Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/J8_g8128AyIkI6_m8v7o6a3Ndjg.roa
File: J8_g8128AyIkI6_m8v7o6a3Ndjg.roa (raw, json)
Hash identifier: Ry3KmvIgYu0Xh1alYnwD8ZrLCPf4zDWe6ely8VjO7XU=
Subject key identifier: 27:CF:E0:F3:5D:BC:03:22:24:23:AF:E6:F2:FE:E8:E9:AD:CD:76:38
Certificate issuer: /CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Certificate serial: 0185C60F746AAFE8E3B0E85D846739C642E5
Authority key identifier: 34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/J8_g8128AyIkI6_m8v7o6a3Ndjg.roa
Signing time: Wed 18 Jan 2023 18:06:19 +0000
ROA not before: Wed 18 Jan 2023 18:06:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:0f:74:6a:af:e8:e3:b0:e8:5d:84:67:39:c6:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bb384aa9d0aac029f2b2f4015c2e318eb8aca4
Validity
Not Before: Jan 18 18:06:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27cfe0f35dbc03222423afe6f2fee8e9adcd7638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:8f:1a:a7:a8:15:e1:7c:2b:c9:90:f7:74:
af:23:c8:aa:fc:77:ce:e1:87:3a:f5:bb:15:e2:ac:
5c:e8:59:5f:fa:2f:a7:0f:2f:68:09:50:1a:a6:53:
01:df:1d:31:45:d4:9c:52:36:9e:da:0f:07:62:b4:
6d:98:7a:99:40:e3:65:fe:d3:6d:64:ac:07:1b:51:
d9:9b:c1:27:a1:4e:9a:94:a4:f7:6c:2f:69:dd:f8:
b9:67:30:b0:fb:2a:28:1e:06:3c:d1:cc:f6:4a:43:
65:6c:58:3d:1b:81:79:0a:78:9b:98:fe:5a:3d:f9:
a5:e5:c5:7d:82:b4:be:3e:c8:21:13:9c:9d:a6:3c:
ab:8b:d1:ed:59:b1:33:70:75:9d:09:f7:cc:94:a8:
bf:1e:0d:c5:21:e0:a0:c9:8d:b4:86:d9:2c:77:6a:
9b:91:14:b0:1f:64:68:f8:79:6a:00:5b:5d:b4:37:
ea:f6:44:11:b8:26:21:82:17:a4:0c:ea:38:3f:ea:
d1:44:57:97:d5:a5:83:e3:98:0c:fb:2e:de:8d:88:
f7:6f:83:47:3f:9c:30:07:c5:9b:49:62:49:54:c4:
55:f5:75:46:13:9d:97:02:f0:05:f6:62:36:89:ff:
c9:7d:49:ff:86:7a:a2:87:65:7a:39:14:de:f0:a0:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:E0:F3:5D:BC:03:22:24:23:AF:E6:F2:FE:E8:E9:AD:CD:76:38
X509v3 Authority Key Identifier:
keyid:34:BB:38:4A:A9:D0:AA:C0:29:F2:B2:F4:01:5C:2E:31:8E:B8:AC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLs4SqnQqsAp8rL0AVwuMY64rKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/J8_g8128AyIkI6_m8v7o6a3Ndjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ade452-26e3-4cb2-8c20-22a32596fc1b/1/NLs4SqnQqsAp8rL0AVwuMY64rKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:48:f5:a5:22:eb:e4:2c:f2:87:3c:7b:42:83:d5:0c:44:c1:
4e:94:ca:4d:3e:7e:d4:3b:77:fc:90:2a:06:0d:5d:3e:84:3f:
ec:0d:82:d0:4b:17:0f:5b:b3:8b:ce:74:5a:61:e8:68:65:74:
5b:d2:8e:b5:c4:c9:42:f7:79:5d:a6:5c:30:58:8b:0a:92:a7:
30:09:8b:ef:7a:8d:52:13:a3:95:12:b1:b3:6d:27:60:63:f4:
10:8b:2c:af:5f:a0:18:ea:a0:4a:07:82:63:f2:d5:de:44:82:
49:bd:85:9c:0c:73:63:ac:82:f3:b6:0c:c0:8a:cc:3f:ce:24:
42:a4:cb:ab:65:c3:35:4b:a1:60:a6:eb:8f:22:2f:c6:c3:04:
57:e3:f1:50:7d:dd:09:6f:1c:56:1e:d2:20:91:80:15:11:d9:
c4:96:90:4a:81:2f:8f:cf:41:58:e4:d4:dd:2b:51:72:2e:74:
97:11:97:d9:dd:54:c5:64:a9:83:67:8d:ad:52:d8:ab:29:fa:
21:55:e6:49:9f:d3:78:b1:64:54:88:5e:47:a9:d4:77:df:ee:
53:c1:36:64:6e:ba:69:18:a0:2a:5c:0f:17:97:53:e2:dd:19:
75:97:13:d8:c4:4b:53:5d:ed:9b:c3:45:0b:58:99:8d:92:57:
27:9f:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:09 2025 by rpki-client