Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/D-AIR8Kvxdf5NNh-v8TV-vQ8yRE.roa
File: D-AIR8Kvxdf5NNh-v8TV-vQ8yRE.roa (raw, json)
Hash identifier: cU1kwDqLol0pKZs1pebP1PKp/kdk9gzFdXNe3YCuGOE=
Subject key identifier: 0F:E0:08:47:C2:AF:C5:D7:F9:34:D8:7E:BF:C4:D5:FA:F4:3C:C9:11
Certificate issuer: /CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Certificate serial: 7A44E3
Authority key identifier: 40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/D-AIR8Kvxdf5NNh-v8TV-vQ8yRE.roa
Signing time: Sat 01 Jan 2022 03:51:54 +0000
ROA not before: Sat 01 Jan 2022 03:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 146.19.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8013027 (0x7a44e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Validity
Not Before: Jan 1 03:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fe00847c2afc5d7f934d87ebfc4d5faf43cc911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:21:c9:f7:1c:47:36:1e:16:3b:13:12:59:
1e:10:71:dd:73:43:3a:2d:d7:10:58:1e:ab:9a:82:
50:f7:48:bf:14:4f:dd:bf:80:c6:fe:41:17:a3:f6:
b0:12:eb:48:4b:ae:ea:d3:01:6b:21:d2:10:16:ed:
bc:6b:d6:50:36:f2:b8:8e:e1:01:5d:65:3a:d8:99:
17:01:0f:eb:80:c6:de:9a:04:db:38:25:38:fd:99:
ff:19:15:78:d6:ae:c9:bc:62:ea:9a:58:27:a4:f9:
2d:bc:77:fe:4d:21:6a:ca:3b:fa:9e:06:53:fc:16:
e1:2e:3a:d8:23:90:6b:0d:da:8e:00:ad:e0:90:f3:
ef:09:92:f2:3e:c0:92:9b:b9:33:18:ff:eb:dc:1e:
83:53:60:27:fb:21:54:0f:f0:d2:fd:b9:ed:f3:ca:
dc:cb:bb:6a:31:da:b7:3a:eb:ab:7e:7f:c8:f9:f9:
87:3e:76:86:a7:e5:81:4e:3c:e1:dc:7c:fa:af:8e:
df:26:f8:01:92:c4:bc:d2:6a:72:bf:73:3b:08:c3:
ba:c5:bc:13:24:d9:10:15:62:b2:52:f7:fd:ed:2f:
e9:31:61:5f:45:7a:2e:4f:2f:05:22:ed:fc:57:38:
20:0d:47:4f:58:8f:a8:d5:e3:3d:b4:88:54:76:4c:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:08:47:C2:AF:C5:D7:F9:34:D8:7E:BF:C4:D5:FA:F4:3C:C9:11
X509v3 Authority Key Identifier:
keyid:40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/D-AIR8Kvxdf5NNh-v8TV-vQ8yRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/QJjx05CtQiZLX8Tm62-DCXtXnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fe:2b:a0:26:0c:3e:ee:20:31:19:3d:29:7d:10:20:3b:2e:
2f:3e:56:6a:e0:22:86:f0:0f:fb:ce:aa:a5:15:0f:55:ec:ab:
c9:60:f2:1c:d3:50:6d:aa:40:a4:d9:98:64:e2:67:f8:65:76:
95:ad:90:c7:12:69:56:a3:55:72:2b:d1:66:a2:a5:ac:c5:eb:
7c:ed:da:fb:76:a9:02:d1:7d:39:7e:31:4e:4d:f5:a6:2c:35:
7f:92:2c:9c:1e:ce:7f:e6:4d:a1:c8:40:43:35:ca:24:03:d0:
71:8b:d0:7e:81:62:d1:02:3c:8d:89:43:0c:97:f4:3b:e5:48:
a6:39:6b:60:84:9f:eb:97:65:d7:7c:25:67:a0:6b:19:1c:83:
93:d4:df:ef:6c:52:37:5f:32:bd:1c:88:a1:e5:b3:99:be:6b:
6e:d0:61:68:e1:52:4d:ed:b5:5d:39:e9:4a:73:36:b4:a5:f6:
df:78:82:5b:64:01:1a:23:ca:9e:1f:fb:0b:e6:17:4f:1c:eb:
e7:ef:0a:94:c1:e9:6a:54:05:d8:b9:83:4a:1e:24:3e:22:f9:
62:c3:79:cd:4d:1c:b7:4c:67:d7:9e:75:ee:ea:3c:d5:f4:e0:
f5:2b:1d:ce:b0:27:6b:b8:89:3c:23:22:24:08:a3:9c:1d:9c:
55:5b:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:16 2025 by rpki-client