Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/2kE6_VJlJF6eJI79gKGAJ7lOSBc.roa
File: 2kE6_VJlJF6eJI79gKGAJ7lOSBc.roa (raw, json)
Hash identifier: 0XLdfrfKZgvDrHuWEZPTWjD31+cKXPl2B0SaWESEm/M=
Subject key identifier: DA:41:3A:FD:52:65:24:5E:9E:24:8E:FD:80:A1:80:27:B9:4E:48:17
Certificate issuer: /CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Certificate serial: 018BB998BFDA2FD35711BAF5A170215B7EEE
Authority key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/2kE6_VJlJF6eJI79gKGAJ7lOSBc.roa
Signing time: Fri 10 Nov 2023 14:17:57 +0000
ROA not before: Fri 10 Nov 2023 14:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 146.19.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:98:bf:da:2f:d3:57:11:ba:f5:a1:70:21:5b:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Validity
Not Before: Nov 10 14:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da413afd5265245e9e248efd80a18027b94e4817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:05:35:57:b2:45:e7:5f:fc:2c:d6:6a:48:
45:5d:45:25:e7:c1:26:41:32:28:ba:f7:e0:35:dc:
70:11:47:f7:12:1e:bb:6d:77:64:df:96:31:50:3c:
b6:aa:3f:a0:ec:d0:5b:c1:c4:96:e9:85:6c:aa:b8:
d6:34:0e:28:cd:c9:2a:a3:be:30:65:22:83:70:01:
86:b5:38:23:23:20:21:70:71:8b:54:fc:3c:0c:af:
ba:92:c7:bc:3f:dc:da:5e:46:cf:38:d6:a9:28:18:
fa:2b:0f:1a:f2:85:31:ac:94:a4:36:a2:b7:69:22:
4b:89:fd:90:bd:48:56:f0:d0:2c:cf:20:a2:56:f4:
27:37:1a:04:44:33:60:35:27:89:bf:13:2c:f9:69:
79:31:6b:5f:f1:72:0f:a9:b0:db:47:33:50:3f:07:
ff:2d:92:a9:59:a3:27:04:54:65:63:a0:7e:4b:9c:
a5:76:ae:3e:37:df:be:d9:47:f3:f9:94:a5:8e:1f:
3b:8d:5f:4a:a7:af:ae:62:1c:3d:2e:c1:cb:89:d1:
fc:80:4b:35:33:0a:fa:fd:2b:b0:0c:42:b6:91:74:
2f:ad:18:90:d6:75:8b:b0:b2:7e:20:e0:72:81:e5:
69:55:17:64:0c:1a:97:36:00:84:52:a1:3b:be:5f:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:3A:FD:52:65:24:5E:9E:24:8E:FD:80:A1:80:27:B9:4E:48:17
X509v3 Authority Key Identifier:
keyid:1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/2kE6_VJlJF6eJI79gKGAJ7lOSBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fb:0b:38:fa:5d:90:01:4d:9e:ff:ac:09:4d:05:80:5a:d4:
b7:29:d1:2f:a4:3f:f0:d6:69:c6:59:a8:c1:46:5f:b9:15:c8:
67:ce:22:b7:60:b1:f1:bd:a2:d8:3e:5e:3e:59:0b:e7:b0:3b:
96:77:dc:c6:0d:23:f6:82:88:6a:3f:22:81:3b:cf:1d:31:e5:
65:8f:e0:f2:d4:91:2f:3b:fe:7d:96:77:e8:a5:f1:51:b1:57:
18:30:04:a5:84:70:35:bb:d3:43:d6:f9:7b:22:08:23:ee:51:
2e:a9:4e:be:b6:37:a0:63:a9:ad:4e:a0:f5:23:ce:35:29:86:
c6:12:3c:0c:6a:19:80:9b:65:a7:ad:e3:9e:e6:75:20:a4:2f:
1f:31:71:5b:da:eb:e2:a3:53:8d:b4:5f:21:18:79:63:d1:71:
31:3f:40:6f:ba:e7:cc:b2:38:e4:28:64:cd:75:4e:74:af:76:
09:e0:0d:ea:73:92:3c:97:0a:29:86:29:c0:59:3f:0b:45:d7:
ca:57:49:6b:00:86:d0:e0:98:bd:d9:40:f4:2f:12:ab:65:0b:
36:bf:a3:cd:6a:a6:30:48:d0:33:b7:b6:69:5c:c1:85:99:ce:
cc:74:4c:94:c1:0e:68:08:46:e9:36:bd:ec:18:69:41:e9:34:
7f:81:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:21 2025 by rpki-client