Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/1-WjRc2J-QA9f0DCmtilRODVSJMA.roa
File: 1-WjRc2J-QA9f0DCmtilRODVSJMA.roa (raw, json)
Hash identifier: FFStaDKab9AitrAXDQ/Y9TRssCHLVHBGn41Z1TM6NLA=
Subject key identifier: F9:68:D1:73:62:7E:40:0F:5F:D0:30:A6:B6:29:51:38:35:52:24:C0
Certificate issuer: /CN=60f66e54f694bce7e32c8a326136e5c283a38498
Certificate serial: 018820867246A3963A80DCF885DE27E2859F
Authority key identifier: 60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/1-WjRc2J-QA9f0DCmtilRODVSJMA.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:46:a3:96:3a:80:dc:f8:85:de:27:e2:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f66e54f694bce7e32c8a326136e5c283a38498
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f968d173627e400f5fd030a6b6295138355224c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:41:5b:b2:91:c5:ab:8d:7a:cc:a0:4c:a8:
d3:55:c6:0f:e1:5f:96:ab:a5:f2:3c:7b:20:0d:93:
0f:87:c6:5a:4a:bd:00:c4:21:c0:73:7f:3d:a2:c0:
60:d3:7a:94:92:a2:a1:18:a7:f4:b0:81:3c:6f:2a:
f3:f6:35:8b:3b:c1:26:1c:53:e9:d7:51:9a:f3:c2:
da:27:92:03:35:60:fd:6c:54:7f:66:b4:66:b1:3a:
47:38:67:69:86:16:0e:60:67:ee:24:a7:f7:e7:9a:
7a:76:fa:59:3c:d5:de:f3:30:4c:33:8a:d6:73:f3:
54:ef:e3:b4:4c:36:3e:1e:1f:94:1a:fb:81:01:28:
ae:94:25:36:68:3d:c7:04:d0:61:69:06:da:78:46:
68:4d:a2:9a:91:4f:53:fe:dd:00:1b:5d:d2:a2:7e:
27:ec:a1:2b:4c:ad:17:0c:21:15:d3:81:ab:c6:3f:
eb:6d:ee:5c:ad:c9:c2:72:90:2f:c0:66:17:df:90:
3a:c0:74:d0:03:09:b7:5e:c0:4e:7f:ff:ef:23:85:
6e:7b:ad:d0:16:c5:a8:9d:7f:73:8c:c4:dc:32:b0:
9f:53:2a:95:bd:89:0f:62:ac:9a:da:27:fa:4f:55:
18:56:95:55:f7:dd:38:7c:cb:dc:81:c2:13:c6:d4:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:D1:73:62:7E:40:0F:5F:D0:30:A6:B6:29:51:38:35:52:24:C0
X509v3 Authority Key Identifier:
keyid:60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/1-WjRc2J-QA9f0DCmtilRODVSJMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.132.0/24
Signature Algorithm: sha256WithRSAEncryption
51:26:60:1b:e5:6c:fd:45:06:59:42:a6:7a:18:51:1a:00:35:
20:e7:d4:24:d8:d9:ba:cf:6e:43:16:9b:b3:81:5c:a6:0f:97:
76:06:74:a3:ae:75:ee:1a:1f:af:1f:2b:e5:9b:71:19:ee:1e:
ed:7c:36:c3:53:7e:a6:7f:73:6f:0f:35:35:f4:78:fa:a7:13:
2a:5f:ac:c0:25:82:9c:6e:dc:0c:27:dc:db:f1:72:a6:77:b6:
65:b6:30:83:9a:41:ae:ca:60:f6:4f:00:f4:79:7b:2f:92:8c:
27:86:78:29:f9:1e:bc:7c:08:44:1d:55:78:47:6e:75:4b:eb:
f5:0f:0c:dd:e5:13:f7:45:ff:5a:18:09:1f:3f:7b:b5:79:d3:
13:3b:c6:65:b3:cf:08:a1:08:db:87:73:0d:56:c2:08:7f:fc:
97:13:b9:52:19:f5:c5:d7:ed:5b:01:0b:e2:64:dd:42:1a:96:
70:b7:01:01:16:46:da:0b:66:25:7b:6f:f5:73:98:80:a8:1f:
96:7e:7a:4c:a2:5c:e2:b6:4b:99:0e:c2:ab:e2:4b:a2:60:8b:
f6:bc:6f:d8:cf:e0:4c:61:7c:95:3f:8f:4a:e9:ef:b0:3b:61:
ec:40:84:f6:9a:a0:4a:e8:15:a6:cd:ec:1e:ad:8a:d0:67:aa:
63:e0:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:15 2025 by rpki-client