Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/caRg8y9oWMOwNu6FmsJAW0DAMSo.roa
File: caRg8y9oWMOwNu6FmsJAW0DAMSo.roa (raw, json)
Hash identifier: fgkAenm98LcThAQVDGO7yUErUYV47FIMJtVXarFORmo=
Subject key identifier: 71:A4:60:F3:2F:68:58:C3:B0:36:EE:85:9A:C2:40:5B:40:C0:31:2A
Certificate issuer: /CN=098547627a2b2dea6d080af231430be8a8e69740
Certificate serial: 01876D5D475314A2998CC826EC69F7CEDF5D
Authority key identifier: 09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/caRg8y9oWMOwNu6FmsJAW0DAMSo.roa
Signing time: Mon 10 Apr 2023 22:50:42 +0000
ROA not before: Mon 10 Apr 2023 22:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 146.255.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:5d:47:53:14:a2:99:8c:c8:26:ec:69:f7:ce:df:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098547627a2b2dea6d080af231430be8a8e69740
Validity
Not Before: Apr 10 22:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71a460f32f6858c3b036ee859ac2405b40c0312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:ae:77:d3:67:1e:15:ef:e6:5c:e2:3f:5f:
36:68:72:d1:af:1f:49:9a:0a:14:5d:c2:b4:e3:b5:
b2:b2:28:95:dc:62:60:82:8f:29:a7:9b:cf:d6:74:
23:64:4c:f4:48:25:ac:1a:da:c5:bf:12:9c:a4:20:
98:0a:b2:6a:ac:c1:86:f2:e4:3e:6e:c0:a9:33:ea:
33:d8:80:d3:ca:fa:83:36:fc:74:e2:83:42:b3:ba:
14:57:99:bc:58:00:ea:54:11:5a:a7:a7:51:0b:26:
8c:f4:c3:0b:6a:5b:76:cd:82:3f:89:f7:b1:91:50:
8e:3b:cb:52:ea:95:fd:1e:f5:65:e9:d6:20:cb:a8:
d3:a5:87:22:ba:7f:b8:6d:a9:83:58:4a:d1:0a:d8:
11:73:72:f6:7c:6e:f1:16:8b:41:80:40:12:2e:b2:
20:2a:67:9b:c1:73:77:61:c7:67:f2:09:e2:1f:43:
38:06:d5:16:72:aa:77:3b:7f:b1:40:2e:60:1b:ca:
6f:30:37:25:6f:fb:21:1c:69:c4:e6:d4:5f:12:a8:
f2:58:a6:9f:ac:c6:b1:b7:02:67:89:20:44:0a:25:
33:02:e8:74:82:d5:15:79:1c:fe:21:c4:47:94:a2:
fc:2c:7c:c8:e1:77:32:cf:0e:4d:49:18:26:25:b6:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:60:F3:2F:68:58:C3:B0:36:EE:85:9A:C2:40:5B:40:C0:31:2A
X509v3 Authority Key Identifier:
keyid:09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/caRg8y9oWMOwNu6FmsJAW0DAMSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/CYVHYnorLeptCAryMUML6Kjml0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.184.0/24
Signature Algorithm: sha256WithRSAEncryption
48:63:3e:87:fc:d8:76:e5:27:92:e0:c1:14:e2:74:11:f1:a2:
ed:9a:8a:c8:ab:db:30:bd:f5:4b:d0:54:8d:4b:01:e7:35:60:
cc:40:d8:c9:f6:04:6a:03:4e:ce:f8:6b:84:f8:17:10:13:50:
43:93:21:95:1d:ad:00:d7:c0:58:b5:e3:d2:7e:ce:40:64:f8:
e3:6e:5a:c4:b9:0a:12:23:19:8f:d1:8d:48:af:66:57:49:1f:
d5:99:14:b5:a1:04:9e:f0:18:1b:60:de:63:de:a9:2b:20:b8:
9d:bf:03:5e:e8:b5:2b:f5:d5:04:27:05:f4:79:d5:77:ba:71:
fb:c2:00:37:0b:9c:f8:63:22:41:c9:3d:f7:e1:17:1b:7f:6d:
5b:c0:d5:84:09:b8:77:d7:f3:8c:0d:57:53:f5:95:57:50:60:
63:84:1d:a3:59:96:f7:ea:9d:d3:03:c3:63:d0:e1:c4:d0:bd:
54:ad:6e:80:a3:15:1a:82:f7:d2:13:e1:a6:2b:a7:93:09:99:
0a:5d:76:65:62:04:6f:91:30:ef:61:37:08:52:ad:f0:91:40:
20:f6:c8:2f:a7:3d:4c:1e:51:fd:39:ff:50:12:63:69:e9:d6:
d1:84:b6:cc:49:9e:e2:80:6f:63:26:2b:34:2e:b9:15:f3:37:
de:0c:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:22 2025 by rpki-client