Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/RaIiER_ziSW0-MSPBj4OVa_FxZk.roa
File: RaIiER_ziSW0-MSPBj4OVa_FxZk.roa (raw, json)
Hash identifier: Ba/JY5cSvs3Aq4pFQ63pP6qylJfJ1eUDe6VwKOLDsQI=
Subject key identifier: 45:A2:22:11:1F:F3:89:25:B4:F8:C4:8F:06:3E:0E:55:AF:C5:C5:99
Certificate issuer: /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial: 0181F668791AF2C5D50E174002D382E0DB7C
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/RaIiER_ziSW0-MSPBj4OVa_FxZk.roa
Signing time: Wed 13 Jul 2022 07:14:10 +0000
ROA not before: Wed 13 Jul 2022 07:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 146.19.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:68:79:1a:f2:c5:d5:0e:17:40:02:d3:82:e0:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Validity
Not Before: Jul 13 07:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45a222111ff38925b4f8c48f063e0e55afc5c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:91:2a:1c:cb:32:6c:55:39:48:ca:48:44:
c1:0c:90:18:47:d2:cc:97:10:d9:35:a9:4b:0e:9a:
0c:d9:d7:4f:00:6b:26:d5:49:c2:5f:cf:49:bb:1e:
a1:a0:df:dd:18:d6:f9:99:35:b3:d1:5f:fc:eb:35:
1c:50:e9:11:61:ba:4a:27:46:80:64:92:1d:3b:5d:
c7:fe:7f:f1:08:2f:60:06:e5:f2:12:d9:23:86:86:
61:67:93:64:98:0e:a0:af:5a:31:d5:06:fc:c8:49:
88:28:ee:e1:a3:fd:f0:50:3f:ff:4b:d0:3a:5f:a7:
f2:c4:1c:cc:61:92:d0:cb:f8:46:10:05:99:db:28:
91:d3:5e:48:b3:57:5d:be:a6:45:dd:d0:3d:58:8e:
cb:e8:0e:47:08:ca:a1:b3:80:d6:85:9c:50:d8:82:
00:75:63:48:09:7c:d8:22:79:ee:ae:92:3e:3f:4c:
50:8d:b8:2b:16:31:15:b7:31:48:2b:79:58:3b:91:
47:39:4e:5a:ad:b4:ec:69:b8:be:09:ac:70:41:87:
09:bc:c0:74:d6:29:6d:29:ab:8d:ba:c6:46:b5:a7:
98:43:5d:bd:02:8d:0e:a4:e6:76:e2:3a:bb:d3:18:
3f:dd:50:2e:78:93:8a:b5:71:e8:b1:8b:fa:15:ad:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:22:11:1F:F3:89:25:B4:F8:C4:8F:06:3E:0E:55:AF:C5:C5:99
X509v3 Authority Key Identifier:
keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/RaIiER_ziSW0-MSPBj4OVa_FxZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:30:f6:07:49:0d:9d:85:55:c4:e7:7b:22:19:bf:be:34:73:
00:16:7b:59:2d:40:32:58:21:2e:69:6b:74:aa:6b:0b:40:cb:
c7:85:1e:32:dc:fa:c0:d1:72:5e:85:f2:62:fd:46:f7:17:4c:
fe:40:60:e1:0c:6a:6e:b5:10:78:73:54:5b:22:f9:d7:57:4c:
a8:b1:c6:15:c4:ac:68:4a:0e:5b:b3:47:25:d4:94:bb:a0:b5:
07:ac:82:40:44:34:de:26:a7:f2:12:8b:f0:13:a4:ba:ff:65:
97:40:9f:1f:f1:72:ec:cf:6a:68:70:79:8f:a8:e8:dd:59:ea:
e0:f1:64:7b:be:52:4e:ed:8d:36:3a:10:d8:f2:ff:8b:c6:f8:
2d:be:1b:6e:09:c3:ea:68:cd:3c:87:6a:07:ba:57:3d:32:47:
c5:81:93:f9:32:a1:2d:6b:bd:78:d6:b1:cd:73:16:83:6c:08:
0f:2a:0c:c1:23:13:84:e7:b8:5b:c4:c0:f0:3b:19:55:e9:32:
a1:9e:7b:31:e1:43:4f:51:25:10:5c:4c:ba:37:8e:4f:9e:0f:
3c:7f:c8:32:ab:d2:f6:a5:12:e5:35:5a:d9:22:72:4f:a5:5e:
c8:10:5d:ae:ae:26:68:f2:f1:4e:42:32:4c:63:01:d3:1d:7e:
2e:66:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:08 2025 by rpki-client