Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/36137c-64fc-4e19-aa1a-adb73d1365a8/1/XOnDCfLNRQ5_AoEiS9J_-JtL700.roa
File: XOnDCfLNRQ5_AoEiS9J_-JtL700.roa (raw, json)
Hash identifier: 8LyFBwEdOVAKYJbj/ePaZNsM0ygBokLgtx7+8bcTuVY=
Subject key identifier: 5C:E9:C3:09:F2:CD:45:0E:7F:02:81:22:4B:D2:7F:F8:9B:4B:EF:4D
Certificate issuer: /CN=749a1c5869ae0b1b0faabd026acfcb47324c1624
Certificate serial: 0183FA
Authority key identifier: 74:9A:1C:58:69:AE:0B:1B:0F:AA:BD:02:6A:CF:CB:47:32:4C:16:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJocWGmuCxsPqr0Cas_LRzJMFiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/36137c-64fc-4e19-aa1a-adb73d1365a8/1/XOnDCfLNRQ5_AoEiS9J_-JtL700.roa
Signing time: Fri 14 Jan 2022 11:41:12 +0000
ROA not before: Fri 14 Jan 2022 11:41:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 146.19.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99322 (0x183fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749a1c5869ae0b1b0faabd026acfcb47324c1624
Validity
Not Before: Jan 14 11:41:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ce9c309f2cd450e7f0281224bd27ff89b4bef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:6d:e7:51:8c:fd:bc:76:98:f3:56:0d:a8:
f2:fc:24:f6:f2:42:7e:ac:fa:aa:05:72:7a:59:e5:
ba:47:44:e2:45:1f:d5:ef:f0:ec:40:4e:a0:b0:ea:
43:06:06:b8:5d:8a:0e:9a:65:b4:d0:09:8a:5a:16:
02:4f:24:bb:88:45:14:d2:6d:bb:9f:df:b1:7d:04:
eb:3c:1d:92:2f:fe:0e:13:ea:15:53:9b:de:89:dd:
2e:bf:49:2f:08:7d:33:bf:e0:8a:aa:2e:35:71:a7:
d0:74:05:82:33:f1:f1:ae:0c:a8:74:51:14:2a:e1:
b1:d0:8a:05:6b:bf:46:73:e1:0d:ea:df:c0:58:50:
47:01:31:34:f2:65:19:af:eb:b7:f5:28:9e:6a:ba:
0d:7e:74:79:e1:72:0d:4e:d4:7e:46:45:1f:ed:16:
b6:dd:6a:7d:80:46:6a:2a:0f:8b:69:78:2b:10:85:
fd:3b:e8:98:9a:be:6d:f4:66:4a:16:a4:69:e8:f1:
b2:c7:77:ee:04:88:e2:39:91:31:3a:da:6c:98:41:
82:bd:75:55:b6:a2:d9:34:e6:26:f0:e1:77:c4:46:
2b:80:1a:12:ba:0d:ff:55:b2:33:ff:34:29:a9:c6:
ae:73:37:e9:57:1b:87:f3:79:b3:44:c5:e1:e2:a8:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E9:C3:09:F2:CD:45:0E:7F:02:81:22:4B:D2:7F:F8:9B:4B:EF:4D
X509v3 Authority Key Identifier:
keyid:74:9A:1C:58:69:AE:0B:1B:0F:AA:BD:02:6A:CF:CB:47:32:4C:16:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJocWGmuCxsPqr0Cas_LRzJMFiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/36137c-64fc-4e19-aa1a-adb73d1365a8/1/XOnDCfLNRQ5_AoEiS9J_-JtL700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/36137c-64fc-4e19-aa1a-adb73d1365a8/1/dJocWGmuCxsPqr0Cas_LRzJMFiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.213.0/24
Signature Algorithm: sha256WithRSAEncryption
49:80:bd:64:2e:f8:83:9e:6e:2e:42:87:72:60:20:a9:c7:b5:
30:0d:39:63:4e:41:78:12:b1:bc:4e:ad:24:d3:8a:17:f1:a2:
5f:9b:e2:bb:91:15:c6:9b:44:bd:b8:9b:63:37:3c:11:a5:c8:
c5:bb:30:56:f7:e5:28:c5:98:05:d6:4e:30:c6:f6:a6:62:a6:
6c:c3:f4:c9:52:73:d4:55:c3:23:9d:a2:03:7c:40:70:19:33:
b5:95:a2:e8:4f:21:66:45:e0:6b:ed:73:aa:aa:2e:29:42:bc:
05:54:5f:c0:ad:b5:e6:a0:49:bd:ea:74:9b:2d:8a:3f:24:db:
4a:e4:3a:6d:44:e0:71:ef:3b:4e:3c:14:12:63:f7:56:9f:4a:
27:f6:6f:e3:4c:1e:c4:87:cd:f7:6a:a8:ea:1b:b0:60:37:c2:
44:46:3c:55:6a:90:a7:14:39:c9:ac:dc:10:e2:05:32:6c:3f:
10:b5:19:d8:a4:f1:fc:6d:e0:49:63:f9:6a:72:d2:fb:28:dc:
2f:db:fd:0e:c2:50:43:33:6a:43:e8:2f:f6:5e:88:fc:6b:b2:
a9:27:e5:df:4c:cc:80:92:e8:a6:ae:3c:ba:67:9a:f2:43:60:
92:35:b4:99:7d:22:30:20:a8:1e:f9:f1:5d:1e:f4:2b:71:a0:
68:2a:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:23 2025 by rpki-client