Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/ixdbBnqUxMGydFrwfDqQmNyz_EQ.roa
File: ixdbBnqUxMGydFrwfDqQmNyz_EQ.roa (raw, json)
Hash identifier: 1YwmBGc+hWXH8RcyOXsSPmnf1pALvJu2F3/J/fR913k=
Subject key identifier: 8B:17:5B:06:7A:94:C4:C1:B2:74:5A:F0:7C:3A:90:98:DC:B3:FC:44
Certificate issuer: /CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Certificate serial: 0181F46A8C09B293C4E7BA86D3C0017F713D
Authority key identifier: 1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/ixdbBnqUxMGydFrwfDqQmNyz_EQ.roa
Signing time: Tue 12 Jul 2022 21:57:12 +0000
ROA not before: Tue 12 Jul 2022 21:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6a:8c:09:b2:93:c4:e7:ba:86:d3:c0:01:7f:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Validity
Not Before: Jul 12 21:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b175b067a94c4c1b2745af07c3a9098dcb3fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:24:fc:6b:36:0b:3e:53:e3:40:4d:37:d0:
3b:29:28:a0:60:2b:c3:48:fd:b0:cd:3d:7a:3e:df:
5f:0e:3b:ab:fb:5c:5a:6d:17:75:78:48:d4:ca:5a:
82:35:9d:43:d0:52:68:fd:51:4a:b9:86:55:9c:e9:
63:ee:1f:5a:14:6c:b4:6b:e3:24:28:dc:0f:88:d2:
4e:8c:0b:16:ed:20:d0:74:de:08:42:ce:14:dd:09:
75:d2:1a:90:d6:f5:c9:a6:36:68:a4:1d:27:a8:65:
1c:74:c3:52:b2:2c:6f:ef:a5:2e:4c:f9:8a:5b:be:
4c:ad:bc:72:82:ae:1a:cf:47:dd:3b:12:b9:24:e9:
a4:56:42:a8:04:89:42:61:5a:86:c2:be:f7:9f:01:
78:23:17:ef:23:73:93:b4:ee:6c:38:b1:c7:14:e0:
04:69:63:f1:91:df:3a:40:36:7f:fe:db:d5:7e:db:
32:b8:73:2e:17:77:a0:64:b4:7f:33:2d:54:62:46:
2a:eb:35:55:cb:59:d7:8f:4d:c2:0e:db:d5:f7:fb:
06:de:e9:49:61:c9:95:57:50:3c:28:d1:c3:1c:6e:
e5:69:40:91:d8:73:6c:03:a7:2f:c7:7b:c1:7a:e1:
e4:94:d9:21:4c:ff:b1:9a:01:a7:3e:81:0c:32:57:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:5B:06:7A:94:C4:C1:B2:74:5A:F0:7C:3A:90:98:DC:B3:FC:44
X509v3 Authority Key Identifier:
keyid:1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/ixdbBnqUxMGydFrwfDqQmNyz_EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2a:2a:cf:ce:7f:71:b4:24:56:75:25:d0:98:48:54:eb:90:
62:78:cc:3e:cb:fb:45:61:00:e6:26:5d:ca:3c:04:2f:d0:6f:
94:71:81:b3:24:a4:7c:95:2e:20:ca:3c:f8:3a:eb:e8:59:c1:
85:a9:f1:2a:9e:10:42:fd:5f:38:a3:82:cf:e3:4a:f1:07:ba:
20:13:37:61:d3:12:9f:49:ed:3c:16:ff:19:3c:f8:b3:6c:15:
d4:4c:8b:0c:3b:9a:b0:1d:aa:23:b8:b5:52:27:ca:d7:5e:fd:
dc:16:94:ee:fe:d4:08:3a:06:fe:d3:95:b0:3a:40:a0:39:97:
07:d0:e7:c1:de:b9:b5:6e:b2:89:e1:36:ee:41:62:29:e4:31:
c7:ea:20:4c:c1:aa:66:60:03:fb:3a:fa:ae:20:4e:b1:e1:97:
e9:92:9c:df:06:b6:ff:01:14:6f:9e:18:5f:ca:9c:76:34:76:
2d:aa:e1:18:4d:9d:df:f1:3d:2a:6d:26:c9:cf:e0:c7:b5:5d:
b5:a9:be:b7:96:74:bb:e1:92:b6:8a:d9:1e:e5:91:db:31:10:
7c:e0:6a:7b:e7:19:d7:f3:51:48:66:36:d9:82:b0:07:59:22:
fc:31:7a:b0:71:0c:55:d2:49:18:ea:ac:e2:4d:35:25:be:92:
8e:61:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:12 2025 by rpki-client