Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/H-wI8WViyvhQ58migChLNEMEYb4.roa
File: H-wI8WViyvhQ58migChLNEMEYb4.roa (raw, json)
Hash identifier: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=
Subject key identifier: 1F:EC:08:F1:65:62:CA:F8:50:E7:C9:A2:80:28:4B:34:43:04:61:BE
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0F14C06A705FAF1BAE9A8E5E5E09
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/H-wI8WViyvhQ58migChLNEMEYb4.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 146.19.155.0/24 maxlen: 24
2a11:53c6::/32 maxlen: 48
2a11:53c7::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0f:14:c0:6a:70:5f:af:1b:ae:9a:8e:5e:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fec08f16562caf850e7c9a280284b34430461be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:49:44:33:32:ec:c4:f9:04:38:69:2a:08:
d9:96:39:48:d1:69:8f:84:22:e5:9c:3f:95:24:5b:
07:b0:b0:90:49:7a:d3:a9:0a:4a:7e:ca:b7:32:19:
6d:36:c7:fd:aa:1d:24:a4:aa:e5:6b:a6:e0:88:ad:
69:f9:3f:01:87:01:3b:57:3e:c9:ae:42:60:30:9c:
72:ee:a5:9e:98:ae:33:6b:dc:0c:90:8e:36:4d:3e:
f9:1b:14:87:8c:19:66:bd:05:f1:6f:79:37:59:1f:
3c:50:50:e1:94:8c:16:27:8a:50:29:c7:f6:f3:4d:
32:c4:68:f1:02:fa:c7:04:d4:3e:b1:72:a5:c4:42:
04:f9:67:d0:9c:1e:86:ee:0a:62:d5:54:6e:43:03:
d9:b5:0c:7d:44:50:2f:4c:b7:1f:3e:0c:0a:0a:eb:
fa:00:db:3f:33:da:14:73:5f:e5:aa:97:98:56:ec:
a2:a0:04:61:1c:b2:b5:7f:6f:26:c0:31:cb:95:c1:
97:4e:37:68:9d:84:53:6e:4a:5b:ae:32:80:88:2a:
a3:df:8a:b8:54:21:48:c4:98:f1:32:2c:40:97:b3:
fc:ec:ce:f1:9a:64:92:57:5a:41:18:a0:67:4c:1a:
0b:9b:bb:44:3b:af:cc:d6:c3:ec:3b:5d:d7:bf:1f:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:08:F1:65:62:CA:F8:50:E7:C9:A2:80:28:4B:34:43:04:61:BE
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/H-wI8WViyvhQ58migChLNEMEYb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
IPv6:
2a11:53c6::/31
Signature Algorithm: sha256WithRSAEncryption
26:7c:b0:c3:cc:88:aa:f8:d9:60:98:22:e7:49:80:80:6e:ca:
cf:9e:ac:6c:f5:93:eb:73:96:82:ec:de:29:02:8b:c6:99:f0:
dd:77:cb:11:7f:d4:42:04:fd:89:f9:a7:d5:ff:38:c1:20:70:
2d:d6:cd:ed:c6:75:07:91:ab:11:0a:2c:f9:0c:f0:4b:9a:8a:
a4:97:52:94:a6:32:e0:8c:f9:8d:43:30:a5:c6:3c:26:87:13:
f8:65:9d:c9:c2:6c:ba:bf:b8:76:19:51:22:d6:0b:aa:d2:4f:
79:51:b4:9f:1a:02:fa:89:db:49:82:04:cc:ba:25:55:6d:cb:
9e:59:9a:81:d9:55:bf:91:58:f5:e1:42:03:86:e9:82:08:61:
ef:27:15:9a:9f:34:d3:ca:9b:5b:3f:07:2a:2b:63:7e:47:3c:
50:10:fe:f8:cd:b3:fa:4a:d5:23:86:65:4a:3b:ae:71:d6:d1:
b5:52:bf:3d:e4:32:f3:d1:d6:c6:39:fb:6c:b1:57:17:c2:4e:
0c:51:6b:03:4b:41:f1:28:63:c9:c0:5d:82:43:f9:34:5c:0a:
61:d2:14:53:a9:41:1d:e1:70:9a:56:56:dc:ff:6c:db:fd:dd:
7e:05:5b:13:61:0a:35:cb:57:48:f8:06:fc:2f:c3:48:0c:82:
3d:a1:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:26 2025 by rpki-client