Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/ZzgYC4PK4DdRLpygv4qBS7M64Y8.roa
File: ZzgYC4PK4DdRLpygv4qBS7M64Y8.roa (raw, json)
Hash identifier: idQYsB5uWrGsCGgpdV4NHhqkBbuWgCbmDnTybezMnm8=
Subject key identifier: 67:38:18:0B:83:CA:E0:37:51:2E:9C:A0:BF:8A:81:4B:B3:3A:E1:8F
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 68CE59
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/ZzgYC4PK4DdRLpygv4qBS7M64Y8.roa
Signing time: Sat 01 Jan 2022 03:57:06 +0000
ROA not before: Sat 01 Jan 2022 03:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 146.19.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6868569 (0x68ce59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jan 1 03:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6738180b83cae037512e9ca0bf8a814bb33ae18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:8d:d9:e7:2c:c6:43:0e:a4:e9:d6:be:78:
8a:ba:0d:5b:57:17:89:f7:67:8b:2b:8b:aa:ff:67:
53:4b:9a:83:0e:dc:ec:cf:3c:e7:6b:f0:31:f1:36:
55:1f:73:3d:f4:35:1b:a8:75:f7:71:7d:2b:8e:b0:
ca:fd:85:aa:f9:73:7e:f3:fe:a6:a7:a6:ce:24:c8:
94:53:29:c5:75:45:ce:62:98:f8:ec:9b:db:a4:86:
fd:ba:23:8e:b5:80:06:1c:b2:20:da:d9:95:2f:57:
c1:e6:7c:30:d3:91:52:6b:54:a1:49:94:f2:59:fc:
9b:d2:c7:0b:4a:28:d2:5a:71:94:5b:40:01:7f:4d:
6a:b8:54:f4:35:ae:27:f6:8d:c2:fc:22:07:5b:16:
2a:10:23:b2:e5:10:d7:59:bc:d2:82:ec:bd:07:6b:
e0:a6:7d:25:10:ad:d6:14:42:47:cc:dd:27:34:7a:
67:11:94:56:6a:80:cd:65:6e:2b:6c:b1:74:91:58:
e4:1c:c4:7c:5c:49:f2:c3:b3:f0:8d:df:f9:ee:7a:
f0:80:fa:1f:75:68:cb:5f:d5:a1:7f:22:dd:01:50:
49:61:c9:7f:c7:47:5d:3a:49:b9:3a:2c:90:d6:7c:
cb:5a:73:b9:b4:0d:c9:4e:ca:9c:3c:6e:91:88:29:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:18:0B:83:CA:E0:37:51:2E:9C:A0:BF:8A:81:4B:B3:3A:E1:8F
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/ZzgYC4PK4DdRLpygv4qBS7M64Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ab:05:57:2e:90:ed:78:df:96:fc:36:2f:5d:2f:c1:ce:aa:
4b:7d:34:18:3b:5a:02:71:7e:41:8f:06:31:8a:e2:5c:65:f9:
b3:f3:35:96:6c:a2:91:da:99:2b:c2:6d:35:9d:6a:b7:b7:26:
f6:c8:54:11:b5:3a:91:e8:79:f3:08:a0:16:af:75:df:3c:ad:
42:94:79:a1:3c:e4:3f:ed:3a:99:50:e9:d8:82:8a:7b:ad:5f:
70:dc:a1:5c:d1:ae:83:1c:27:18:72:94:11:d0:b2:96:b9:1f:
7d:11:92:24:df:87:15:aa:ad:5c:d0:b9:1a:40:06:56:df:32:
8d:73:af:5a:b1:e1:ba:67:f7:0b:d5:15:0e:ac:6e:07:b5:05:
83:31:58:bd:dc:34:e0:82:6e:8d:e3:90:d7:51:b1:af:b7:7c:
6d:58:c0:06:d4:09:75:a8:72:31:64:47:6a:9b:be:dd:67:96:
04:ad:d5:c4:e8:5c:23:18:3c:4a:c9:d0:27:a3:51:ea:2b:ad:
b3:c1:a1:98:e3:48:05:1f:dd:6f:41:24:ff:b2:7a:f1:3f:d2:
d0:d7:41:17:53:3d:97:e4:85:9a:a4:54:d4:18:46:8e:7c:b6:
4a:84:5a:c8:ef:24:fc:77:8c:8e:76:8b:7a:93:96:6a:61:b4:
ba:8f:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:38 2025 by rpki-client