Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/PwzSYC69EMRklW5nvfGFHszKZXE.roa
File: PwzSYC69EMRklW5nvfGFHszKZXE.roa (raw, json)
Hash identifier: VhL7VtKsWiZmZ8GACCv/Y0VhBFvV9YUv0rGHeUnMWa8=
Subject key identifier: 3F:0C:D2:60:2E:BD:10:C4:64:95:6E:67:BD:F1:85:1E:CC:CA:65:71
Certificate issuer: /CN=9616ef27278309d222b3ec97334e4a83ad48971b
Certificate serial: 01830859215B20A054DE8E3D71B248B5F397
Authority key identifier: 96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/PwzSYC69EMRklW5nvfGFHszKZXE.roa
Signing time: Sun 04 Sep 2022 11:53:22 +0000
ROA not before: Sun 04 Sep 2022 11:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8540
IP address blocks: 146.19.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:59:21:5b:20:a0:54:de:8e:3d:71:b2:48:b5:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9616ef27278309d222b3ec97334e4a83ad48971b
Validity
Not Before: Sep 4 11:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f0cd2602ebd10c464956e67bdf1851eccca6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6a:ad:d9:75:af:e6:bd:6a:49:13:04:04:6d:
0a:ca:6e:ee:3d:28:37:c8:87:b8:08:f6:19:5b:42:
5d:85:89:93:c3:a7:75:bc:52:b9:e6:f4:f4:6d:ee:
5c:0b:18:e6:32:f8:04:88:cd:6c:dc:3e:fc:cb:77:
8d:82:3a:97:ea:e2:db:48:bb:06:6c:3b:9e:11:68:
34:35:02:a5:3d:65:94:7b:bf:9e:d0:0f:ba:96:88:
f5:c9:e4:e5:63:af:7f:10:21:a1:57:e1:d2:b5:8e:
c5:d3:d7:bf:e1:a2:68:5e:10:f9:8e:9b:5a:25:0d:
e6:57:b1:6a:ee:9e:c8:6d:d0:2d:7b:93:78:cf:7a:
fe:1c:e3:8f:c7:1e:da:e8:5d:cd:7f:fe:9f:8e:2b:
07:0d:9c:6c:ef:3f:20:f4:18:02:b5:a9:f5:1e:30:
4d:d6:fe:f1:69:6c:68:71:6b:cc:bd:18:27:a7:9b:
ca:16:37:bb:5b:ba:04:77:14:4a:69:4b:83:b1:a1:
5c:7d:b4:f4:d6:12:b9:b1:a5:e1:a1:a6:3b:f2:90:
89:3b:01:d8:15:d8:2d:60:3a:13:e3:cf:a0:73:85:
50:da:6e:df:d5:9d:ea:41:4f:43:df:9a:62:3f:48:
dc:bf:a9:9c:4e:aa:ad:8f:c3:53:19:6b:d4:ae:70:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0C:D2:60:2E:BD:10:C4:64:95:6E:67:BD:F1:85:1E:CC:CA:65:71
X509v3 Authority Key Identifier:
keyid:96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/PwzSYC69EMRklW5nvfGFHszKZXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.52.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fd:79:f2:0e:22:af:a0:07:fa:f8:f5:ba:eb:46:b5:1e:eb:
9e:4d:8b:89:f0:86:14:77:54:66:df:10:4d:29:a2:6c:2d:96:
23:a4:dd:b9:e1:1b:ce:97:ee:3b:7a:fa:f3:0d:39:92:39:76:
96:08:de:1b:c7:68:1f:11:cc:cf:84:62:53:2c:83:69:db:49:
62:05:93:40:d5:b7:f5:5a:f6:c7:cf:f8:a6:64:d0:6d:08:ab:
d4:cc:37:d7:f8:e8:28:3a:c7:b1:c0:8b:d0:b0:65:08:4a:cb:
e2:c0:4d:1d:0e:fe:25:d4:d0:a9:90:ab:c9:54:75:3c:8e:e3:
47:a9:97:f4:ba:90:4a:d3:72:48:03:a4:3b:1d:66:83:29:9f:
f5:65:a7:f1:b5:f9:26:af:bd:f2:5d:fd:cc:33:59:37:9e:41:
9a:79:c1:a7:a0:82:4d:e4:c4:67:4a:90:15:ba:73:dc:60:ea:
c4:33:48:60:2d:c5:89:36:0e:29:5e:f9:d2:52:47:bc:8c:86:
08:43:e9:cd:69:4b:40:2e:26:79:97:ca:66:ba:ef:10:eb:82:
2a:07:35:c8:20:00:78:cd:5c:42:7e:ad:99:e2:d0:07:ef:66:
83:a7:5f:b1:35:bc:b4:71:10:47:c6:df:8c:e3:cd:21:9f:34:
9e:60:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:29 2025 by rpki-client