Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/YDneR5rsseadAPYjI1Sdv1-wiJQ.roa
File: YDneR5rsseadAPYjI1Sdv1-wiJQ.roa (raw, json)
Hash identifier: 7wQ8Zv5pPL6wlsB0jUjwH/bf/SpJa8L0kDn6o6GfamM=
Subject key identifier: 60:39:DE:47:9A:EC:B1:E6:9D:00:F6:23:23:54:9D:BF:5F:B0:88:94
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 01869DEAE7C2E09C235575556164D0C3CBD7
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/YDneR5rsseadAPYjI1Sdv1-wiJQ.roa
Signing time: Wed 01 Mar 2023 16:04:22 +0000
ROA not before: Wed 01 Mar 2023 16:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200010
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:ea:e7:c2:e0:9c:23:55:75:55:61:64:d0:c3:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Mar 1 16:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6039de479aecb1e69d00f62323549dbf5fb08894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:25:63:92:c9:ec:10:0e:38:2a:4a:25:86:
87:88:9d:04:f8:c4:b0:61:68:5d:1d:c7:1d:17:58:
e6:a9:20:3c:26:b8:5c:5d:f4:c6:bf:49:64:7c:6b:
7c:54:28:f9:61:69:a9:76:e1:37:43:44:5a:3e:e7:
19:f4:9c:4f:f1:ee:d9:38:f3:ba:03:17:df:60:66:
0c:2c:e4:10:72:a0:66:6d:53:2f:2b:75:c0:4a:a2:
7c:7b:8b:7a:28:3c:79:74:39:ae:93:f1:48:cc:f3:
04:35:64:91:ef:fa:dd:82:80:ca:54:a0:35:b6:4a:
43:50:14:ef:21:d7:da:cb:9f:87:7b:2e:65:fe:87:
66:1b:37:15:11:ff:e9:c6:bc:ba:79:47:13:a7:0c:
af:75:05:42:99:4e:ce:fe:9a:f5:48:74:07:88:72:
0e:c6:0c:8f:a2:96:be:cc:15:13:7e:c0:fd:32:bb:
6c:f1:bc:13:04:36:37:28:ab:70:0b:19:6a:39:8c:
87:b4:83:fe:a4:57:2c:56:c7:71:09:36:74:89:b1:
df:50:85:64:94:07:b9:fb:45:1b:06:4e:cb:5e:b2:
c5:d2:a3:a9:7e:93:62:80:60:89:f1:a2:d1:5e:c2:
b2:3a:87:05:4d:b6:44:12:10:ef:04:06:ca:62:ce:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:DE:47:9A:EC:B1:E6:9D:00:F6:23:23:54:9D:BF:5F:B0:88:94
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/YDneR5rsseadAPYjI1Sdv1-wiJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:72:5b:25:5a:f6:4f:cf:81:38:ad:3c:31:63:bd:2b:da:cd:
72:3a:a9:12:80:c1:d6:37:34:b8:46:ad:17:cf:06:f7:9f:71:
65:f4:fd:71:0b:bb:f5:03:86:8f:a6:7b:6b:4a:4a:02:b2:5d:
09:5a:99:49:4a:b7:08:f1:8a:cb:78:a2:19:3d:3e:41:fa:96:
5f:91:9a:2a:97:a1:4a:c6:1a:e0:9b:0e:cf:a2:6f:57:22:be:
17:d4:c1:68:b3:43:ac:36:9e:2f:eb:2a:3d:16:c7:a7:97:fc:
5f:7f:68:c3:9d:ab:f2:de:da:b8:60:54:73:3e:21:af:68:50:
44:fd:93:1e:f8:76:7f:dc:1a:a5:a1:70:e5:a6:0d:f6:7d:aa:
14:f9:2f:e2:00:0c:af:b3:e0:f4:00:e5:4d:48:b5:34:53:fe:
17:68:6d:65:1c:90:c4:57:c2:ec:fa:38:fd:d4:c0:32:e1:81:
6d:da:23:3c:a5:1c:7d:9d:b7:39:a8:94:f4:36:ac:ca:0a:68:
49:98:2f:08:d7:8f:67:c0:ec:58:fc:dc:cd:24:da:6c:d9:4c:
91:4d:9e:6c:80:ec:26:9d:3f:be:f8:85:34:dd:bb:d5:7b:56:
58:5f:23:97:69:2b:fb:0e:55:76:87:92:4b:66:dc:2a:cd:77:
10:a6:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client