Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/q_vCplnNPeRFCVLnUIASzz16CjE.roa
File: q_vCplnNPeRFCVLnUIASzz16CjE.roa (raw, json)
Hash identifier: NPnuVSt2O9NlPA++TFIyqH/WNR0QxA7xf1a62mtN0n8=
Subject key identifier: AB:FB:C2:A6:59:CD:3D:E4:45:09:52:E7:50:80:12:CF:3D:7A:0A:31
Certificate issuer: /CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Certificate serial: 01856BC1101DB8574BE1178C27051BB8E865
Authority key identifier: 57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/q_vCplnNPeRFCVLnUIASzz16CjE.roa
Signing time: Sun 01 Jan 2023 05:14:52 +0000
ROA not before: Sun 01 Jan 2023 05:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51677
IP address blocks: 146.0.55.0/24 maxlen: 24
146.0.54.0/24 maxlen: 24
146.0.53.0/24 maxlen: 24
146.0.52.0/24 maxlen: 24
185.5.240.0/22 maxlen: 24
185.5.240.0/24 maxlen: 24
185.5.243.0/24 maxlen: 24
185.5.242.0/24 maxlen: 24
185.5.241.0/24 maxlen: 24
146.0.51.0/24 maxlen: 24
146.0.50.0/24 maxlen: 24
146.0.49.0/24 maxlen: 24
146.0.48.0/24 maxlen: 24
146.0.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:10:1d:b8:57:4b:e1:17:8c:27:05:1b:b8:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Validity
Not Before: Jan 1 05:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abfbc2a659cd3de4450952e7508012cf3d7a0a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:62:69:a7:58:a8:94:42:ee:4e:d2:96:f5:
9e:28:1e:46:ee:d7:22:8c:e9:30:27:9b:54:63:e5:
17:85:5a:5f:26:80:84:3f:17:54:d8:ce:4c:00:76:
c4:26:43:4a:ea:88:85:f6:2b:e9:d0:b5:7b:b7:8c:
c9:c0:c4:e4:79:89:63:e3:9f:b6:e1:cc:73:b1:90:
98:d1:74:35:a6:91:2e:81:df:24:c6:4e:95:c1:4f:
cc:6f:7a:aa:40:c5:b8:68:1e:e2:7b:33:af:11:9f:
07:4b:8a:a3:57:61:1b:96:ec:8c:2a:ba:38:4b:08:
1f:f5:d1:4c:ad:6d:71:a9:f2:43:b0:2a:fa:0d:b0:
96:1e:10:f3:ab:e0:0a:38:af:a8:2c:a7:b7:40:27:
27:4b:0f:5a:34:f6:9e:6b:8f:0f:f0:e0:31:19:91:
7f:51:6b:38:33:87:34:e8:88:94:ae:7c:50:dd:a6:
be:29:34:06:dc:5a:de:d9:d7:04:0d:0a:95:c1:b5:
12:d5:e0:f0:5b:97:60:ed:38:e8:4d:c7:e8:24:44:
4f:13:ea:08:8a:a9:f2:ee:20:5e:16:b9:a7:50:31:
94:86:d4:c3:7c:00:e3:07:bb:bf:62:f6:c9:73:0f:
e5:9e:30:11:1b:60:75:cc:66:9f:2e:48:ce:fd:7d:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:C2:A6:59:CD:3D:E4:45:09:52:E7:50:80:12:CF:3D:7A:0A:31
X509v3 Authority Key Identifier:
keyid:57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/q_vCplnNPeRFCVLnUIASzz16CjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.48.0/21
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:0d:eb:1c:93:3f:f4:0d:46:a1:56:ca:31:59:2f:8a:7c:c7:
4f:1e:f8:67:98:c5:7a:ce:79:b7:5c:8d:12:99:46:f7:e1:5f:
34:ab:41:7f:c6:0b:b9:0f:81:da:51:9b:83:e1:e8:0a:a3:d9:
b8:8c:67:42:26:02:a5:ff:f8:14:06:1a:5e:1f:63:83:fe:07:
3a:58:07:90:b4:03:c3:88:7d:ad:fb:eb:c5:bf:16:6b:e1:73:
0e:92:5a:64:47:af:17:cf:01:0a:59:6c:5e:e9:67:ea:60:1b:
fb:c4:bf:33:e1:bc:e7:47:47:dd:10:94:b0:5a:82:6c:72:2d:
96:63:31:15:57:50:6a:2c:5e:74:f2:ff:1b:73:a5:16:bb:94:
bc:8a:09:80:5a:50:31:39:39:b1:bd:88:2d:15:98:eb:0f:b3:
d9:99:29:33:0f:a1:06:a9:34:a4:8c:0e:5f:90:c1:76:7f:ba:
1b:a0:39:e0:1b:3e:3a:2c:52:37:9a:18:70:86:d3:56:97:48:
7a:8d:aa:98:6b:50:7d:33:3b:17:da:b3:7f:f1:af:bf:57:92:
b9:0d:bd:48:cd:b8:71:76:37:1d:be:2b:17:ad:2b:a0:04:d6:
39:c3:ac:dc:c3:9f:fb:b0:69:83:09:3f:d4:d5:33:3c:a2:b3:
21:c6:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:27 2025 by rpki-client