Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/_BqWTta4R37PBzUVnaDN4D9x1nc.roa
File: _BqWTta4R37PBzUVnaDN4D9x1nc.roa (raw, json)
Hash identifier: pME7rH+T23kMD1a+PKBWiQhgH24WkEC3KWH43Y8O0fw=
Subject key identifier: FC:1A:96:4E:D6:B8:47:7E:CF:07:35:15:9D:A0:CD:E0:3F:71:D6:77
Certificate issuer: /CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Certificate serial: 66CA74
Authority key identifier: 7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/_BqWTta4R37PBzUVnaDN4D9x1nc.roa
Signing time: Sat 01 Jan 2022 01:03:17 +0000
ROA not before: Sat 01 Jan 2022 01:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6736500 (0x66ca74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Validity
Not Before: Jan 1 01:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1a964ed6b8477ecf0735159da0cde03f71d677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:1e:90:8e:b0:24:3f:3b:d1:19:ba:5f:a3:
1a:41:89:17:3e:c9:fb:ae:70:31:2f:70:33:ad:8a:
8b:d6:67:0d:41:a4:92:3c:08:8b:70:0f:db:14:db:
70:24:4a:56:3a:17:a8:bb:08:1e:94:46:47:cb:a0:
5e:b4:b5:c3:46:b3:6e:d0:1d:49:d5:0c:b7:57:b5:
9a:02:a0:51:bb:d2:5c:01:d3:80:b0:a1:7b:44:bc:
63:56:b9:d9:d7:21:92:f9:78:30:b0:74:f7:3c:ad:
83:75:ff:64:49:0a:93:a1:ad:17:1c:de:90:cd:5e:
b5:d5:2f:af:34:4d:0a:e0:af:be:bf:b9:bf:4b:02:
99:36:6d:b1:ed:eb:9e:86:8e:42:b8:ca:69:76:a3:
73:7e:0e:56:62:37:ef:31:4e:6d:0d:40:9c:fb:97:
d9:82:4d:eb:44:ab:58:87:75:0c:25:0b:ae:f9:ff:
ae:8f:7f:6b:0c:c0:32:56:63:f8:5d:41:ff:e0:37:
e4:c0:5c:e1:4e:5e:19:23:ca:0a:a7:ab:0e:4a:e4:
37:ed:ca:75:70:d8:5c:92:78:e9:3c:e2:2e:00:62:
07:57:d1:87:57:38:fa:aa:5e:7c:7c:3f:5d:05:16:
a4:ec:1f:cd:4b:f1:24:45:22:99:28:5a:10:f4:af:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:96:4E:D6:B8:47:7E:CF:07:35:15:9D:A0:CD:E0:3F:71:D6:77
X509v3 Authority Key Identifier:
keyid:7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/_BqWTta4R37PBzUVnaDN4D9x1nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:30:5a:ab:81:20:78:48:d2:ac:d4:b5:b7:d8:24:01:e3:c2:
46:d6:ad:f5:e7:1c:db:f6:5e:6a:27:13:76:78:56:c9:de:4c:
85:bd:18:12:09:15:a3:e5:dc:aa:57:8c:bf:b6:83:c0:87:10:
b7:9b:1a:70:6f:b8:f7:7b:27:b0:9f:a5:20:25:43:a4:c8:dd:
e6:91:a2:b2:b0:23:ab:3e:19:70:80:0a:8e:0f:b7:6d:90:17:
56:ca:cc:39:3a:a9:4f:60:d9:58:3a:47:f6:b6:79:50:de:0d:
39:85:b3:a9:3c:df:87:0c:c7:b3:4d:c1:aa:81:02:d4:38:f7:
98:7f:46:ac:29:84:79:66:9d:e7:85:8a:22:c1:df:da:06:96:
0f:60:2a:e2:8a:3b:51:36:5d:9e:3d:7e:f0:32:6d:83:a0:d0:
ef:50:9f:4e:e8:85:2c:92:61:b0:b8:c4:cb:31:31:64:3a:7c:
6c:af:6b:aa:52:a1:f1:6a:e9:d3:6b:ab:7c:ea:34:82:28:f2:
1d:9c:0c:eb:31:84:8e:ff:f7:a8:94:a1:c2:ec:4e:15:55:c8:
ae:2f:f2:7c:92:9c:58:8e:33:0b:03:1f:0a:eb:2e:63:e0:61:
2f:e8:c7:c8:4c:4a:08:27:0f:03:49:eb:14:b7:65:e2:c5:e7:
a5:44:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:29 2025 by rpki-client