Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/IimdHRFx592p26H2Tg1bZGCDm8U.roa
File: IimdHRFx592p26H2Tg1bZGCDm8U.roa (raw, json)
Hash identifier: fqlslKEroe0Kzog4G0lyeYxG7PwX/PqQ7TW5j6MIzHU=
Subject key identifier: 22:29:9D:1D:11:71:E7:DD:A9:DB:A1:F6:4E:0D:5B:64:60:83:9B:C5
Certificate issuer: /CN=30dda8ec22370cfefcfe58c4cab2bae02d9d23d5
Certificate serial: 01856F9DE1AF708912E82E1BDE474A4DF1D7
Authority key identifier: 30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN2o7CI3DP78_ljEyrK64C2dI9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/IimdHRFx592p26H2Tg1bZGCDm8U.roa
Signing time: Sun 01 Jan 2023 23:14:55 +0000
ROA not before: Sun 01 Jan 2023 23:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 146.19.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e1:af:70:89:12:e8:2e:1b:de:47:4a:4d:f1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dda8ec22370cfefcfe58c4cab2bae02d9d23d5
Validity
Not Before: Jan 1 23:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22299d1d1171e7dda9dba1f64e0d5b6460839bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:ec:82:3c:9e:0a:16:9f:e7:5a:29:14:59:
67:42:75:39:f7:8f:6d:ad:1b:51:08:ae:24:61:1d:
0b:0e:df:a8:d6:9b:a1:33:90:11:1c:bd:18:ad:58:
5c:9b:0e:54:0f:88:7f:a8:8b:cc:74:18:f3:01:b8:
a9:0e:c0:84:7e:a5:ae:0b:66:db:aa:6b:a7:7e:55:
80:b7:fc:9f:a0:c2:f2:fe:10:7d:16:e3:83:68:c7:
3f:e7:4f:56:8b:15:2c:41:3e:73:31:73:d8:e1:03:
8c:00:30:6a:9d:f9:25:12:7d:1e:1d:54:35:7e:a0:
2f:10:c4:54:a3:58:85:c4:6a:99:08:11:4b:9f:2c:
37:a5:e1:ca:cd:78:0f:dc:49:5d:85:2c:c9:1c:bc:
03:33:a4:af:d5:dd:cf:c2:38:59:bb:8a:eb:81:e4:
9a:69:20:3a:24:b7:ce:f4:d1:57:1c:ef:56:06:34:
10:ca:63:b0:03:32:31:cf:4b:2c:fb:5e:f6:40:71:
82:d5:ff:29:22:88:9a:83:0a:f7:4f:06:9f:1e:dd:
29:b9:a4:66:0d:76:40:3b:21:8a:d5:bc:96:7f:a7:
43:0a:cd:14:36:39:9f:21:31:55:c0:bd:17:72:3f:
b4:ba:4e:6a:71:34:b4:d0:68:8f:74:55:79:31:2c:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:9D:1D:11:71:E7:DD:A9:DB:A1:F6:4E:0D:5B:64:60:83:9B:C5
X509v3 Authority Key Identifier:
keyid:30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN2o7CI3DP78_ljEyrK64C2dI9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/IimdHRFx592p26H2Tg1bZGCDm8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/MN2o7CI3DP78_ljEyrK64C2dI9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.95.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:eb:7b:22:26:57:17:73:43:43:13:44:1f:6a:60:d5:02:
b0:b5:dc:aa:f2:c4:71:f0:e8:1a:f4:c4:1e:f0:36:dd:e9:c7:
5d:db:1d:7d:d1:78:ad:cf:fb:21:48:7a:2d:22:1d:cd:39:3a:
33:3f:e0:47:2a:bf:ef:85:98:52:9e:34:1e:f0:a8:01:8b:ef:
14:41:70:43:7c:be:06:79:32:49:62:e0:b7:24:26:3c:4d:c2:
a3:4d:11:d8:ae:26:4f:e8:9f:61:19:ed:6c:80:58:b2:c9:41:
20:52:40:fe:1c:94:c6:f6:9c:1d:5a:8f:e6:9c:2b:d7:f6:5b:
99:1b:3f:22:02:be:13:32:00:d3:6d:b9:68:84:28:7b:4c:dd:
7e:63:0d:c0:c4:a8:b5:38:38:99:96:01:4c:4c:e7:10:81:11:
3a:9b:81:d5:c0:38:41:c0:aa:31:08:a6:48:37:31:eb:ef:e2:
84:6d:7b:ed:e6:59:1e:df:36:43:4b:e7:aa:af:30:a6:93:46:
eb:9d:2d:7b:fc:a9:ca:ae:2a:8f:49:e0:73:bf:95:d8:19:43:
3e:e3:5e:f2:03:61:1c:df:0d:fd:51:e8:ce:a8:50:40:6c:71:
ae:52:32:d0:76:a8:34:6b:34:5e:09:66:6e:59:4e:22:32:4f:
7e:7c:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net