Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/5A5Qe1EW0KmXF-QXPtuKf0arOEI.roa
File: 5A5Qe1EW0KmXF-QXPtuKf0arOEI.roa (raw, json)
Hash identifier: AA4WfBD172y8jkoxAfIXQziU8sknSH25JF19j1AnjYg=
Subject key identifier: E4:0E:50:7B:51:16:D0:A9:97:17:E4:17:3E:DB:8A:7F:46:AB:38:42
Certificate issuer: /CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Certificate serial: 018976D5C0E97CFB8C312648B6A9FD2EC6EE
Authority key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/5A5Qe1EW0KmXF-QXPtuKf0arOEI.roa
Signing time: Fri 21 Jul 2023 05:04:27 +0000
ROA not before: Fri 21 Jul 2023 05:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142299
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:76:d5:c0:e9:7c:fb:8c:31:26:48:b6:a9:fd:2e:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Validity
Not Before: Jul 21 05:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40e507b5116d0a99717e4173edb8a7f46ab3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:a8:0c:ca:87:80:09:0d:77:1e:3b:a5:08:
51:78:c9:7e:0d:67:02:67:f5:14:f2:25:6f:31:07:
d3:b2:d1:31:53:5f:5c:20:78:f6:15:6f:34:50:05:
70:d8:7c:73:3f:cf:60:ad:a9:91:59:d9:62:ec:42:
c3:de:bc:ed:17:b7:35:f9:54:7c:1a:89:13:ac:41:
70:33:a7:80:f2:d5:45:22:25:7e:bb:0b:a2:87:da:
38:41:46:39:c3:09:34:2b:19:78:db:cf:90:b8:e0:
5a:33:60:49:a3:31:99:87:a4:d4:1d:12:ad:aa:b7:
3a:85:18:1a:b8:27:63:51:68:7f:5f:8a:19:61:2b:
d0:fd:b6:7e:a0:3a:b3:4d:8c:be:28:7f:6a:71:22:
82:e4:e8:03:66:b1:04:a5:89:46:e5:11:3f:c8:e0:
a9:cc:a5:2a:0e:6f:51:67:9d:71:5f:48:99:76:33:
80:9b:72:03:f6:96:2b:1d:90:9f:8c:08:39:82:f8:
bb:80:34:de:ac:d9:8a:38:5e:18:e6:1d:63:09:1e:
61:f8:10:b9:0b:50:ad:c8:76:a7:9a:bf:31:12:36:
23:70:b2:e1:62:70:44:96:6a:b1:d3:20:f7:bf:8f:
f4:31:6d:96:90:ca:8c:13:2b:a2:e9:1e:72:8e:35:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0E:50:7B:51:16:D0:A9:97:17:E4:17:3E:DB:8A:7F:46:AB:38:42
X509v3 Authority Key Identifier:
keyid:B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/5A5Qe1EW0KmXF-QXPtuKf0arOEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:53:3b:72:de:65:66:a4:20:b0:12:cf:69:48:db:f1:52:e3:
a9:e1:0e:a9:3e:58:e7:e3:9d:f0:31:cc:d8:d4:44:94:7a:79:
fe:e1:49:32:a7:49:37:51:c0:ea:2c:ce:64:41:ea:4b:4d:35:
d8:26:ea:74:c1:be:ec:44:6d:af:dd:fb:8e:c3:b9:ef:10:6e:
0e:57:0f:5c:37:cb:0c:50:51:74:df:51:c5:ca:9b:19:5c:6a:
f8:18:16:de:d0:04:bf:87:3c:53:61:c8:36:0f:a0:07:51:ce:
dc:d9:0f:e4:23:b1:06:3f:47:cf:03:07:66:de:e3:84:1a:8a:
91:be:e3:27:eb:0f:ed:d7:7f:17:0d:51:7a:5e:f2:37:99:66:
91:4f:2d:6c:d2:aa:09:0f:e2:6a:57:c6:d1:42:98:5a:24:56:
1b:ac:cb:3d:03:7e:71:1f:b5:4b:a5:5d:26:e8:d5:f4:b8:60:
78:d1:e8:89:90:a9:b1:1f:87:9b:58:4a:f7:f2:09:e7:91:e8:
4a:46:c6:94:94:90:54:00:1d:9a:cb:fe:77:69:bb:78:71:13:
8e:b8:0e:5e:91:b9:75:23:b8:d1:25:3e:69:90:1f:31:93:d2:
fc:d5:5e:94:4a:60:a9:50:4d:e2:ba:45:8d:e3:c5:3a:52:12:
ab:52:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:13:32 2025 by rpki-client