Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/bbD-HabVJJn8GlvMHwreJAaOu1M.roa
File: bbD-HabVJJn8GlvMHwreJAaOu1M.roa (raw, json)
Hash identifier: HD0btMh5kIh4vZPwT+kE8Zela9lgN/Kl2ckgplmBKQw=
Subject key identifier: 6D:B0:FE:1D:A6:D5:24:99:FC:1A:5B:CC:1F:0A:DE:24:06:8E:BB:53
Certificate issuer: /CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Certificate serial: 6AF21D
Authority key identifier: 81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/bbD-HabVJJn8GlvMHwreJAaOu1M.roa
Signing time: Sat 01 Jan 2022 01:03:11 +0000
ROA not before: Sat 01 Jan 2022 01:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 146.19.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7008797 (0x6af21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Validity
Not Before: Jan 1 01:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6db0fe1da6d52499fc1a5bcc1f0ade24068ebb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:9f:58:25:01:9a:96:4c:d0:80:b4:fe:41:
42:a1:8c:c1:9e:86:61:76:bd:f5:c9:04:ac:88:53:
c3:a9:b1:6a:a1:20:4a:2a:ba:32:1e:f2:ae:8d:11:
3d:b0:14:08:e3:d1:34:82:88:ae:bb:38:73:7b:d7:
e9:a8:7d:46:ab:5f:87:b0:6b:d5:dc:51:9d:cc:73:
11:67:10:a5:ea:91:d8:78:03:ba:a3:ab:66:51:bc:
cc:9b:f0:05:69:a5:e6:7d:76:b1:aa:f2:a8:f2:70:
c0:01:24:ac:1c:36:9f:66:76:7b:3e:af:15:6e:81:
64:c2:da:84:78:8a:ba:31:9c:64:c7:1d:7d:ba:4a:
84:95:a4:86:4e:c9:d8:ed:2f:72:28:fe:83:66:ec:
4f:17:63:52:ed:74:d1:7f:53:b3:19:96:bd:87:b4:
b4:7a:8c:32:03:0e:cd:ae:33:22:f6:3a:da:15:1c:
28:c7:4a:c9:92:73:a4:25:0e:51:2e:cb:ff:2e:8e:
13:dc:3c:94:c4:ca:cd:4e:92:47:01:83:f1:c8:8a:
a2:2a:e1:72:4f:d4:32:c3:ca:e3:8d:ee:28:a0:83:
59:58:72:8f:c7:a7:29:d9:a8:d9:30:06:b7:e8:a2:
fa:5e:98:2b:0e:00:1f:b4:a2:99:bc:fb:aa:b0:aa:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:FE:1D:A6:D5:24:99:FC:1A:5B:CC:1F:0A:DE:24:06:8E:BB:53
X509v3 Authority Key Identifier:
keyid:81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/bbD-HabVJJn8GlvMHwreJAaOu1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.208.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7b:c1:45:ed:03:16:26:0e:bb:23:cd:1d:ee:0d:3f:95:ae:
ca:45:4b:cc:5a:4a:7a:2c:27:bb:39:56:a7:33:23:66:5e:00:
8c:b4:27:e4:8d:f6:df:63:3b:0d:cd:13:ed:82:00:ed:31:44:
b0:ff:5c:3f:93:bd:15:2e:65:0a:d4:eb:7e:a1:f9:a2:61:2c:
db:57:db:72:3a:79:cb:17:bf:40:4d:e1:5b:40:4b:d3:41:7e:
c4:db:cf:a2:c4:78:a5:fb:e7:af:ca:94:87:f7:1e:01:e3:87:
85:ee:95:d3:32:cc:4d:09:7a:8b:41:40:47:ab:77:7c:14:3a:
97:fa:4a:ba:f1:9f:a5:38:a8:63:73:ed:84:e4:a8:69:59:d8:
7c:9b:4f:fe:ca:cf:7f:57:fb:94:dc:78:51:df:a0:c5:46:c0:
76:b2:72:44:6c:0b:ef:df:b3:eb:d2:33:7a:4d:7c:1d:1f:75:
28:14:9c:9a:e4:ad:a7:29:de:c0:19:a1:61:81:d1:cd:ab:99:
ad:82:c3:0b:1b:a6:5d:fc:f2:6b:6e:27:4e:a1:7d:51:52:e0:
bd:93:29:84:6f:27:2e:96:c3:21:6e:cd:01:07:2f:d1:60:ba:
08:bc:87:fc:23:c3:36:58:6d:95:c3:61:19:8a:5f:a5:cb:4a:
18:c6:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:18 2025 by rpki-client