Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/5GB1rmh26K_k01XMS-70mtNc65A.roa
File: 5GB1rmh26K_k01XMS-70mtNc65A.roa (raw, json)
Hash identifier: QKnPXR+hyVusi2KEJYxCthyLiFORVSacZmS1ZMgxOio=
Subject key identifier: E4:60:75:AE:68:76:E8:AF:E4:D3:55:CC:4B:EE:F4:9A:D3:5C:EB:90
Certificate issuer: /CN=fe4d28ae72253668726011cc89ce7762ec1108a8
Certificate serial: 01856F79810B3441592A4B0AF691AEF26769
Authority key identifier: FE:4D:28:AE:72:25:36:68:72:60:11:CC:89:CE:77:62:EC:11:08:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_k0ornIlNmhyYBHMic53YuwRCKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/5GB1rmh26K_k01XMS-70mtNc65A.roa
Signing time: Sun 01 Jan 2023 22:35:11 +0000
ROA not before: Sun 01 Jan 2023 22:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:81:0b:34:41:59:2a:4b:0a:f6:91:ae:f2:67:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe4d28ae72253668726011cc89ce7762ec1108a8
Validity
Not Before: Jan 1 22:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e46075ae6876e8afe4d355cc4beef49ad35ceb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:dd:46:8b:65:5d:f1:b9:4c:3f:fc:f6:8d:
d5:a8:17:8c:5e:4e:b5:2e:33:57:74:46:68:7f:c1:
4e:87:f0:9a:a0:2d:4f:2b:c4:ee:fe:d3:e6:b3:21:
39:1b:9a:3c:21:f2:5d:92:66:54:be:54:8f:48:5e:
a5:f9:19:fe:75:b1:ab:16:d5:aa:49:91:9c:76:1c:
15:a6:50:b9:d4:83:ba:47:d8:68:3a:e9:b5:71:3a:
8d:40:5a:2d:69:45:6e:52:c3:72:33:0a:e9:1d:71:
a7:a7:07:97:1a:28:97:f9:30:07:57:bb:53:28:50:
77:db:83:c0:fa:59:df:58:c6:c1:c9:9e:75:a4:b5:
b5:d3:8a:80:d3:5b:7f:c0:ab:7f:42:24:c5:cd:62:
0e:67:f4:67:e4:12:51:4f:45:7d:cb:0a:b9:9f:97:
8e:7c:8b:4e:1c:f5:a6:2c:4f:5d:94:d6:e8:a1:3f:
36:9c:a4:12:8d:da:50:04:12:54:dd:68:01:cd:41:
7a:59:ac:e8:ce:6b:66:63:5a:f2:c6:ca:1a:92:76:
5b:54:b9:14:c9:fb:49:da:a8:fe:d5:0c:a5:d3:0b:
70:3e:e2:48:c1:f9:4e:88:e8:14:59:f9:44:be:38:
e7:bc:c9:eb:b4:cc:b1:22:13:ad:4d:93:12:61:55:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:75:AE:68:76:E8:AF:E4:D3:55:CC:4B:EE:F4:9A:D3:5C:EB:90
X509v3 Authority Key Identifier:
keyid:FE:4D:28:AE:72:25:36:68:72:60:11:CC:89:CE:77:62:EC:11:08:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_k0ornIlNmhyYBHMic53YuwRCKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/5GB1rmh26K_k01XMS-70mtNc65A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/_k0ornIlNmhyYBHMic53YuwRCKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a2:78:6d:05:c6:d9:09:a1:3e:f0:56:5e:20:f6:00:86:f1:
24:17:fe:5e:d1:e1:8d:2a:da:21:93:30:88:77:e9:13:c8:a8:
c3:4e:ae:84:83:44:9e:5c:86:e3:51:d0:cb:34:6b:d2:f9:98:
0f:b4:58:bf:71:86:59:30:b9:15:d1:cb:69:80:42:df:09:30:
3f:23:bf:b7:26:5d:9b:15:2c:61:75:bb:2c:89:7f:82:8d:72:
1d:a2:22:59:22:a9:9f:9a:c8:88:a7:40:30:fb:31:82:b0:d2:
25:3e:2c:1a:3b:4a:87:d0:6a:a5:8a:0a:60:63:c4:17:d9:59:
46:5c:c7:05:26:75:64:90:cc:7c:17:06:8c:e8:50:5a:89:a0:
c4:93:08:d8:39:5f:20:3f:89:d9:65:2b:78:05:e0:c0:c1:c3:
8d:14:50:c7:e3:45:1e:fa:15:d3:55:0f:cb:d5:46:0d:d9:1b:
89:8d:22:1a:4e:ee:53:d8:34:6a:36:6a:96:a2:70:dd:dd:ed:
fe:50:9b:19:52:cd:97:83:77:fd:42:71:c4:19:0b:22:9e:a2:
44:26:4c:61:35:52:9a:1d:c9:0b:8f:87:c7:9d:f5:1b:1e:7a:
7a:bd:df:50:c9:5c:05:74:2a:e7:ca:69:75:d8:51:3e:48:5f:
26:25:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:24 2025 by rpki-client