Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/NpQwYAbmabULXwKtChkxGZ6OmdI.roa
File: NpQwYAbmabULXwKtChkxGZ6OmdI.roa (raw, json)
Hash identifier: 0EYKEZ3LKujNiu59iM7Zx3cKSa6huCqxPifJlJQhZo0=
Subject key identifier: 36:94:30:60:06:E6:69:B5:0B:5F:02:AD:0A:19:31:19:9E:8E:99:D2
Certificate issuer: /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial: 0185733A64D01C96C99F0684109E6C8A492E
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/NpQwYAbmabULXwKtChkxGZ6OmdI.roa
Signing time: Mon 02 Jan 2023 16:04:44 +0000
ROA not before: Mon 02 Jan 2023 16:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 146.19.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:3a:64:d0:1c:96:c9:9f:06:84:10:9e:6c:8a:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
Validity
Not Before: Jan 2 16:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3694306006e669b50b5f02ad0a1931199e8e99d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:31:37:35:87:c5:29:54:aa:c1:1b:69:01:
74:94:77:ed:b8:b5:4d:39:99:dc:c1:4e:e7:1e:ca:
fd:30:5d:5f:3b:99:59:db:e7:73:4a:75:1b:84:ff:
bf:ea:fd:58:4a:ff:76:d6:3f:1c:4c:8f:0f:c5:fb:
73:05:c8:b0:a7:1d:88:03:7c:a9:c5:76:51:ee:6b:
07:85:ae:c1:55:00:70:4a:11:9c:d8:a8:5d:7b:f0:
0c:45:85:e0:93:e9:16:dd:6b:19:a7:6b:ea:eb:ed:
8c:8c:ee:c3:bf:b0:7b:c2:e6:c3:c7:0e:c9:d7:d0:
2c:5a:03:51:47:a8:54:11:c3:6c:7f:60:45:cc:cf:
2f:9e:01:39:c2:9d:5b:71:e7:4f:d4:c1:c6:1d:ce:
00:67:98:9d:e3:b2:58:c9:8f:32:11:06:34:b7:f2:
17:53:6b:e7:96:93:ef:2d:5d:7b:45:df:ed:10:92:
fc:90:fa:65:56:bd:46:c3:a6:3a:a9:b2:db:0c:31:
91:a0:86:f4:09:ed:1c:26:e2:d0:d5:9a:bc:8e:02:
e1:2f:41:b4:d2:64:cc:20:75:27:f8:9c:fc:0d:25:
38:b4:25:f1:18:98:dd:66:1b:b3:f5:36:a3:70:0d:
90:14:27:62:e1:4a:a6:c0:d4:17:14:23:26:46:1c:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:30:60:06:E6:69:B5:0B:5F:02:AD:0A:19:31:19:9E:8E:99:D2
X509v3 Authority Key Identifier:
keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/NpQwYAbmabULXwKtChkxGZ6OmdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3b:f3:53:ef:82:c1:91:6c:b8:63:6c:76:3f:09:1e:db:76:
4a:2a:6a:65:d4:d6:56:f7:13:12:c0:83:cc:89:7d:ab:c0:59:
65:aa:ae:28:68:52:66:4d:c6:f8:d3:84:9d:8d:ac:1d:ed:e6:
c1:f4:a3:33:66:32:1e:7e:96:d5:2c:b2:31:94:07:40:55:60:
a1:e1:43:8b:7d:da:f2:b2:34:56:4f:42:35:e4:cf:9a:23:c0:
e7:1e:80:d6:7f:63:77:ba:43:56:05:a4:d7:15:28:9f:ee:5d:
00:f9:5a:99:d6:6c:64:0c:ae:86:a9:7f:15:c3:6e:e6:e3:d8:
91:46:f4:4d:9b:25:f5:b4:e3:e6:f2:11:57:0d:a5:cb:bd:d1:
cd:88:be:25:c5:f8:fe:dd:5b:d1:f8:e3:02:05:19:52:f2:18:
74:94:66:77:97:2b:95:3e:35:a0:b7:27:c5:3e:be:35:f3:91:
0b:c9:19:de:35:d2:60:49:a9:b2:5f:a1:36:4c:ff:a0:23:fb:
62:8e:36:ba:6a:06:14:e2:95:7d:f8:5f:54:aa:11:dd:7b:55:
d0:58:6f:17:2d:86:a5:88:08:03:34:1a:fe:c1:3d:b8:5b:45:
83:e0:10:d1:cb:40:e2:45:5f:2a:6f:24:78:85:60:85:50:ae:
e3:c3:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net