Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/fxltUImmBkLuRMyMWzovEcAkrjs.roa
File: fxltUImmBkLuRMyMWzovEcAkrjs.roa (raw, json)
Hash identifier: 7EfTbmw93dO12jQJmufEw4YDxkqv0EqskajSX1gFSWA=
Subject key identifier: 7F:19:6D:50:89:A6:06:42:EE:44:CC:8C:5B:3A:2F:11:C0:24:AE:3B
Certificate issuer: /CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Certificate serial: 01857155250A6E72EC8BD594F0A40116FDEF
Authority key identifier: 23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/fxltUImmBkLuRMyMWzovEcAkrjs.roa
Signing time: Mon 02 Jan 2023 07:14:43 +0000
ROA not before: Mon 02 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:25:0a:6e:72:ec:8b:d5:94:f0:a4:01:16:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Validity
Not Before: Jan 2 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f196d5089a60642ee44cc8c5b3a2f11c024ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:00:f9:f9:16:8d:17:65:d6:01:ca:96:3b:
db:c0:6b:82:e3:43:a1:10:ca:3d:fb:de:b1:ae:b4:
9b:fc:c9:1d:48:ba:f6:2b:ee:9d:d3:75:b3:0a:2f:
8d:3f:2e:01:32:48:16:d0:82:62:7e:45:a5:bf:eb:
b9:cd:22:aa:d4:d9:c8:85:d0:d3:c5:7e:72:6c:52:
ad:c6:e1:fc:f9:8c:3b:6a:e1:e7:f9:87:55:fa:5b:
f3:09:a8:7f:ba:1a:86:5e:66:e7:1a:c7:a7:cb:6e:
b3:20:32:bb:62:73:c5:56:11:28:d3:99:ae:ea:33:
ff:03:f0:54:91:51:c9:a6:a6:28:98:b5:e9:bd:82:
b8:89:05:4c:69:93:d8:b4:60:04:32:7c:1e:f0:58:
bc:e8:4a:05:ef:40:d6:68:b2:85:0a:05:7c:7c:a6:
bb:66:90:9f:0f:cb:a5:ed:33:60:3a:6e:57:29:9e:
6a:96:d5:91:34:6c:05:a3:de:5e:e1:af:0a:b0:2e:
93:7e:b5:db:67:e2:91:41:7a:de:1f:d2:ff:72:48:
a7:57:5a:39:20:d8:9b:3b:95:f8:a8:f6:ef:3b:50:
cc:9f:e3:28:4b:47:33:64:8c:af:93:f4:81:67:d4:
2e:34:a2:6e:1b:c4:8d:b4:2b:e2:22:ea:01:06:a0:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:6D:50:89:A6:06:42:EE:44:CC:8C:5B:3A:2F:11:C0:24:AE:3B
X509v3 Authority Key Identifier:
keyid:23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/fxltUImmBkLuRMyMWzovEcAkrjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
89:66:68:93:5b:43:be:1a:aa:ca:c9:55:b1:c9:87:c8:29:59:
b0:fb:30:d9:1a:1d:bc:a2:a2:4b:5a:31:ed:a4:7a:00:5e:cf:
24:6a:24:f8:8d:ba:66:31:68:d1:7a:e7:ad:e3:10:8d:ae:7b:
a5:b3:4d:b2:ad:8b:e2:42:f2:00:e7:fc:15:8e:0f:19:21:29:
ea:90:40:dc:b5:b1:26:b4:f6:c3:d0:cc:6a:4a:22:55:f0:38:
3b:36:97:e7:8e:65:e6:38:46:36:eb:65:5a:ef:2f:1f:5a:a4:
76:96:4a:d5:b7:ce:82:30:09:99:ac:17:85:0c:7a:ef:14:93:
cd:60:6f:a0:c0:2c:13:3f:73:bc:f1:45:a9:c5:dd:eb:c3:3a:
8e:63:42:7a:44:dc:19:09:2e:bb:d3:b7:4f:9d:0a:10:d0:c1:
4b:9d:b2:db:77:13:c6:97:b3:88:8d:1d:79:c7:71:84:26:82:
b3:b0:f2:2b:73:fd:7a:bf:9f:7c:c1:07:ca:6e:19:c1:7a:59:
ab:9f:95:59:a9:87:f5:27:d8:5f:f6:3a:05:fe:c9:98:59:aa:
bb:54:f5:1c:8f:b9:82:4c:0f:74:0a:0d:60:9b:cb:e4:eb:29:
7f:dd:ee:80:ce:5e:06:87:b1:a5:80:a7:0d:2e:d9:36:ff:2a:
6b:a5:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:46 2025 by rpki-client