Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/DJYdmO6Fr0DtbotqiICbZJxSuJo.roa
File: DJYdmO6Fr0DtbotqiICbZJxSuJo.roa (raw, json)
Hash identifier: V1qhfScurhFVsLluESaEfP2ja9+J/AXUHLO1EJnQhaE=
Subject key identifier: 0C:96:1D:98:EE:85:AF:40:ED:6E:8B:6A:88:80:9B:64:9C:52:B8:9A
Certificate issuer: /CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Certificate serial: 018570F0BC871DA483CD95591091749F9531
Authority key identifier: EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/DJYdmO6Fr0DtbotqiICbZJxSuJo.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34939
IP address blocks: 146.19.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bc:87:1d:a4:83:cd:95:59:10:91:74:9f:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c961d98ee85af40ed6e8b6a88809b649c52b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:e6:0d:2c:00:b0:9e:3d:02:6f:d6:52:1c:
cd:e5:44:bc:21:6a:26:4f:6c:94:cc:27:eb:48:e9:
db:d0:ca:62:30:4f:07:88:83:c5:db:f7:87:9d:a5:
5f:14:55:14:69:97:80:4c:74:4b:5d:dc:70:a4:5f:
33:4d:fb:94:13:22:06:3d:9b:ac:43:1c:d9:06:e8:
39:66:ec:9b:9d:4b:d7:80:84:0d:79:8f:25:7e:89:
7c:2e:6a:4d:12:c9:4c:0b:27:dd:f4:9d:02:0e:c2:
73:ce:97:e9:7b:96:c4:6f:4c:70:a3:0a:5a:14:97:
d6:65:70:4b:45:ff:cb:ad:3d:a3:f5:c0:c5:55:f7:
60:39:b6:e2:a9:c4:9d:df:47:f6:22:8e:cf:2c:c7:
e3:ed:57:2d:b6:38:56:2d:95:ac:be:86:39:4c:7f:
01:85:86:dc:d5:1a:91:6b:f3:8d:b7:1d:e3:25:c3:
64:8c:d4:8e:90:a7:3d:d4:85:56:86:3e:fc:9b:0f:
43:1a:ac:59:cc:c7:b5:fe:11:b3:cd:98:54:86:8b:
2f:23:e3:1a:a7:71:31:26:e6:df:bf:2b:55:81:aa:
4f:48:a5:63:81:9b:3b:5d:6c:30:c0:cb:5d:c8:39:
cd:75:ee:46:88:fd:b2:c4:5d:22:ac:eb:6c:09:6c:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:96:1D:98:EE:85:AF:40:ED:6E:8B:6A:88:80:9B:64:9C:52:B8:9A
X509v3 Authority Key Identifier:
keyid:EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/DJYdmO6Fr0DtbotqiICbZJxSuJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.14.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:10:82:3a:9e:c0:b5:ab:04:1d:92:8a:2f:34:c4:30:8a:8b:
d3:27:d7:c3:6e:4b:dd:ef:e9:ce:9b:3d:71:81:02:36:23:b0:
14:a7:37:76:3d:6b:42:9a:0f:8a:05:49:cd:53:2b:12:8f:9b:
55:76:05:b2:de:57:42:e7:2b:e1:4a:f6:32:16:a5:24:e6:a1:
5f:42:3d:a8:ee:7e:78:e0:92:b0:5a:d1:0a:94:72:56:fb:50:
e5:cb:4a:a8:61:51:e4:63:e8:86:49:4f:4a:46:a5:82:a5:af:
4b:f8:e4:56:21:68:da:c0:76:82:28:10:82:de:5b:d9:08:a0:
98:d5:8a:17:f4:90:5f:dc:78:e0:32:ab:e8:6d:67:86:ea:82:
ce:60:0c:5b:56:12:b5:67:99:78:9d:c1:0e:67:f3:4e:33:49:
60:06:da:7d:fe:e8:0a:af:22:ef:ba:ba:5a:e6:35:1e:2b:b5:
c1:75:ec:78:13:d4:f4:12:7a:7f:42:24:54:01:5f:bf:c2:45:
fa:88:2c:1e:28:8d:18:e6:64:34:3d:87:69:24:34:9a:6b:87:
28:25:c7:94:c9:35:5d:bd:91:cf:c4:3a:21:39:6a:8d:0b:ad:
67:3a:0b:8a:e1:9b:54:18:ab:b3:3f:f2:bd:71:d7:95:12:a2:
c5:76:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:08 2025 by rpki-client