Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/7cY8XbncC0JwWIXaIZrblIOYOVU.roa
File: 7cY8XbncC0JwWIXaIZrblIOYOVU.roa (raw, json)
Hash identifier: ZHa8qsoYPLobOBas8DDvgIQ2+BW/v1U8CE82LbZXLkg=
Subject key identifier: ED:C6:3C:5D:B9:DC:0B:42:70:58:85:DA:21:9A:DB:94:83:98:39:55
Certificate issuer: /CN=fe4d28ae72253668726011cc89ce7762ec1108a8
Certificate serial: 0188208674A5F8028035EF89535172B7B1A5
Authority key identifier: FE:4D:28:AE:72:25:36:68:72:60:11:CC:89:CE:77:62:EC:11:08:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_k0ornIlNmhyYBHMic53YuwRCKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/7cY8XbncC0JwWIXaIZrblIOYOVU.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:74:a5:f8:02:80:35:ef:89:53:51:72:b7:b1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe4d28ae72253668726011cc89ce7762ec1108a8
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc63c5db9dc0b42705885da219adb9483983955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:73:de:f7:38:1e:a5:2f:98:4f:4e:7b:b1:
57:fc:9a:7a:7f:5a:39:d4:c1:e8:46:9e:51:0a:1d:
04:fb:93:30:b0:09:59:dd:8e:2d:1c:d8:30:af:6e:
30:c5:e4:06:33:9a:0e:8f:d0:84:30:01:ee:49:43:
e3:df:8a:98:58:14:b0:79:50:6e:65:f5:86:03:a1:
a7:19:de:6f:9e:8f:ee:32:79:87:28:c0:6b:29:dd:
86:56:c8:4c:4c:56:7e:99:a5:92:69:96:69:86:d5:
70:35:14:ae:d8:ac:bd:85:fd:ec:74:bf:7b:0a:65:
06:e2:2d:08:68:62:ca:58:8b:12:34:13:8c:53:1e:
aa:a1:88:77:44:80:76:32:73:ae:dc:0c:6b:4a:8c:
5a:2d:cb:08:37:de:92:97:46:77:fb:45:88:be:df:
47:06:50:4c:6f:c8:14:d9:67:8a:87:b8:29:c9:b9:
3b:01:96:b7:f2:47:2e:a2:e1:9e:d6:37:fc:ec:24:
61:9a:29:d8:f9:c3:23:26:02:0d:0d:12:c0:8d:f8:
f2:b5:0e:14:10:12:bc:0b:36:58:0d:3d:46:70:a7:
96:a9:1e:25:17:ac:0d:b0:35:2c:54:fa:a3:fa:3a:
c0:d0:b7:d9:02:c0:06:16:fc:e1:df:e9:fe:d2:4a:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:3C:5D:B9:DC:0B:42:70:58:85:DA:21:9A:DB:94:83:98:39:55
X509v3 Authority Key Identifier:
keyid:FE:4D:28:AE:72:25:36:68:72:60:11:CC:89:CE:77:62:EC:11:08:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_k0ornIlNmhyYBHMic53YuwRCKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/7cY8XbncC0JwWIXaIZrblIOYOVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5b796-1617-422a-b52c-a6bcc715bf0e/1/_k0ornIlNmhyYBHMic53YuwRCKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a1:8f:0a:c6:96:69:58:e7:2e:36:c8:3d:18:de:25:f6:77:
d2:cd:ce:8e:ce:bd:d1:52:3d:c0:04:b5:c1:e7:ea:c5:79:1a:
3b:0a:c2:33:63:22:da:d6:5b:bc:3f:4f:ff:5b:fa:6b:a3:f9:
89:ea:51:a8:74:b6:ee:19:dd:59:26:6e:cf:c6:63:cc:72:e6:
67:f9:cf:91:71:89:de:e9:b3:d5:4b:96:0a:b0:2d:3f:40:01:
66:69:4a:17:96:dc:6e:45:60:0a:13:41:fb:ee:b2:a2:dc:b4:
1e:5a:c2:c1:23:ef:42:91:de:99:e5:73:d6:90:e1:27:76:d7:
a6:66:b3:ab:31:61:40:73:4d:e5:74:f0:db:6c:26:50:5e:7d:
05:b7:0e:54:5a:d0:b5:0a:3e:d9:8e:45:7e:3f:30:93:1c:5d:
cc:f6:7c:96:3e:79:b1:c8:18:94:5e:6c:76:df:af:55:d5:9b:
c7:71:13:56:9f:51:96:f7:88:54:35:32:27:f8:2e:72:7d:dc:
ec:ec:b7:08:63:68:ed:13:10:34:c5:a2:01:47:05:92:eb:b4:
96:28:dc:3d:ef:e2:94:57:d3:31:28:e4:95:2b:f2:fd:ee:91:
5e:a7:53:67:23:a3:f5:78:ae:01:0d:46:91:2a:70:c5:63:93:
26:e3:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:34 2025 by rpki-client