Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/uN6A90etY9t2RYrrmAKDSRBIP3w.roa
File: uN6A90etY9t2RYrrmAKDSRBIP3w.roa (raw, json)
Hash identifier: nTDKYUj+WUa4yJoov2wucIf1h/lzMVBwXJZKGA/hTqY=
Subject key identifier: B8:DE:80:F7:47:AD:63:DB:76:45:8A:EB:98:02:83:49:10:48:3F:7C
Certificate issuer: /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial: 018460632F4C3212AEE154002670274E21FD
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/uN6A90etY9t2RYrrmAKDSRBIP3w.roa
Signing time: Thu 10 Nov 2022 07:13:43 +0000
ROA not before: Thu 10 Nov 2022 07:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35112
IP address blocks: 146.19.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:63:2f:4c:32:12:ae:e1:54:00:26:70:27:4e:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Validity
Not Before: Nov 10 07:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8de80f747ad63db76458aeb9802834910483f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:50:16:10:42:3b:78:40:09:13:23:17:e3:
7b:81:2b:3e:75:cf:ad:6a:d8:60:b8:b9:1e:e7:df:
ea:cc:02:f9:fe:d4:b9:03:c4:2e:56:a5:79:d2:ac:
25:db:1e:8e:d7:cc:21:33:6b:1b:b3:f5:7a:2b:6e:
ad:d6:02:8e:7d:dc:9a:41:6c:36:14:66:86:b7:5a:
01:18:f5:c0:17:bd:f7:ca:72:c9:f9:e4:67:ab:cf:
2d:c0:9d:14:1e:78:f1:05:a1:49:43:ee:ae:07:96:
94:9f:ea:b6:43:6f:c9:69:5b:ee:6b:98:6f:49:bd:
4c:ce:16:2d:71:bd:98:ee:56:6d:f2:cd:ed:0e:66:
05:da:3c:3e:24:72:d5:87:c9:bf:71:c9:b7:8a:69:
ec:9b:e1:12:a4:9e:b1:bf:6d:9f:70:4c:b6:f6:f3:
26:12:a1:a2:68:1d:35:e3:e0:b9:86:b0:9a:34:a1:
f1:23:16:62:25:2a:6a:26:87:07:09:73:ef:6d:d4:
2a:30:22:bb:93:aa:f6:18:db:de:0d:0d:15:8b:8f:
66:af:28:d0:ff:e4:25:0b:26:c2:f2:b4:91:f2:ee:
a9:09:4c:81:e9:96:43:7d:25:93:1a:74:34:f7:fa:
2f:c3:81:50:58:dd:6a:68:ca:68:79:d2:2a:fb:00:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:80:F7:47:AD:63:DB:76:45:8A:EB:98:02:83:49:10:48:3F:7C
X509v3 Authority Key Identifier:
keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/uN6A90etY9t2RYrrmAKDSRBIP3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:06:0d:38:8e:2f:29:00:b1:df:45:d0:7d:96:61:82:8b:09:
04:63:be:54:49:57:18:42:b6:10:1a:2b:3a:e4:b0:f7:a2:69:
69:59:40:a3:c1:85:56:fd:de:af:90:20:67:03:cf:51:20:5e:
09:e5:37:69:76:65:19:16:9e:35:9d:4f:62:a3:8a:d4:32:6a:
9e:37:e6:cb:0a:69:73:1f:d5:7d:7a:36:6f:e2:90:cf:50:a6:
83:87:3b:8c:14:f9:b7:87:0c:e1:e7:3a:93:04:fa:64:93:10:
91:e5:a1:60:09:cd:eb:67:3d:32:4d:3e:7d:56:a4:ae:16:71:
7f:59:a4:b6:34:be:d8:62:58:36:2a:87:6e:f6:a5:ae:3a:1c:
51:4a:06:af:6f:b3:ff:5a:b9:f6:2d:fa:2d:80:7a:da:92:41:
f0:6b:2d:68:b9:93:9b:f1:41:cb:4f:43:bf:f9:b5:ed:b8:34:
2e:17:3a:1c:3b:01:72:e0:86:4d:3e:09:cf:11:5f:5b:c1:af:
fa:f0:86:df:a4:74:b3:0c:bd:9a:6a:63:66:52:7a:46:f9:2c:
cf:c9:f8:02:aa:d7:17:0e:41:6c:52:90:58:81:ad:9a:a3:25:
3c:4a:06:50:47:c2:da:eb:bb:ac:cf:19:33:09:e1:5a:73:11:
a9:ab:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:50 2025 by rpki-client