Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/drs9oDtcdvTnDp6XNHgaFEJQwhA.roa
File: drs9oDtcdvTnDp6XNHgaFEJQwhA.roa (raw, json)
Hash identifier: M1sDlhDCNpfxOcs5GG8BrQgD+U3e9LotZMJho3AVbeI=
Subject key identifier: 76:BB:3D:A0:3B:5C:76:F4:E7:0E:9E:97:34:78:1A:14:42:50:C2:10
Certificate issuer: /CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Certificate serial: 01884C8F11A20F8EDB647BC12295D36B6886
Authority key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/drs9oDtcdvTnDp6XNHgaFEJQwhA.roa
Signing time: Wed 24 May 2023 07:00:24 +0000
ROA not before: Wed 24 May 2023 07:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:8f:11:a2:0f:8e:db:64:7b:c1:22:95:d3:6b:68:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Validity
Not Before: May 24 07:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76bb3da03b5c76f4e70e9e9734781a144250c210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:7f:d1:a5:57:ee:4e:6b:f2:a6:6c:b3:24:
15:15:4b:b9:7c:1d:be:94:e7:b4:36:ea:a5:3c:71:
03:92:d4:4f:f1:22:e4:cc:7a:44:ee:85:d3:32:23:
d0:4c:29:2c:73:9e:50:a4:a3:a1:e1:c7:ac:45:34:
d1:ba:81:29:ed:91:4f:a3:59:41:32:bb:a5:e1:03:
41:5e:fc:c5:c3:01:1e:8b:62:83:e3:33:26:b5:a4:
55:fa:98:83:2c:f8:5b:c7:27:38:1a:8c:88:8e:5d:
8a:b2:80:b4:25:37:3c:0c:b1:7e:89:73:63:a2:df:
1e:4e:73:f8:10:ec:aa:6c:3f:40:33:4f:34:4a:33:
ae:5b:25:46:96:d4:ea:0c:b6:fc:64:a9:0d:50:e5:
51:d2:55:6c:a4:e7:62:69:de:e8:84:a2:95:37:a8:
e5:73:35:83:15:db:bf:ae:36:79:fd:f4:51:a9:12:
f3:17:45:a6:7e:84:47:bb:f7:aa:37:2f:50:f9:2d:
e1:4d:43:4e:a6:e3:dc:fd:7a:f0:cd:56:d6:1c:fe:
fb:41:ed:09:87:27:45:23:f3:9a:dc:3e:72:cd:88:
4a:3c:93:00:ac:3b:b5:d8:6f:6a:1c:5b:29:d9:94:
b9:6e:68:4c:84:47:21:4a:05:39:86:85:f3:bb:61:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:3D:A0:3B:5C:76:F4:E7:0E:9E:97:34:78:1A:14:42:50:C2:10
X509v3 Authority Key Identifier:
keyid:B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/drs9oDtcdvTnDp6XNHgaFEJQwhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:c1:11:67:1b:21:dc:f0:b9:c8:f0:d1:b3:1e:f2:1e:bf:
08:0e:e8:10:87:b3:36:32:e9:85:a8:57:36:d9:a4:16:8f:36:
16:97:2e:53:4a:50:a4:7c:04:d1:22:ad:da:f0:0f:4f:92:93:
1b:21:8e:bc:82:23:03:9e:e6:af:9c:38:30:f2:dd:56:8c:08:
90:f8:ee:43:c9:d5:ac:12:74:c3:ca:18:49:31:a3:3b:0c:62:
7e:fc:0f:1c:e3:57:ae:9c:14:78:63:8d:28:c1:ae:5f:70:93:
12:5b:9f:4d:c8:12:f8:49:06:5d:02:24:9e:10:5c:15:c9:7c:
55:17:02:11:5c:84:ec:32:89:e4:b9:91:50:1d:5f:0c:6e:36:
b3:ab:d7:52:f1:82:7a:5d:32:84:4c:b3:a4:51:7a:30:f8:6a:
ea:54:03:0c:cf:e6:a9:34:0e:1d:b3:0f:0f:4b:9f:d7:a0:7b:
9d:3e:a0:5e:52:87:42:af:0c:f1:06:32:2d:c8:75:4f:a4:6c:
3c:67:48:40:c6:3b:9c:96:04:df:1d:b4:30:bd:48:80:c5:7e:
70:d1:05:de:21:8c:d2:6b:2d:30:88:f4:56:6b:99:c1:d3:fc:
7b:aa:85:a8:40:79:c2:10:b3:d5:9b:86:96:32:2f:86:52:6d:
b9:8b:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:16 2025 by rpki-client