Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/nCIGMFazgm_68Msjw46oBVhVvmo.roa
File: nCIGMFazgm_68Msjw46oBVhVvmo.roa (raw, json)
Hash identifier: n+WngwVvjEzlnrBD4a67HMDltgUrHRIHFr/azANBZl4=
Subject key identifier: 9C:22:06:30:56:B3:82:6F:FA:F0:CB:23:C3:8E:A8:05:58:55:BE:6A
Certificate issuer: /CN=3fe4723deefa2109198a957fdfa7112c342fcfc9
Certificate serial: 735087
Authority key identifier: 3F:E4:72:3D:EE:FA:21:09:19:8A:95:7F:DF:A7:11:2C:34:2F:CF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-RyPe76IQkZipV_36cRLDQvz8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/nCIGMFazgm_68Msjw46oBVhVvmo.roa
Signing time: Sat 01 Jan 2022 01:02:06 +0000
ROA not before: Sat 01 Jan 2022 01:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7557255 (0x735087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe4723deefa2109198a957fdfa7112c342fcfc9
Validity
Not Before: Jan 1 01:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c22063056b3826ffaf0cb23c38ea8055855be6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:9d:e7:95:71:d3:0e:31:b9:43:ae:04:fd:
15:92:12:c9:06:0b:35:d5:ed:21:00:e3:17:e3:7d:
e4:13:d2:ee:11:e3:50:96:03:db:b7:e2:d4:7d:09:
c9:f2:64:e2:85:ca:c9:ee:6c:0c:54:bf:31:cf:38:
9a:fb:5c:9a:4f:eb:89:19:9f:0a:d4:97:8a:03:bb:
07:a2:6a:40:17:b0:d3:4b:c2:4d:ce:c1:68:08:57:
a4:41:82:ec:c4:fa:03:d9:99:b4:89:3b:3d:ec:dd:
c2:e4:b5:c7:7a:b1:99:3c:b1:a4:4a:3d:1c:85:96:
ec:bf:5b:26:bb:cd:d7:c1:7f:30:c8:17:b3:62:0f:
97:79:4b:77:74:da:ad:56:d5:e4:73:ad:e4:99:dc:
03:d8:97:17:05:1d:23:ed:8d:74:09:03:ed:b6:a2:
03:b4:d8:61:bc:dc:8b:27:bc:c0:a6:32:ab:30:10:
77:e7:23:c0:2f:80:ec:b5:f0:e8:5c:34:2c:89:30:
55:e8:74:57:53:0f:c0:84:bb:5f:56:d4:fd:a0:89:
52:8c:2e:62:e2:a9:8a:03:f2:16:b6:19:42:1a:10:
69:77:5b:f1:3a:a0:c3:51:43:b0:d3:d9:0d:99:13:
4f:62:02:91:1a:69:4e:33:13:bd:cf:10:d9:0b:a1:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:06:30:56:B3:82:6F:FA:F0:CB:23:C3:8E:A8:05:58:55:BE:6A
X509v3 Authority Key Identifier:
keyid:3F:E4:72:3D:EE:FA:21:09:19:8A:95:7F:DF:A7:11:2C:34:2F:CF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-RyPe76IQkZipV_36cRLDQvz8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/nCIGMFazgm_68Msjw46oBVhVvmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/P-RyPe76IQkZipV_36cRLDQvz8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.65.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d9:bd:7f:32:24:e5:7c:db:ce:14:38:17:a6:3a:19:61:4f:
f9:33:09:4f:cc:54:8d:f9:6c:f2:45:e0:7b:c8:05:fd:86:e0:
d0:a5:63:2b:9f:a9:02:15:32:4a:6b:98:20:55:32:26:51:96:
8a:55:93:b0:10:3b:1a:d1:0f:d8:06:cf:92:21:3c:b1:f7:6c:
ba:92:7b:ed:6c:32:97:9d:0b:12:a3:b0:38:37:85:8e:c2:bf:
d7:14:1b:50:cc:6c:23:bd:5c:6b:62:0e:ec:8a:30:a9:7a:f9:
46:18:84:cd:ac:7a:bc:dc:97:27:da:17:46:8f:30:19:50:f4:
cc:db:56:10:77:27:2e:a6:d0:47:ee:56:ca:cb:f4:f8:e7:db:
8a:6b:18:f7:02:fe:6a:39:93:5c:a8:2c:fc:6c:06:4e:cc:08:
3a:f1:29:dd:38:3e:6f:a3:6b:4c:b1:68:58:cf:40:4c:5a:67:
d0:9d:19:bf:be:bc:94:48:fd:54:1f:ec:6e:04:7d:e6:f3:18:
15:4a:2d:3e:e8:8f:7b:98:49:8b:c6:65:be:80:bf:5f:82:da:
5a:2f:d6:06:ec:0e:57:be:39:8e:ba:3a:8d:48:53:26:50:e6:
6e:ea:ef:49:b5:ee:79:9d:ba:22:67:4e:cc:7e:07:17:af:4a:
ee:d5:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:35 2025 by rpki-client