Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/84WJm9xNmhG-p4IUfa_CMxdgeH8.roa
File: 84WJm9xNmhG-p4IUfa_CMxdgeH8.roa (raw, json)
Hash identifier: AuPxxCbwKuw9SHsRY1fAS9+Ft8t748Z3dyckzcg4GOA=
Subject key identifier: F3:85:89:9B:DC:4D:9A:11:BE:A7:82:14:7D:AF:C2:33:17:60:78:7F
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01856FA6F4640785D9E1ED793278B84B25B6
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/84WJm9xNmhG-p4IUfa_CMxdgeH8.roa
Signing time: Sun 01 Jan 2023 23:24:50 +0000
ROA not before: Sun 01 Jan 2023 23:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 146.19.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f4:64:07:85:d9:e1:ed:79:32:78:b8:4b:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jan 1 23:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f385899bdc4d9a11bea782147dafc2331760787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:e8:25:b7:62:82:9c:3c:12:bd:bc:56:6d:
0e:0b:90:ef:ae:0d:9b:ec:c1:dc:27:32:55:bb:d0:
f4:36:88:63:50:31:99:91:76:ff:bc:6f:a7:2b:3a:
b8:e9:15:81:53:c1:ca:ab:d7:42:f6:ff:a1:43:ae:
ea:eb:14:cd:5e:25:19:6c:15:b7:94:77:c6:bd:7d:
50:dc:a6:2a:b6:2e:ae:13:b0:55:ad:db:d3:91:e8:
05:40:b6:72:a9:a2:3e:cd:59:f5:8a:4d:1c:ad:31:
26:0b:05:75:8c:8c:1f:14:7c:69:ac:25:1f:55:92:
67:19:62:c6:8d:15:bb:83:d2:a6:bd:b9:51:12:35:
c0:70:b9:86:33:ee:7a:18:1f:11:b3:35:da:03:b5:
a0:00:e9:1d:75:91:97:81:7b:df:a7:8d:d5:52:c2:
7a:c6:d3:13:d0:53:12:85:56:9f:86:21:ef:1a:ef:
bc:3d:cc:46:3c:a7:fc:fd:2e:34:91:46:54:fb:d3:
74:25:16:2e:00:b5:6e:5f:e6:c0:42:bd:42:ad:c7:
2c:cf:75:9b:b9:56:0c:82:ae:6f:05:69:88:ab:2d:
b6:fe:38:39:4f:79:35:03:ac:86:c0:95:12:d6:fc:
5b:31:bc:0b:4d:6a:bd:4a:4e:c3:00:01:34:85:36:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:85:89:9B:DC:4D:9A:11:BE:A7:82:14:7D:AF:C2:33:17:60:78:7F
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/84WJm9xNmhG-p4IUfa_CMxdgeH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:17:4f:62:8e:ab:6d:7b:74:63:60:c4:d7:0f:92:84:16:e1:
f0:33:e2:57:f4:85:28:dd:b2:0f:5c:d7:6d:9e:a8:ee:68:77:
d7:20:02:ea:4d:f6:87:65:a4:a9:8f:23:a6:e5:b5:73:1b:b7:
a2:6c:0c:59:35:24:ff:30:37:85:b1:65:aa:68:35:67:24:7b:
9f:28:b2:e3:cf:9d:5e:8c:25:93:4a:1e:ed:83:5e:9b:e5:1b:
a7:38:bd:99:1b:65:c8:6c:80:06:02:fc:ed:c9:56:d1:61:39:
e4:44:0d:ce:b7:1f:f9:9f:a3:48:ac:09:8a:df:9a:9e:46:7b:
32:1b:bb:23:34:f8:ad:06:49:37:ba:93:96:c3:32:cb:9c:01:
a2:37:37:e7:bb:7f:4e:ae:98:29:54:fa:08:97:01:a3:4b:53:
41:15:ed:5c:b7:96:82:d7:11:43:a2:27:ab:b4:76:3b:f1:20:
c0:77:49:06:6d:08:92:3d:15:89:71:fc:c5:cb:9f:09:43:95:
6f:18:2c:4d:56:b7:9f:40:c6:4f:26:5e:1b:08:01:45:6b:b8:
45:fe:6a:b5:d6:78:4f:6b:0e:b1:c0:8f:e5:88:40:01:ff:c3:
e9:3a:a0:56:f1:a4:46:d9:ed:47:37:61:73:e7:41:bc:63:46:
1e:5f:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:05 2025 by rpki-client