Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/7enwb-8w4fdf50lua5v_MthVoR8.roa
File: 7enwb-8w4fdf50lua5v_MthVoR8.roa (raw, json)
Hash identifier: YRFFQdSCdVAAYSX7rfkEZMYCjqua5Aboj9EnGnUyUCM=
Subject key identifier: ED:E9:F0:6F:EF:30:E1:F7:5F:E7:49:6E:6B:9B:FF:32:D8:55:A1:1F
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01856FA6F515FBEC3425FF65CC6C4668B82F
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/7enwb-8w4fdf50lua5v_MthVoR8.roa
Signing time: Sun 01 Jan 2023 23:24:50 +0000
ROA not before: Sun 01 Jan 2023 23:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 146.19.191.0/24 maxlen: 24
2a12:eb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f5:15:fb:ec:34:25:ff:65:cc:6c:46:68:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jan 1 23:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ede9f06fef30e1f75fe7496e6b9bff32d855a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:05:b2:77:45:a2:9e:44:27:17:cd:68:e7:
06:dc:96:3b:34:0c:6e:71:66:c0:84:21:84:77:a2:
5e:33:00:6b:05:3a:2d:f5:e2:8b:81:97:36:6a:ff:
3c:3c:ff:5a:3b:a9:5b:78:87:16:31:27:85:9f:e6:
8b:8e:6d:07:5c:95:6b:91:8e:81:d7:18:21:af:86:
fe:c2:b5:e8:f9:e7:d4:32:5b:c2:90:d5:8f:4c:c6:
88:b0:5b:92:e6:f7:ab:39:5a:3c:d0:1a:ab:4d:62:
23:64:d3:aa:9c:33:e5:83:02:11:c9:44:21:2e:86:
0a:22:10:c9:ff:f6:71:5e:c7:55:20:10:d6:76:45:
64:c5:38:de:fe:4d:96:8a:a5:1e:d3:1a:93:16:e0:
68:dc:a9:82:39:18:51:9d:08:e5:69:a7:95:4c:76:
9b:f3:cd:83:ad:92:4d:e2:a7:1e:a1:8e:10:53:2b:
4f:07:6e:82:da:15:b0:dd:3b:b3:43:62:5e:e1:f3:
ef:8d:9f:c3:58:d6:1a:ed:71:bc:79:82:2f:94:bf:
fc:90:bc:22:15:8c:ff:aa:40:b0:b8:71:b5:b2:8b:
f0:d1:55:72:b4:bc:a4:a0:5d:b5:ca:7d:da:5a:e7:
10:e4:6f:b5:c3:e6:d8:b0:a3:bc:54:32:22:50:ee:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:F0:6F:EF:30:E1:F7:5F:E7:49:6E:6B:9B:FF:32:D8:55:A1:1F
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/7enwb-8w4fdf50lua5v_MthVoR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.191.0/24
IPv6:
2a12:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:fb:4f:c0:7c:f0:b2:f2:f9:0d:1d:43:cd:f6:6b:19:2c:7e:
ce:09:0c:10:0c:46:a7:14:20:cf:23:3b:23:89:13:df:90:5b:
70:ca:1e:30:53:32:eb:13:73:4a:08:61:a1:69:5b:ff:9b:ec:
20:d0:27:b6:68:2b:ae:39:10:d7:b9:3c:ac:04:d7:9e:8e:0b:
a1:70:68:d0:49:e9:16:07:3a:ad:d0:2e:31:4f:70:c4:8d:e7:
ba:44:fc:cf:b0:31:44:29:0b:e3:2b:d5:85:34:cc:21:ed:78:
3d:41:e1:f6:c7:58:c7:3a:46:cf:d3:e9:4d:58:18:d1:72:98:
4f:0a:c9:7e:95:82:9e:2b:3a:06:85:96:df:be:d9:1e:fa:ee:
42:6d:6f:f9:03:e1:08:b8:75:70:b1:e9:d7:4e:9e:6b:fb:13:
bc:6e:48:c5:6c:d3:54:4f:dc:57:68:6c:0b:39:6b:ef:6a:78:
da:45:46:42:20:09:07:8d:63:0b:01:38:0b:c3:44:9d:75:0b:
91:1b:93:30:b0:06:b3:56:d1:1b:41:5d:4a:f0:73:64:2f:65:
a3:3b:b8:53:87:57:26:d1:d7:ac:97:2e:92:49:00:e1:0f:0d:
b8:d8:c4:71:1f:3c:cb:a9:8f:3f:c9:55:d1:b3:5e:68:07:47:
12:be:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:52 2025 by rpki-client