Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/xJnyI_rZs6F1eLv18hkkktq4rq8.roa
File: xJnyI_rZs6F1eLv18hkkktq4rq8.roa (raw, json)
Hash identifier: V+zGQ1Sn/xsOu549nvYhCo2vhzKXNVWg1cOomRVJlPk=
Subject key identifier: C4:99:F2:23:FA:D9:B3:A1:75:78:BB:F5:F2:19:24:92:DA:B8:AE:AF
Certificate issuer: /CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Certificate serial: 018675163DE7D129050EAFE3A77425082C34
Authority key identifier: B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/xJnyI_rZs6F1eLv18hkkktq4rq8.roa
Signing time: Tue 21 Feb 2023 17:47:17 +0000
ROA not before: Tue 21 Feb 2023 17:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 146.19.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:16:3d:e7:d1:29:05:0e:af:e3:a7:74:25:08:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Validity
Not Before: Feb 21 17:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c499f223fad9b3a17578bbf5f2192492dab8aeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:c0:b1:26:49:e5:18:07:27:d6:32:ec:69:
29:04:5d:e6:53:37:40:e9:19:7a:f0:0a:21:61:68:
de:dd:b0:8d:cc:c1:c6:1f:95:b7:8c:1e:4a:43:3a:
b3:b5:c8:4f:0d:56:20:e1:0f:ec:56:71:23:1f:b2:
c8:b1:39:10:7a:e9:4d:7c:44:fe:ba:42:25:fd:1f:
15:37:22:18:c7:33:23:a2:97:18:27:f8:b3:cb:d7:
ef:4b:12:02:c5:a3:92:6d:35:01:66:ef:15:7f:24:
bd:ac:b7:dc:93:a8:42:83:36:dd:99:e6:c9:f7:7a:
85:09:dc:70:89:45:92:77:a2:74:7f:e4:a2:40:37:
f3:b5:c9:af:1e:51:40:18:af:fc:e0:82:2f:e4:af:
01:df:ab:b5:f9:34:2f:dc:b7:f8:33:a1:69:aa:69:
1b:bd:47:f0:12:d2:f3:bf:56:0d:66:07:50:3e:bc:
b4:4a:43:d9:b1:2e:bd:9e:77:0f:7b:07:48:e1:f8:
36:b2:57:93:93:b2:58:08:2b:43:8c:c9:c8:a3:f2:
6a:10:69:45:18:81:ab:bc:a5:84:2f:af:79:c6:a9:
7d:9d:26:9c:3b:c7:90:e0:d2:a2:6c:a8:bf:77:d3:
f8:74:dd:c9:4c:b2:05:3c:1c:49:cb:30:33:db:a0:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:F2:23:FA:D9:B3:A1:75:78:BB:F5:F2:19:24:92:DA:B8:AE:AF
X509v3 Authority Key Identifier:
keyid:B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/xJnyI_rZs6F1eLv18hkkktq4rq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:09:dd:11:81:ac:b9:75:78:2a:0f:99:13:0f:c3:d0:ed:5a:
a5:4b:6e:d0:1c:09:84:30:7b:dd:3b:bb:22:8b:e6:83:47:dc:
3e:4e:f2:f9:fe:ac:7c:5a:f9:d3:0f:c0:7e:3b:04:ab:54:6f:
a1:9a:73:e9:3c:2e:55:9a:03:cd:e6:15:0c:3b:87:62:95:b7:
a6:9c:93:62:ad:50:b2:a7:59:21:18:12:b4:a5:cc:43:be:ec:
6b:42:76:30:53:12:cd:19:da:92:6c:a7:61:64:cb:53:eb:55:
2b:5b:5f:d7:be:35:aa:7e:05:01:0e:6d:2d:63:52:35:43:31:
28:20:0e:e3:7d:48:8e:e3:4f:25:9d:0c:d6:be:98:0c:1a:48:
d8:ae:79:72:09:55:c5:ba:c7:f7:13:c4:9f:c2:ea:29:5e:34:
ea:99:66:42:4f:1f:32:57:5b:e4:dd:d4:11:ea:ff:86:7b:4c:
0d:d2:54:45:96:b5:0b:f1:b8:98:40:d0:d0:87:36:0b:7d:ff:
26:bb:42:6e:0c:56:37:d0:3c:5a:68:67:85:94:bd:04:9c:b3:
c6:7d:98:d7:ff:78:4b:fe:05:7f:c2:06:13:25:15:52:02:10:
98:17:f1:8c:3c:d2:05:15:b8:d9:83:f8:ce:b7:5e:86:c0:2d:
c1:e3:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:13 2025 by rpki-client