Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/82abf8-d374-46cd-b690-ada87620447d/1/27P1sTIs4qaQbgVwtg9iPUrCOgI.roa
File: 27P1sTIs4qaQbgVwtg9iPUrCOgI.roa (raw, json)
Hash identifier: 6Dpcoh/WX63fWkzvPs5y+lUY7mBupdFOs+Kkrm0QzTM=
Subject key identifier: DB:B3:F5:B1:32:2C:E2:A6:90:6E:05:70:B6:0F:62:3D:4A:C2:3A:02
Certificate issuer: /CN=df05957c259f0766209bb485a1f1fa6afa2f930a
Certificate serial: 0185729EE0CB8FFC501C68316BED06E2C94B
Authority key identifier: DF:05:95:7C:25:9F:07:66:20:9B:B4:85:A1:F1:FA:6A:FA:2F:93:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wWVfCWfB2Ygm7SFofH6avovkwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/82abf8-d374-46cd-b690-ada87620447d/1/27P1sTIs4qaQbgVwtg9iPUrCOgI.roa
Signing time: Mon 02 Jan 2023 13:14:52 +0000
ROA not before: Mon 02 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e0:cb:8f:fc:50:1c:68:31:6b:ed:06:e2:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df05957c259f0766209bb485a1f1fa6afa2f930a
Validity
Not Before: Jan 2 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb3f5b1322ce2a6906e0570b60f623d4ac23a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:50:3c:07:31:ca:d2:aa:a5:1f:9d:13:58:
59:32:2a:d2:1b:d0:b1:e6:44:22:74:52:5a:9c:5e:
e5:ec:69:d5:c4:f2:b5:db:c5:d3:e8:a1:98:75:36:
bd:2e:c1:24:5f:f1:e9:b6:76:36:31:cf:58:73:63:
f8:b9:d6:a0:77:10:ab:f6:ed:0b:6b:ee:b2:32:b4:
de:bb:a7:3e:ae:d0:07:7f:f3:5a:3f:01:82:33:95:
d7:79:b4:e8:c7:15:cf:de:e7:9f:2a:56:ef:73:da:
17:c1:19:6f:0d:3c:ba:04:b3:1e:74:0b:0f:7b:a3:
d1:ce:43:6f:d0:3b:8f:55:26:9f:7e:52:5b:01:bf:
f7:d0:11:77:09:53:9d:a4:fe:7d:26:a9:26:9b:3d:
db:63:56:03:e8:63:11:c5:9a:6c:8b:34:2f:45:60:
db:5b:7f:03:94:b1:4e:a4:eb:bb:76:06:0b:f2:83:
25:b1:aa:d6:63:5f:37:a0:e9:56:e5:83:5a:56:5a:
63:51:69:f3:81:9e:8f:48:10:f4:f6:23:df:74:4d:
e1:fa:28:c8:a7:1e:8f:6a:bc:28:a5:66:12:cf:2e:
20:7d:fc:f4:fa:d3:7f:21:dd:8d:70:a5:36:77:69:
22:6e:d0:3c:87:43:32:80:06:52:4c:9f:50:b5:67:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:F5:B1:32:2C:E2:A6:90:6E:05:70:B6:0F:62:3D:4A:C2:3A:02
X509v3 Authority Key Identifier:
keyid:DF:05:95:7C:25:9F:07:66:20:9B:B4:85:A1:F1:FA:6A:FA:2F:93:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wWVfCWfB2Ygm7SFofH6avovkwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/82abf8-d374-46cd-b690-ada87620447d/1/27P1sTIs4qaQbgVwtg9iPUrCOgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/82abf8-d374-46cd-b690-ada87620447d/1/3wWVfCWfB2Ygm7SFofH6avovkwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.15.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6b:bd:cb:b5:6f:45:85:6b:27:75:ed:1a:3d:f2:05:32:fd:
a8:c5:c2:70:d7:af:76:83:44:1c:7e:82:ed:2d:14:3d:72:23:
50:af:59:ee:d4:cc:96:91:f8:1b:c2:cc:be:9c:4f:31:ba:04:
1b:8c:86:ae:56:f5:a4:e9:c7:86:a5:6c:b0:9d:31:02:98:05:
96:e8:de:bd:f9:91:ee:08:1e:ba:76:05:02:21:ca:c2:28:49:
bf:e7:6d:f5:ad:8e:68:bf:f4:7d:f8:9e:58:53:f9:b6:2e:ea:
1c:c0:74:a4:03:31:0e:98:57:1f:49:8d:b3:2c:87:3e:70:ce:
04:99:d4:c8:de:9e:3b:52:48:7b:34:00:32:2e:42:3e:9c:54:
af:ea:58:55:a7:f1:67:d6:99:dd:a2:4b:a9:be:26:fb:c7:7c:
2f:76:3b:24:ad:f5:c9:ad:8c:96:e6:57:03:a5:91:0f:b9:57:
b0:fa:c6:fc:43:0c:0f:63:41:76:a0:4d:42:23:01:62:e8:90:
f1:e7:cf:a5:fe:30:17:a9:ba:a6:ce:fc:03:d1:d1:44:0e:5e:
fc:60:b1:b3:89:15:f6:d7:01:c5:51:54:04:51:91:b4:ee:ed:
64:08:af:29:5e:5b:71:68:13:24:88:50:58:32:47:6e:93:7a:
b9:9f:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:03 2025 by rpki-client