Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/U43tSUPBRupXmQ3TNB0jZbQ9FmM.roa
File: U43tSUPBRupXmQ3TNB0jZbQ9FmM.roa (raw, json)
Hash identifier: rvHmupcDLlIj5cJ2lU7D//NG1D+5CosdVX3Ozh8GWd4=
Subject key identifier: 53:8D:ED:49:43:C1:46:EA:57:99:0D:D3:34:1D:23:65:B4:3D:16:63
Certificate issuer: /CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Certificate serial: 018C0884FA0A406C7B499ABBA0CDEAD77183
Authority key identifier: E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/U43tSUPBRupXmQ3TNB0jZbQ9FmM.roa
Signing time: Sat 25 Nov 2023 22:06:21 +0000
ROA not before: Sat 25 Nov 2023 22:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 146.19.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:84:fa:0a:40:6c:7b:49:9a:bb:a0:cd:ea:d7:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e970c77c3ce04e77349a6411cb73cf51e4efd0f2
Validity
Not Before: Nov 25 22:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=538ded4943c146ea57990dd3341d2365b43d1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:8d:d6:1d:e2:5b:7a:6d:1f:20:5a:0c:a1:
2d:e0:90:94:14:29:75:21:af:b9:02:52:4c:a7:05:
b8:5d:8d:10:a6:2e:70:4c:61:10:6e:44:9d:c6:7e:
5c:09:ff:4d:6f:e2:e1:b8:07:0f:47:e8:d9:9d:3d:
55:80:f0:7e:21:7d:60:6b:b0:de:ea:47:5f:96:18:
bd:ff:96:8e:d0:d6:01:e4:e5:d6:8e:1f:16:9f:e5:
2c:5b:86:b6:d6:db:f7:74:c9:74:19:eb:6b:90:6d:
72:04:18:ba:f8:8a:d2:93:5b:15:26:f7:20:1f:bc:
02:f7:c0:89:f4:69:5c:e0:dc:96:1a:62:b3:7c:78:
0b:88:b3:ad:6c:e5:05:99:65:e1:6d:80:f4:a2:f4:
70:d0:3e:a5:82:3f:ff:55:44:b7:f7:5e:18:ee:6b:
64:c5:b7:63:f8:09:29:ce:29:be:19:4a:35:4b:d2:
1a:5b:1f:62:3f:4f:d9:b5:9a:26:88:fb:bf:22:19:
5e:90:08:4c:ef:e7:bd:fd:99:5b:da:50:75:6d:14:
62:9f:23:95:88:18:7d:8c:3e:ef:e4:40:f2:e5:08:
f9:1d:4e:64:6f:f6:84:ab:7f:dc:c4:a7:b7:15:35:
70:47:99:56:55:aa:82:d4:6e:cd:31:a5:db:c9:15:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:ED:49:43:C1:46:EA:57:99:0D:D3:34:1D:23:65:B4:3D:16:63
X509v3 Authority Key Identifier:
keyid:E9:70:C7:7C:3C:E0:4E:77:34:9A:64:11:CB:73:CF:51:E4:EF:D0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XDHfDzgTnc0mmQRy3PPUeTv0PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/U43tSUPBRupXmQ3TNB0jZbQ9FmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c62a44-f8ff-4e85-a2eb-161e0cb99b80/1/6XDHfDzgTnc0mmQRy3PPUeTv0PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4f:39:fb:bc:c2:b5:ce:54:f1:dc:44:eb:f2:f1:80:bf:8d:
64:32:6c:e7:c1:3d:a6:1b:f3:1a:5b:45:7c:72:c3:01:a4:fa:
af:50:d3:e9:21:f7:d5:57:86:a1:56:6f:8a:7e:bc:26:e3:1a:
25:8d:c0:9e:c1:e7:79:78:2f:c0:d5:aa:aa:b4:80:a9:2f:a4:
ef:68:36:53:97:59:cc:b6:12:33:ab:73:ba:a8:d4:52:fe:32:
fe:fb:12:4e:4e:a1:d3:10:b7:ff:b9:d8:12:c4:a5:57:fb:12:
c5:49:12:e5:a7:1e:71:2f:18:a7:0d:71:a1:24:79:81:17:74:
f1:8f:4d:e9:ca:c1:ce:52:1a:79:21:a2:91:5f:85:53:a3:79:
d7:4b:f6:80:7c:d5:2e:bc:87:28:6f:39:6c:b1:ab:b4:17:3c:
72:b1:38:a1:0c:e9:5e:5d:a5:1f:99:1e:cc:09:b2:01:f2:b2:
b7:bb:30:5d:10:e3:ab:26:94:81:09:9a:f4:8d:29:5f:bc:41:
99:56:a0:0b:0c:3b:33:05:9d:62:f5:5a:ea:6c:87:07:f7:14:
92:ee:39:0c:25:ad:27:17:15:f6:4c:bd:d7:e7:f2:88:02:a0:
24:5d:e0:eb:b3:1b:6f:81:f5:94:8d:bd:1c:4b:b5:25:3e:55:
57:d6:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:05 2025 by rpki-client