Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/e0MMumXd52y4dGbPwVRUj6beBWc.roa
File: e0MMumXd52y4dGbPwVRUj6beBWc.roa (raw, json)
Hash identifier: 89+CsqgY1uRhx5jykTJkPiAYcPEAQexUXZmPIjC2bio=
Subject key identifier: 7B:43:0C:BA:65:DD:E7:6C:B8:74:66:CF:C1:54:54:8F:A6:DE:05:67
Certificate issuer: /CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Certificate serial: 01856E0B07FC18D7FEB2DF699164E2839132
Authority key identifier: B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/e0MMumXd52y4dGbPwVRUj6beBWc.roa
Signing time: Sun 01 Jan 2023 15:54:54 +0000
ROA not before: Sun 01 Jan 2023 15:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:07:fc:18:d7:fe:b2:df:69:91:64:e2:83:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Validity
Not Before: Jan 1 15:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b430cba65dde76cb87466cfc154548fa6de0567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:c8:84:ac:62:d7:a6:da:b2:22:10:62:54:
99:63:6a:43:c6:48:84:d9:88:19:1b:af:71:bf:8d:
51:3f:3a:74:b8:96:f8:34:96:26:6d:95:38:5b:d0:
94:e1:d0:8e:3b:65:e2:cf:6b:30:ab:a8:6d:29:8a:
36:18:10:03:ba:98:76:1c:3a:25:31:44:81:32:d5:
b9:db:dd:ab:90:06:f0:a8:63:43:d8:9c:c2:4b:8b:
36:02:84:fa:13:6d:d7:0d:88:fc:f0:91:42:17:3a:
a1:d0:14:09:43:30:6e:16:c3:c3:7c:c7:fd:5c:60:
43:77:3e:f2:b0:29:a4:b1:9e:d5:60:35:38:73:4b:
38:a6:15:10:09:da:4f:2d:c0:f7:6f:99:27:40:d2:
49:d3:67:80:bd:0a:b3:26:04:f9:4d:56:31:b8:c7:
41:90:21:e4:09:99:cd:91:a6:d9:04:c7:60:03:00:
cd:1f:f3:15:be:b7:90:19:24:b3:79:8d:05:ba:0b:
30:7e:75:16:a0:b9:09:4f:f4:e1:e5:e7:31:a4:44:
19:13:15:61:8a:f6:97:1e:e5:d8:1f:a8:33:9a:a6:
a5:58:de:da:28:8e:d0:e2:cc:cd:37:3d:92:d0:02:
c1:77:31:14:39:b8:9a:5b:a6:5c:9b:5b:14:62:af:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:0C:BA:65:DD:E7:6C:B8:74:66:CF:C1:54:54:8F:A6:DE:05:67
X509v3 Authority Key Identifier:
keyid:B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/e0MMumXd52y4dGbPwVRUj6beBWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e2:01:d8:32:80:41:c1:3f:35:0c:dd:d2:a7:5b:81:87:96:
a5:3d:38:d0:eb:c2:a5:7d:aa:09:49:94:bd:2a:1c:be:0f:9d:
a4:b5:fc:fd:f7:0c:61:44:32:8a:cf:3b:a4:95:cc:66:c8:47:
7e:78:bd:28:8f:41:cd:83:a7:15:5a:d9:b6:21:c1:19:74:67:
e5:02:47:9d:1b:3f:04:1a:19:50:8c:24:09:9e:43:1f:22:cb:
ee:90:8c:d3:e6:ef:e3:6a:3f:e5:38:bf:be:ee:30:b5:08:c5:
15:48:2f:f3:8c:25:ec:15:49:28:af:2c:b0:d7:f5:dd:43:0d:
87:b9:ca:b2:95:bb:a9:3a:0f:d4:23:8b:4d:3b:59:8e:5f:47:
23:c8:31:bd:7d:70:3c:12:2b:23:d8:b1:b1:fa:00:61:8f:0b:
96:5c:90:a1:16:0f:80:83:b3:05:cb:22:fc:a1:ab:c9:48:ac:
32:33:74:f5:d9:9b:e9:15:9e:c8:60:9c:ee:e1:d8:54:d6:b2:
f6:f1:d6:59:8c:5c:81:6d:04:0c:2d:65:b3:f0:53:28:3a:ba:
09:30:30:c6:6f:c8:fe:07:5f:c8:37:25:6f:45:66:15:7d:b0:
05:cd:1c:a8:9a:ce:2c:43:42:7d:79:1d:21:fe:58:26:4d:91:
4a:6c:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:20 2025 by rpki-client