9f:6c:d0:3f:0c:8f:b5:5c:c9:21:f8:09:53:c0:
3d:c7:7b:18:c8:c1:44:35:13:12:2c:a6:ba:69:bc:
13:40:94:6d:13:c2:62:c2:70:89:2c:4a:ab:22:d7:
fe:4e:09:6a:a8:23:d2:d8:8a:68:6c:a4:1e:25:45:
d6:8f:b6:db:0f:06:5a:6d:69:0e:d6:76:f1:e1:92:
0a:21:38:49:e6:40:9a:91:e7:0a:a6:e5:4d:4f:56:
de:1a:07:3d:53:c6:ce:df:70:ec:4e:fd:fa:cc:c8:
e0:ea:a2:5d:4c:ce:1e:3e:76:68:25:e8:5b:07:67:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:B5:19:D1:F9:93:CC:B3:D1:A8:F1:55:42:78:88:31:9B:71:8F
X509v3 Authority Key Identifier:
keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/1-be1GdH5k8yz0ajxVUJ4iDGbcY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
61:06:09:8f:5b:c5:ca:e4:a4:83:51:97:25:5e:be:65:f2:ce:
f8:52:e5:d7:ae:48:01:72:2d:b3:09:63:e2:c1:1d:7d:0c:2d:
42:58:1f:4f:95:24:43:1f:ee:92:98:92:1c:ab:f3:a8:af:c2:
58:11:eb:56:9b:48:4a:ac:54:a4:88:60:43:10:c4:e5:eb:cd:
0d:0f:de:2c:a3:05:59:97:6a:30:14:9b:20:4a:33:ed:cc:65:
c7:8f:3d:10:1d:4d:06:02:d5:63:11:2e:f1:19:e1:ec:10:66:
90:62:a6:5a:85:0e:58:d4:88:fc:f1:f5:ed:15:36:a9:a9:fc:
02:d9:b4:7a:7d:4b:6f:6d:b7:23:c3:73:5e:92:ca:a2:50:b0:
fd:af:c9:70:5f:a8:cd:95:b3:73:df:34:49:37:a6:70:88:d9:
df:4b:fa:3e:45:f7:75:d9:cc:ca:48:87:70:e2:f7:95:82:59:
16:e6:c1:11:72:ac:21:70:b2:16:c8:14:15:07:33:f5:85:1b:
0b:db:0b:4b:d0:3e:de:86:b6:5d:c4:b0:d6:87:a4:56:e9:b7:
0c:6f:87:f4:4b:da:24:14:51:d0:d9:9f:2f:90:80:ee:b2:2c:
c1:17:ff:a0:d3:b8:06:92:3d:e5:03:44:85:b3:d5:f8:60:93:
45:e9:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net