Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/KItWCXX6sqwGanx3hWNbmzL26Ts.roa
File: KItWCXX6sqwGanx3hWNbmzL26Ts.roa (raw, json)
Hash identifier: Ru9j1X04Lc3LcU986hrL/fnUD/Itv/HxfAwnhbbqgR8=
Subject key identifier: 28:8B:56:09:75:FA:B2:AC:06:6A:7C:77:85:63:5B:9B:32:F6:E9:3B
Certificate issuer: /CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
Certificate serial: 01856B811050C30E3421997CE53ED80C0612
Authority key identifier: 55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/KItWCXX6sqwGanx3hWNbmzL26Ts.roa
Signing time: Sun 01 Jan 2023 04:04:58 +0000
ROA not before: Sun 01 Jan 2023 04:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:10:50:c3:0e:34:21:99:7c:e5:3e:d8:0c:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
Validity
Not Before: Jan 1 04:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=288b560975fab2ac066a7c7785635b9b32f6e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:04:6c:96:cd:84:ac:3d:1d:c3:6e:e4:de:
b5:a2:a3:a2:f4:50:17:9e:1d:42:fd:61:f8:52:19:
76:21:c2:81:68:5f:b7:42:87:f5:b7:2d:ee:c7:2d:
42:74:8f:07:b6:9b:ba:d7:7f:ec:c9:c6:70:78:dc:
82:ad:54:85:59:57:f1:d5:37:5a:eb:6b:e5:15:77:
ea:91:97:7c:56:2f:9e:b0:cb:8a:22:c8:fc:e0:fd:
dd:ca:27:3a:77:73:58:31:a5:58:bb:8c:7e:8e:f5:
0c:b7:a0:8e:a0:43:9f:1e:29:51:78:65:59:41:cf:
90:26:11:78:7a:19:d5:18:35:39:52:35:e0:3e:03:
cf:3b:f1:5f:19:88:4e:24:1b:f2:b2:48:ab:de:80:
7b:1c:50:45:fe:7d:31:67:30:02:24:14:d1:3e:5b:
a0:20:d2:2a:3f:e6:c9:34:f7:9a:05:33:43:2f:45:
fe:d2:70:03:dc:9a:be:26:76:41:28:a1:63:a6:a5:
ce:25:4b:e2:23:aa:68:5f:8a:7a:85:bf:57:56:40:
ac:10:53:0e:fa:15:dc:0d:ac:38:21:19:c1:cc:3e:
01:5e:47:dc:33:a3:df:58:29:77:f0:68:f2:4b:8f:
c7:94:04:e0:f6:91:de:13:d1:a6:71:af:a6:ce:78:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:56:09:75:FA:B2:AC:06:6A:7C:77:85:63:5B:9B:32:F6:E9:3B
X509v3 Authority Key Identifier:
keyid:55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/KItWCXX6sqwGanx3hWNbmzL26Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2f:e8:fb:65:f8:39:53:ed:3c:a8:c1:92:ed:e9:c2:20:8c:
ef:1c:79:49:f7:11:1a:75:a5:b1:c1:f9:80:7d:5e:6c:34:5b:
eb:0d:78:e6:46:cd:3f:e0:ca:29:d9:98:6a:59:13:85:0d:da:
1f:a3:f4:6a:ba:9a:4d:e2:8c:5d:43:4a:02:3f:40:40:ac:f0:
c7:6a:17:0c:7d:b3:bf:37:73:67:d9:aa:c5:cd:80:97:e5:1e:
ed:92:3f:b2:aa:4c:52:f6:01:d3:71:d8:c2:9c:e8:1e:75:3b:
2c:c0:06:05:54:81:6f:17:32:01:36:0d:6b:e4:bc:73:d8:a2:
6b:34:b7:81:db:e8:ab:c4:5e:b6:26:e7:ff:64:d9:2a:0b:41:
36:d7:d0:57:d8:82:93:86:14:ca:60:06:3c:9a:ed:f1:23:b9:
ed:24:93:40:73:eb:d7:44:33:f4:76:c0:70:9d:96:31:09:fc:
02:15:0a:e3:75:42:40:cd:02:a7:9b:ca:a9:37:f5:6a:d8:f2:
32:ab:8c:b7:e0:ac:fa:c7:e3:43:25:bb:ec:d8:29:f7:b6:43:
a7:5d:ad:58:ff:76:e1:fb:51:40:f2:3e:a5:55:6e:f3:dc:cc:
88:ba:2d:84:77:f6:df:33:90:3e:70:be:27:1d:f0:f5:be:8c:
28:59:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:18 2025 by rpki-client