Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/vjuuWXGLCN35ZhFUfxqQiD7638I.roa
File: vjuuWXGLCN35ZhFUfxqQiD7638I.roa (raw, json)
Hash identifier: 1ywM6uFSBkYFBDk2eruhsJz9E8P1IqcPNjU8uE5VICs=
Subject key identifier: BE:3B:AE:59:71:8B:08:DD:F9:66:11:54:7F:1A:90:88:3E:FA:DF:C2
Certificate issuer: /CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Certificate serial: 018227684D935F6978D2118FC8C2AF054C74
Authority key identifier: C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/vjuuWXGLCN35ZhFUfxqQiD7638I.roa
Signing time: Fri 22 Jul 2022 19:35:23 +0000
ROA not before: Fri 22 Jul 2022 19:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:68:4d:93:5f:69:78:d2:11:8f:c8:c2:af:05:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Validity
Not Before: Jul 22 19:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be3bae59718b08ddf96611547f1a90883efadfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:e0:4d:0b:3b:6a:a2:8f:b1:1e:f3:6c:3d:
95:5e:bb:9e:d7:29:06:e1:4e:cd:00:6a:e0:3d:59:
b2:cd:50:fa:5d:3e:6d:02:02:58:9b:b0:29:2f:03:
f8:99:2e:df:90:ed:ca:5a:47:69:74:ac:d8:d2:73:
9f:ac:39:ee:3f:9e:4b:71:fc:25:96:31:85:a6:9f:
f4:f5:08:57:1a:e5:65:15:aa:26:19:8e:a8:d8:74:
e8:3c:a5:6e:c7:60:ff:1b:13:f1:93:cb:60:2d:31:
4a:3d:b2:17:dd:2f:9c:fe:04:ce:8f:e1:f2:cd:cb:
7f:3c:3b:21:75:d7:ea:81:12:0a:1b:41:8e:ac:b8:
2f:a2:eb:7b:bf:27:48:a5:2e:0a:a3:b5:2b:c5:ee:
22:36:8f:31:45:c3:13:67:04:04:7c:41:a9:4b:a4:
95:12:e8:b9:0f:1c:d1:79:a8:08:9d:4f:24:b0:e6:
be:fb:12:10:38:d0:d5:71:14:43:2a:6e:9f:56:8c:
64:e1:28:83:01:98:4e:43:08:02:07:02:d2:ef:44:
28:c9:d7:67:27:46:ca:c6:89:24:28:85:2b:35:88:
8d:c6:ef:50:ab:81:57:cd:bc:2f:8e:e4:08:21:f1:
96:1b:11:ed:bf:1f:cb:4f:96:5c:a9:6b:89:ec:10:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:AE:59:71:8B:08:DD:F9:66:11:54:7F:1A:90:88:3E:FA:DF:C2
X509v3 Authority Key Identifier:
keyid:C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/vjuuWXGLCN35ZhFUfxqQiD7638I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
41:49:e2:b2:c6:2a:ed:24:39:44:64:f4:79:17:dd:d1:bb:e1:
1c:10:dd:ae:ae:5b:a5:0c:2a:69:ab:f3:f0:58:3f:dd:93:cd:
a8:fb:6e:9b:0e:1b:5c:f5:09:20:d0:2d:b2:05:19:c2:38:04:
8d:50:7a:a7:cc:90:9f:16:c6:d6:6d:84:6f:30:7f:63:37:1c:
c7:c7:d7:16:dd:5b:e2:2f:17:a0:89:00:7a:76:70:c2:fe:23:
fc:c0:df:0a:90:20:37:8e:d8:40:81:23:fd:8d:98:15:50:13:
fb:05:5a:34:be:1a:a5:11:76:ce:0c:d5:3b:39:1e:ff:e3:ea:
22:ef:d6:44:39:7d:d1:dc:23:b4:b4:54:26:67:7d:91:62:db:
c1:83:2b:20:89:d1:b9:6f:23:d7:ac:24:6a:49:a1:6d:29:4f:
d4:f8:26:7a:9e:03:d3:53:7f:d9:ae:89:fd:c5:1e:7c:85:d1:
6d:ba:fb:31:9c:b1:1f:d4:85:fe:bb:e7:76:35:df:b1:5d:df:
64:95:41:97:dc:6d:9e:9e:a0:a3:4d:97:80:f2:a0:5d:7d:75:
98:bb:3e:ef:e7:88:26:1a:1c:ee:09:1b:6d:39:36:20:f9:f6:
1b:e7:ee:b0:29:b5:13:33:36:4a:f0:0d:7d:ba:bc:80:18:f2:
1b:93:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:50 2025 by rpki-client