Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa
File: vbKKbs5hX43RBeGU26NBQgtU6ak.roa (raw, json)
Hash identifier: fykLbaMGQuBxdcl290MWoCPb/rRrI4jOa30WXqap4hg=
Subject key identifier: BD:B2:8A:6E:CE:61:5F:8D:D1:05:E1:94:DB:A3:41:42:0B:54:E9:A9
Certificate issuer: /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial: 01856F42A8647A2C6325FB4C8E3DDF7E586D
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 146.19.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a8:64:7a:2c:63:25:fb:4c:8e:3d:df:7e:58:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdb28a6ece615f8dd105e194dba341420b54e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:21:8f:c8:f8:12:09:8f:bc:d2:72:b6:2b:
93:d2:a8:8f:6c:75:dc:76:2c:27:0e:15:d2:b7:c0:
c8:5c:79:c0:a2:6e:02:ef:15:34:24:ba:24:b6:84:
38:18:2c:b1:cf:42:1a:48:4b:69:4c:6c:8e:e0:3d:
4b:e1:91:5c:f2:a3:50:83:4e:f5:89:38:a1:7c:11:
73:dd:d2:e4:4a:17:3e:e2:4f:96:dc:23:cd:a2:34:
7a:5b:4b:79:eb:a3:3d:a3:df:b0:a5:7f:5e:87:44:
09:b7:bc:49:72:79:3b:ce:eb:0b:d2:64:e5:05:47:
23:e3:83:e2:92:d4:54:b3:ea:94:d3:71:1a:8a:94:
c8:d5:13:2b:32:d3:5d:01:6b:5e:4c:7f:6f:85:21:
41:20:f5:85:96:3d:de:5b:8f:4c:e3:87:27:a8:cb:
02:b2:59:f5:50:b5:4e:79:b3:f2:95:b9:c6:0d:34:
3c:d2:7f:fc:e7:0b:1a:ab:87:cf:f2:eb:33:8d:5a:
b1:9e:f5:ad:05:2f:c9:08:d1:e2:e8:34:c2:6e:4d:
63:72:6b:62:de:74:e2:ba:3e:bf:c1:4c:19:24:9f:
24:6f:d1:fc:43:03:b4:94:19:66:52:2f:b7:a9:86:
e4:a1:36:be:ab:ab:42:2a:3a:8e:b6:89:4c:41:1a:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B2:8A:6E:CE:61:5F:8D:D1:05:E1:94:DB:A3:41:42:0B:54:E9:A9
X509v3 Authority Key Identifier:
keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.140.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c0:bb:7c:f0:ce:92:41:a2:ec:7f:fd:52:17:25:44:0b:bb:
15:30:1c:1b:59:ce:a4:0c:92:df:2f:bb:96:90:12:de:50:bb:
72:fa:d3:ac:76:d4:e4:8b:90:d7:12:69:26:90:1f:94:cd:2f:
58:04:bf:cd:80:9e:cf:ec:40:fc:5f:ef:64:34:b6:aa:b6:9b:
88:92:98:7f:ba:d2:77:d7:94:d9:bd:ad:a4:bc:e4:54:a3:4f:
a6:cb:fd:7e:f0:eb:ab:b4:fe:ad:40:9f:93:44:12:a2:bf:d3:
c9:a9:be:c0:f7:1e:2b:c7:ff:76:2c:1c:bb:cf:2b:87:39:f0:
e7:38:0c:e8:cb:68:19:6d:7f:70:b9:ce:c2:ea:5a:c9:13:d5:
71:a3:3c:63:12:3a:6f:df:15:4a:e1:dd:33:10:34:33:af:a6:
8b:13:21:69:14:f7:be:30:88:14:42:da:a5:0e:9e:5a:a2:dd:
08:a4:c3:cd:15:43:f7:2a:eb:9b:1c:e1:20:39:9c:b5:02:d7:
a6:c6:19:a3:5b:1f:38:85:c9:c8:6f:ce:b1:d3:da:43:1a:9e:
2b:a4:6a:6b:aa:05:a9:d8:b2:2b:89:6a:ce:e4:ae:d6:b7:c0:
3e:e2:de:c3:6a:06:e4:70:5c:ca:67:47:a0:93:fa:e2:85:a5:
75:1e:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:31:36 2025 by rpki-client