Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/xGBpHuQTFIMWhfvWsE2nN6GSpD0.roa
File: xGBpHuQTFIMWhfvWsE2nN6GSpD0.roa (raw, json)
Hash identifier: WzBgu10CBLJIbnOjpPE+nGOQULfGHhqRtYRAsnDtF/8=
Subject key identifier: C4:60:69:1E:E4:13:14:83:16:85:FB:D6:B0:4D:A7:37:A1:92:A4:3D
Certificate issuer: /CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Certificate serial: 01856E78BDF6C028A5D339162483666A3C8E
Authority key identifier: 36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/xGBpHuQTFIMWhfvWsE2nN6GSpD0.roa
Signing time: Sun 01 Jan 2023 17:54:44 +0000
ROA not before: Sun 01 Jan 2023 17:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211611
IP address blocks: 146.19.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:bd:f6:c0:28:a5:d3:39:16:24:83:66:6a:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Validity
Not Before: Jan 1 17:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c460691ee41314831685fbd6b04da737a192a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:eb:d9:c5:88:29:77:8d:4c:37:50:bd:20:
72:10:a6:24:c8:ba:4f:ef:ac:55:56:f2:7b:d4:66:
79:4d:66:65:9c:6f:b1:ab:87:2e:cb:b2:80:b0:fc:
4b:48:2d:85:9f:81:16:3d:26:eb:35:d0:2f:40:df:
07:89:a8:22:c6:92:85:47:d1:80:8a:2c:d5:19:57:
26:08:14:b4:e3:a8:0f:e9:1d:f4:12:29:88:a2:9a:
ee:f4:8a:f0:ac:e0:75:ba:ef:75:3c:f0:ac:27:15:
f4:15:97:a0:77:06:12:5e:c9:2b:25:1d:04:e7:36:
13:5a:48:7b:b1:4e:75:8a:0b:b5:7f:a6:9b:60:57:
85:f0:73:29:0b:a2:05:ed:00:46:6a:98:83:17:15:
1f:a5:9b:b5:91:b1:af:57:cd:9c:a7:bb:34:4b:ce:
ff:e5:3e:31:8d:79:2e:aa:d7:b3:39:1b:71:02:8f:
88:9c:19:33:44:d6:07:7d:ab:81:f1:e8:d0:98:67:
ab:40:51:d5:a0:8b:4c:82:fa:b1:95:8b:04:ce:da:
04:1f:5e:7b:f5:c2:c6:06:3f:45:fa:a1:b5:41:73:
b5:fd:03:d5:1d:1c:6f:13:0d:ef:c9:36:85:4b:68:
5d:bb:49:39:7d:93:b4:3e:60:db:c4:73:5b:a8:3c:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:60:69:1E:E4:13:14:83:16:85:FB:D6:B0:4D:A7:37:A1:92:A4:3D
X509v3 Authority Key Identifier:
keyid:36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/xGBpHuQTFIMWhfvWsE2nN6GSpD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:97:66:20:26:b4:f6:06:d1:c8:4d:9d:f7:55:46:41:0d:
ae:55:2d:fe:9c:c0:00:8a:65:e7:ea:92:55:1c:cb:66:2b:a0:
ec:99:26:32:01:47:58:75:48:14:aa:0e:e8:a4:f6:fc:9a:ff:
39:c3:99:7d:8f:f0:ac:78:80:30:c4:fe:9e:c4:64:de:c4:78:
ab:84:a5:fe:21:28:c5:56:1a:ef:08:cf:69:fb:af:2b:57:92:
d6:a6:14:3e:67:ec:d4:2f:7d:20:0e:8d:d0:2c:fc:d3:5c:63:
5d:ce:b6:88:50:3b:35:fa:fe:a8:d0:6b:7d:6a:f5:a8:02:c3:
df:fb:01:d9:72:bb:c8:8d:8c:6b:f0:07:27:46:a3:17:df:2d:
40:f2:e8:d0:2c:2c:2e:99:81:be:29:a5:27:2b:25:55:64:58:
10:43:73:d1:1f:80:9e:be:80:62:65:2a:a0:70:81:cc:84:ae:
62:80:7b:dc:a4:a8:c2:f6:41:d4:c5:f0:48:a4:b4:29:28:25:
c3:63:75:7c:2c:15:69:38:1f:a8:46:59:bf:62:06:fb:f0:7d:
1a:a1:9f:40:01:22:16:df:30:10:c4:af:1e:a9:a3:39:98:8c:
01:b8:b4:63:80:83:38:fc:de:05:f9:63:16:f0:72:6d:e2:38:
62:0c:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:24:47 2025 by rpki-client