Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/5T6hvXXbIxSsBvo9NyyMlajn_GQ.roa
File: 5T6hvXXbIxSsBvo9NyyMlajn_GQ.roa (raw, json)
Hash identifier: CgWTiXEdzCLJhwcQpSHsmD+Fnq/u94/YhbxjcKYij5M=
Subject key identifier: E5:3E:A1:BD:75:DB:23:14:AC:06:FA:3D:37:2C:8C:95:A8:E7:FC:64
Certificate issuer: /CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Certificate serial: 0185715E57E12C0D482016201597FE46BE33
Authority key identifier: 1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/5T6hvXXbIxSsBvo9NyyMlajn_GQ.roa
Signing time: Mon 02 Jan 2023 07:24:46 +0000
ROA not before: Mon 02 Jan 2023 07:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:57:e1:2c:0d:48:20:16:20:15:97:fe:46:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Validity
Not Before: Jan 2 07:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53ea1bd75db2314ac06fa3d372c8c95a8e7fc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:85:a7:8a:d9:1f:ba:97:cd:ce:9a:4b:67:
33:63:3f:9a:6d:a9:33:b6:fd:5d:88:d5:36:c1:38:
11:69:60:90:94:e1:64:d6:12:ca:83:77:72:6b:b7:
18:6d:6c:e3:8d:08:10:46:3a:55:11:fc:7b:78:6b:
6a:e2:36:9b:70:61:0e:41:f9:6a:73:51:5a:5a:b9:
a4:4e:b4:8d:91:42:ed:e4:16:f6:8b:4e:dd:38:f9:
15:5b:1e:db:f5:73:6e:cd:01:56:19:7d:76:45:01:
c7:dd:b1:e3:e6:17:5f:53:f8:9f:91:ea:64:5e:f3:
de:04:69:65:04:0a:b6:9e:02:d9:16:ef:6d:83:0d:
b6:3c:74:75:c3:6c:cc:5f:cc:19:40:ed:c3:66:24:
ef:63:42:78:a6:d6:07:e4:e1:37:1f:4a:51:cb:26:
a8:af:aa:1e:46:a6:eb:f2:93:7c:6b:87:d9:59:51:
21:23:49:00:6a:77:21:82:d6:3f:b8:53:a0:c9:83:
2e:b3:bc:a9:13:aa:e5:bd:5d:28:86:aa:ec:4f:28:
8f:75:40:0f:08:3d:5f:54:67:f0:8b:91:7e:58:76:
f7:bc:47:99:57:a9:b6:fe:a7:fe:62:05:42:68:70:
c1:10:dd:64:76:01:95:66:2b:77:dd:8a:72:c4:79:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:A1:BD:75:DB:23:14:AC:06:FA:3D:37:2C:8C:95:A8:E7:FC:64
X509v3 Authority Key Identifier:
keyid:1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/5T6hvXXbIxSsBvo9NyyMlajn_GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/Htm8xpq2z0zGGk9EcBILzb81WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.160.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:bc:c7:09:51:ad:73:08:f6:f1:c4:c4:59:a9:00:d1:01:
dd:34:c8:25:55:36:34:27:1d:35:e6:b4:f5:5e:2e:3a:7e:cf:
da:12:98:2e:46:5e:1c:45:84:6a:97:96:62:c3:08:28:79:62:
52:81:d8:10:1f:34:22:7b:16:60:fb:7e:fd:1f:d4:33:8e:f7:
83:8b:f8:ee:b4:a2:8c:06:66:f5:6e:e0:aa:ed:39:94:f2:c3:
11:f0:84:3c:3c:46:4d:4a:ed:44:81:20:79:bb:29:da:ca:f6:
81:5c:f1:10:18:7c:70:37:3b:c7:1c:75:2a:bd:d8:96:7b:96:
67:11:2e:fe:c8:5e:8d:42:2f:2b:92:ff:66:df:b1:ec:bf:bb:
c6:cc:64:ae:cc:ab:be:97:25:97:7d:af:0f:02:ec:e2:ec:53:
3c:db:73:88:c7:b8:b7:14:bb:35:53:fe:eb:40:af:49:ce:ee:
ea:41:e4:de:ae:20:5d:d7:80:3f:f4:2a:fc:f7:c1:0e:44:0b:
1a:33:03:bf:5c:17:2b:24:f2:8b:7b:76:ed:7a:20:dc:d5:cc:
92:65:c5:43:46:a3:2b:c7:d5:c3:8c:e1:b9:06:db:85:c4:99:
d0:dd:94:0d:6f:fd:6d:cd:0d:81:7b:32:5a:65:ce:94:fc:cd:
ee:fa:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:31 2025 by rpki-client