Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/928a54-0855-44f9-8bcf-e4604380195d/1/vXGnebK5uK_qisxkj_RRerJi0U4.roa
File: vXGnebK5uK_qisxkj_RRerJi0U4.roa (raw, json)
Hash identifier: cdAECP0ga/u2hFsQD30m1/9I62tbiImOdkCOOw2Yauk=
Subject key identifier: BD:71:A7:79:B2:B9:B8:AF:EA:8A:CC:64:8F:F4:51:7A:B2:62:D1:4E
Certificate issuer: /CN=253a1024547b191a80b7233c9dce06ff078df002
Certificate serial: 0187653989F9F4C48720B741B1023C8DB3E1
Authority key identifier: 25:3A:10:24:54:7B:19:1A:80:B7:23:3C:9D:CE:06:FF:07:8D:F0:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JToQJFR7GRqAtyM8nc4G_weN8AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/928a54-0855-44f9-8bcf-e4604380195d/1/vXGnebK5uK_qisxkj_RRerJi0U4.roa
Signing time: Sun 09 Apr 2023 08:54:42 +0000
ROA not before: Sun 09 Apr 2023 08:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203162
IP address blocks: 146.19.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:39:89:f9:f4:c4:87:20:b7:41:b1:02:3c:8d:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a1024547b191a80b7233c9dce06ff078df002
Validity
Not Before: Apr 9 08:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd71a779b2b9b8afea8acc648ff4517ab262d14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:28:8a:9c:6f:f8:f2:07:b1:99:bb:31:5b:
79:51:64:1e:a1:ad:91:af:f3:5f:34:a1:51:7d:ce:
da:24:7b:01:26:2c:93:ff:d1:ab:46:25:5e:b7:3e:
42:a7:a3:ba:01:e5:b7:d4:04:dd:f5:25:35:34:86:
53:ec:09:48:fb:d6:87:13:ff:6e:bb:71:2a:68:23:
76:79:25:a1:8c:99:a1:46:7e:43:55:8f:cb:ea:22:
10:0a:9e:1c:fb:3e:f8:11:6c:5d:4f:21:0c:52:1b:
b5:eb:f4:d0:e8:74:50:b1:f8:f9:94:3c:a6:5d:2f:
d3:cd:43:b7:ea:ab:cb:85:b9:ba:32:0e:1e:fe:e3:
91:88:a3:bf:c8:f3:1d:a9:8f:34:e4:f1:4a:0e:b0:
8e:f0:35:e4:29:65:17:0e:3c:40:06:d1:88:ac:2d:
34:7f:40:e3:85:34:41:b4:d7:37:5d:8d:77:90:5b:
f3:ae:76:98:0d:f2:d0:88:de:c2:3f:d5:fa:fc:63:
86:26:64:7a:c9:cc:55:09:d1:c9:77:e7:02:27:42:
9c:be:7d:8d:0f:a0:96:d9:55:1f:50:8a:89:84:f4:
66:6d:5a:de:72:0f:dc:e8:83:ca:76:e9:71:2b:f9:
4d:11:93:93:c7:93:4b:05:58:ed:0e:7a:fe:e6:6a:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:A7:79:B2:B9:B8:AF:EA:8A:CC:64:8F:F4:51:7A:B2:62:D1:4E
X509v3 Authority Key Identifier:
keyid:25:3A:10:24:54:7B:19:1A:80:B7:23:3C:9D:CE:06:FF:07:8D:F0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JToQJFR7GRqAtyM8nc4G_weN8AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/928a54-0855-44f9-8bcf-e4604380195d/1/vXGnebK5uK_qisxkj_RRerJi0U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/928a54-0855-44f9-8bcf-e4604380195d/1/JToQJFR7GRqAtyM8nc4G_weN8AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.104.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e1:54:8e:95:ff:4a:1f:63:ed:81:61:24:66:24:ee:41:e1:
a0:b1:dd:b7:3d:97:82:5c:51:7d:d8:ba:61:f2:a2:fb:18:f0:
f6:7d:24:b0:91:6b:e9:63:a5:02:22:97:0b:b9:13:7f:16:f1:
97:c1:9a:d8:8f:38:b2:50:26:13:7f:6e:39:09:78:4a:5f:da:
f9:ef:cd:95:1a:93:b3:72:f5:44:fa:53:b1:2d:7f:c9:ab:ed:
86:1c:83:94:c2:97:dd:62:51:23:ef:3f:80:b5:97:78:1c:8b:
87:b9:bf:5e:1a:fa:6f:10:6e:5c:4d:fe:47:90:e3:7b:fd:2b:
a0:3a:4a:4a:f5:29:f5:02:01:3d:ed:4a:c1:7c:2c:30:56:0a:
96:63:fa:7c:02:93:9d:6e:2e:3f:eb:e9:b6:13:25:29:1b:03:
07:89:3a:c1:51:5c:a2:e5:ad:22:25:0b:a4:0b:db:16:03:6e:
fc:28:a7:98:4c:f5:4a:65:c6:0d:54:a8:ef:8b:ed:1a:ae:c8:
f2:79:33:e9:47:ed:4d:fe:fb:97:54:25:e4:37:64:c2:7f:01:
73:44:ca:5d:36:78:eb:1f:f6:57:df:ff:5c:13:72:ce:38:11:
f6:08:41:e3:77:73:57:38:c0:29:5a:1f:c7:e1:72:18:93:d3:
c6:5b:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:28 2025 by rpki-client