Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa
File: m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa (raw, json)
Hash identifier: LM5QnM5Cyrh8zdHVW5rz11Y32ZhIuvJpcEm0E5UUzhI=
Subject key identifier: 9B:81:BC:47:72:36:00:6F:30:0A:2F:F6:8C:F0:E6:34:A3:5C:3F:D3
Certificate issuer: /CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
Certificate serial: 018571A78F05BCF8EB027B1FC20F45D38C38
Authority key identifier: 33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa
Signing time: Mon 02 Jan 2023 08:44:44 +0000
ROA not before: Mon 02 Jan 2023 08:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:8f:05:bc:f8:eb:02:7b:1f:c2:0f:45:d3:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
Validity
Not Before: Jan 2 08:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b81bc477236006f300a2ff68cf0e634a35c3fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:63:a9:f9:92:ac:d0:a2:a3:ba:ba:b6:6c:
0a:6c:cb:03:22:4d:8e:87:09:82:db:72:bb:6a:3e:
65:03:de:6d:15:37:8b:f7:8a:9d:6f:b0:ae:84:62:
e1:c3:54:c3:51:58:b0:d7:a2:62:b3:0e:51:05:67:
8f:b5:ea:06:d4:b8:06:84:59:68:06:8f:49:a8:d2:
8a:26:37:98:35:59:41:58:7d:25:b1:f1:bd:45:65:
9b:ac:c3:7f:24:08:58:e1:09:e6:c7:23:31:1a:86:
ea:af:69:f9:ee:36:ec:f8:fc:f9:ac:fd:21:a8:d1:
14:52:c0:d5:14:c2:be:c8:09:a2:f4:99:51:86:f8:
79:67:f4:cd:cb:d7:1e:c4:cc:70:4d:f8:bc:57:42:
4a:62:18:b7:03:1b:c8:8a:7e:7c:c6:1d:3b:a8:25:
cc:29:e9:15:20:97:ac:e4:18:93:16:60:c0:f1:9b:
8a:0f:9a:da:41:25:e8:bb:a1:6b:4c:59:4c:33:78:
d0:27:9b:4d:46:32:68:e8:a5:3d:99:b6:d2:6b:3f:
e2:d0:ff:ba:ee:f2:a7:0f:ef:f9:cb:42:58:60:dd:
86:ac:88:d9:40:be:58:10:47:8d:6f:f5:60:00:c9:
23:ae:ec:b7:6d:9c:bb:67:7e:6d:ea:22:01:33:8d:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:81:BC:47:72:36:00:6F:30:0A:2F:F6:8C:F0:E6:34:A3:5C:3F:D3
X509v3 Authority Key Identifier:
keyid:33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.75.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d9:21:a1:3a:26:86:1b:82:95:d8:2f:b5:47:27:5a:5d:35:
9b:dd:47:a3:2a:52:74:bc:af:a9:31:4f:0e:60:58:5c:27:2d:
ba:46:eb:a7:80:4e:06:55:39:96:c8:7a:ed:0f:8b:f0:78:16:
e9:98:e7:10:7c:0e:08:f0:5d:21:0c:20:5e:bc:b6:79:2e:92:
98:b4:8e:94:7d:30:95:28:6a:40:ab:a0:f1:1c:e0:60:c0:1c:
95:95:bb:3e:ae:46:ea:2d:28:8c:0d:27:04:84:6a:d3:e0:25:
dc:c0:dd:25:d5:0c:81:ed:fa:a2:19:45:d7:0f:c7:4e:48:cc:
29:af:6b:ce:14:f0:5b:2e:11:c2:e4:ae:6f:94:87:14:77:1c:
e3:0e:f6:64:b0:68:94:a2:30:43:75:b5:dc:a4:e0:88:d2:cc:
0c:f4:51:c9:f6:29:98:3b:b2:8c:30:75:98:f3:8a:1e:58:84:
d4:85:27:6b:1a:a7:ee:96:52:97:f5:8d:91:ef:b1:57:06:7c:
3a:b3:c9:73:cb:8a:58:85:5d:05:b9:0d:eb:4e:62:a0:58:68:
91:7b:1a:af:c1:b2:28:98:16:f4:36:40:24:b1:cc:05:c4:62:
c2:63:05:e0:97:47:99:24:dc:f4:a7:32:45:bf:27:05:59:71:
6b:b3:ff:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:16 2025 by rpki-client