Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Y5BpdjBENtBN7enDnTfQcWFfNMk.roa
File: Y5BpdjBENtBN7enDnTfQcWFfNMk.roa (raw, json)
Hash identifier: EAPzSpfLg1vE3YQTdYnerC0IHMNwC1ljc9aPoO98k4w=
Subject key identifier: 63:90:69:76:30:44:36:D0:4D:ED:E9:C3:9D:37:D0:71:61:5F:34:C9
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 0194244598E47D83B779482DEBA971326EE2
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Y5BpdjBENtBN7enDnTfQcWFfNMk.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400039
IP address blocks: 146.19.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:e4:7d:83:b7:79:48:2d:eb:a9:71:32:6e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63906976304436d04dede9c39d37d071615f34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:09:82:7f:07:d9:28:70:75:91:70:cf:02:
75:f8:fe:5a:02:19:6e:93:f2:69:38:4d:dc:57:c4:
44:23:01:5d:68:a3:fd:6f:17:87:7e:1c:b2:c2:dc:
5b:f0:37:29:49:24:af:7f:1f:40:89:ae:7b:e3:5b:
c9:f8:ae:ef:a3:b1:03:9f:4d:32:30:5f:4e:e8:57:
d5:39:44:3e:da:72:34:38:84:72:e4:6c:a9:f2:c6:
5a:26:a5:8a:d3:04:a7:8e:36:d6:05:61:d0:47:1f:
71:72:ac:f0:a8:c9:4c:7d:e4:23:1f:02:11:ec:5b:
de:64:5c:e4:79:21:ec:a1:de:16:29:6f:1a:68:8d:
53:59:e7:2f:ee:50:9c:a5:da:b7:0c:2b:13:6f:5d:
27:7c:2c:ef:a4:d7:df:36:fe:5d:c3:65:f1:2a:6b:
c9:e9:6c:c2:6c:95:b3:58:aa:e8:62:59:a9:1a:40:
63:3c:45:db:90:47:22:28:60:9b:a5:ab:13:73:7a:
b2:bc:22:53:de:5b:88:6c:1b:b3:67:d8:81:90:0b:
66:b0:fc:24:1b:ff:91:e8:09:50:15:62:2f:ed:4c:
b0:c4:82:e1:d0:16:59:8a:ed:10:6b:74:8b:e1:24:
26:18:37:27:8f:88:32:1c:39:ea:2b:0b:c1:84:47:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:69:76:30:44:36:D0:4D:ED:E9:C3:9D:37:D0:71:61:5F:34:C9
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Y5BpdjBENtBN7enDnTfQcWFfNMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7e:7e:e3:15:7b:5d:4a:b7:5b:1c:94:c2:87:b6:d3:be:1f:
ea:60:c0:7c:6a:36:60:34:f7:37:4c:4b:2d:fd:ae:b0:7e:7e:
36:90:8b:4d:f8:f8:f2:de:b0:d3:9f:cd:2e:34:3c:84:0c:71:
50:5b:d4:c0:93:49:d7:a1:7d:7e:28:2b:38:ee:87:21:e5:b5:
4a:1f:84:da:c7:70:40:93:50:53:61:87:64:b3:7e:ca:36:9a:
f9:49:60:0a:8f:83:06:cc:47:af:b7:73:dc:e3:a7:88:a0:9e:
01:e4:23:b7:37:4d:0c:ab:fd:19:69:49:ad:fa:f2:8a:a8:75:
fe:41:62:1b:76:65:9e:db:a9:9c:29:8f:11:e5:74:de:fc:e3:
50:5c:6c:58:d4:0c:df:31:9e:5f:7c:84:d4:5d:fe:11:0e:03:
07:6f:f3:c2:1b:03:85:20:3b:ab:06:5a:8c:51:3b:1d:a9:1a:
14:df:32:46:6a:74:29:e9:88:03:37:2e:f2:0b:e1:df:53:1f:
46:63:30:59:88:87:d0:6f:31:0e:5b:14:3a:c5:ae:bd:53:f7:
e3:dd:ff:da:a4:a9:b7:eb:f4:c0:95:1d:ff:bb:ae:57:8f:04:
85:29:90:a4:ac:ba:61:e6:58:3b:87:67:1a:13:42:e5:ba:5d:
65:cf:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:04:40 2025 by rpki-client