Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/ukq8TKCtTUR1jOsQxWQdBiUvXSA.roa
File: ukq8TKCtTUR1jOsQxWQdBiUvXSA.roa (raw, json)
Hash identifier: d6i471C6Z0zWvM/5CdjRB0m3yCyef1FGO04UxzgRB68=
Subject key identifier: BA:4A:BC:4C:A0:AD:4D:44:75:8C:EB:10:C5:64:1D:06:25:2F:5D:20
Certificate issuer: /CN=9616ef27278309d222b3ec97334e4a83ad48971b
Certificate serial: 0185704BD9FC329F20CC2A7DA717DFD26466
Authority key identifier: 96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/ukq8TKCtTUR1jOsQxWQdBiUvXSA.roa
Signing time: Mon 02 Jan 2023 02:24:57 +0000
ROA not before: Mon 02 Jan 2023 02:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8540
IP address blocks: 146.19.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d9:fc:32:9f:20:cc:2a:7d:a7:17:df:d2:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9616ef27278309d222b3ec97334e4a83ad48971b
Validity
Not Before: Jan 2 02:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba4abc4ca0ad4d44758ceb10c5641d06252f5d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:e0:e6:a5:e4:27:b8:22:7a:92:17:da:2a:
8a:ab:c9:7a:19:a7:43:5c:a8:20:37:12:5b:cf:d0:
0b:38:ae:da:f4:3b:1b:a0:e5:ac:ac:ed:fe:29:26:
fb:94:15:d7:d4:03:d4:3c:a1:4a:78:15:f2:ed:2f:
b1:f9:0a:22:39:e1:e7:ea:49:60:f4:30:3d:e8:c0:
b5:16:af:03:1a:85:a6:31:12:67:e2:77:5a:40:86:
f5:ee:21:a7:5a:79:23:fe:f6:1a:8a:c6:3a:44:6c:
f3:15:f0:a3:3b:6f:71:5e:dd:df:6f:13:7e:cd:06:
e8:d7:89:1a:5f:d0:d2:09:c5:90:1d:60:e3:70:4b:
d6:20:1c:9a:2b:a2:d8:1e:2d:17:18:fd:71:89:44:
8f:8c:8a:85:99:4e:1d:3e:ec:3f:50:c3:94:86:41:
e6:4a:af:c5:88:45:f6:54:e2:f5:eb:a3:86:d8:d8:
8d:13:5c:70:b5:15:17:d4:4c:d5:81:28:05:93:bb:
15:a4:9d:24:ba:de:0f:34:ba:44:d1:c6:e5:08:7c:
06:10:15:4a:52:31:f4:29:8a:db:93:1f:06:a2:69:
6c:86:31:d1:f0:8f:a3:56:05:5f:a0:76:ff:8c:74:
3a:5b:9a:9e:6a:12:e7:d0:49:02:a1:96:1d:1c:dc:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:BC:4C:A0:AD:4D:44:75:8C:EB:10:C5:64:1D:06:25:2F:5D:20
X509v3 Authority Key Identifier:
keyid:96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/ukq8TKCtTUR1jOsQxWQdBiUvXSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.52.0/24
Signature Algorithm: sha256WithRSAEncryption
84:52:21:21:e8:6d:42:65:dd:34:69:d8:3b:10:d6:2b:e2:7b:
97:c1:3c:c9:21:e9:98:d8:1c:4c:27:12:87:8c:78:90:2d:93:
69:e3:c7:72:bf:cd:5f:c0:ab:b2:21:fe:ea:72:98:86:c8:03:
e7:cc:13:9d:d6:13:dd:43:29:dc:1e:06:e0:96:3a:f8:e7:d9:
67:65:7e:fb:a2:91:b6:00:f7:49:55:1e:e2:11:1e:ec:91:f7:
65:e8:84:60:56:05:93:8e:b3:74:70:8f:c9:9d:c7:e7:a2:e5:
e7:1a:34:30:6c:47:88:94:3f:36:e5:f9:04:47:c8:89:88:1c:
a0:ba:79:6a:4b:14:65:10:58:a8:93:2c:59:f8:7c:36:b8:11:
78:1b:3b:d4:a7:6d:cb:e0:ef:1a:a0:5f:1c:26:19:5d:0b:aa:
3f:84:e8:3b:8e:9c:36:a4:9d:8b:4a:0d:a4:30:94:c6:f9:48:
3c:74:a3:a9:9a:4b:1d:0d:f1:c8:1f:44:57:05:05:b1:f6:5c:
7c:f3:ac:18:93:0c:fa:6b:37:56:e2:1d:dd:20:b0:1b:59:db:
f0:e1:68:8b:89:9d:8e:9d:cf:e5:ec:61:10:b8:33:31:6c:63:
5a:0e:38:57:98:25:ba:7c:0d:a0:a6:b2:c6:82:a3:0e:0d:16:
47:d3:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:31 2025 by rpki-client