Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/s_YOfGcTbP-uvLTDNdtQYdYfpHw.roa
File: s_YOfGcTbP-uvLTDNdtQYdYfpHw.roa (raw, json)
Hash identifier: TIH6f1Kqv0sFyaE7hwccbS8UDnhkKXj3k6uNj/r2fLQ=
Subject key identifier: B3:F6:0E:7C:67:13:6C:FF:AE:BC:B4:C3:35:DB:50:61:D6:1F:A4:7C
Certificate issuer: /CN=52056e93c01726416d6e18cf1f23729481e03f91
Certificate serial: 018220E43606DC2CCB0679FD4D55D5570902
Authority key identifier: 52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/s_YOfGcTbP-uvLTDNdtQYdYfpHw.roa
Signing time: Thu 21 Jul 2022 13:13:23 +0000
ROA not before: Thu 21 Jul 2022 13:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 146.19.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:e4:36:06:dc:2c:cb:06:79:fd:4d:55:d5:57:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056e93c01726416d6e18cf1f23729481e03f91
Validity
Not Before: Jul 21 13:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3f60e7c67136cffaebcb4c335db5061d61fa47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:93:ec:28:3b:10:7c:ba:c2:23:5c:21:d6:
9d:c7:85:1b:d6:54:ab:fc:0f:27:8d:67:08:55:b3:
c1:78:85:39:24:b6:32:fa:13:61:c2:22:33:3d:20:
00:73:5c:a8:80:c3:7f:b4:94:08:44:47:76:3e:31:
26:e0:2b:d0:c9:40:41:1d:ac:0f:04:c5:1b:09:9a:
1a:64:0d:bf:b6:ff:51:11:14:3d:ae:2f:b1:9e:29:
b3:4d:a2:88:78:57:0c:58:02:cb:15:39:8a:51:ad:
c9:13:df:a5:f3:c2:0b:8f:cc:32:d2:70:d5:8d:fd:
22:e6:a7:14:3e:fe:4c:44:2e:e8:0e:1b:f2:16:fb:
ef:36:36:38:d4:bb:8e:fb:38:52:f3:73:35:85:29:
82:24:f9:1f:e5:29:62:92:4a:69:ab:8c:d1:c9:4c:
f5:70:37:e2:4c:72:12:c2:fe:cb:7d:07:7b:1a:8e:
1b:6a:21:09:c1:b8:34:a1:f9:e1:fc:d6:a0:94:36:
4e:8b:1d:99:f1:3a:88:72:a1:83:e5:b1:3f:48:71:
af:f7:d6:90:f9:01:4f:15:00:80:37:de:02:c2:1f:
a7:a7:c5:87:4b:d8:ba:b5:38:95:33:7f:a8:b8:e0:
be:4c:8e:85:18:02:49:4c:2c:e2:9f:40:3b:61:ae:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:0E:7C:67:13:6C:FF:AE:BC:B4:C3:35:DB:50:61:D6:1F:A4:7C
X509v3 Authority Key Identifier:
keyid:52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/s_YOfGcTbP-uvLTDNdtQYdYfpHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/UgVuk8AXJkFtbhjPHyNylIHgP5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:09:3e:f9:f8:8a:b0:e4:86:ab:eb:b6:4a:ac:a9:d2:3e:fb:
bb:40:51:1a:51:99:12:2c:ba:61:07:8a:e4:85:e5:62:51:fd:
2f:f6:07:4a:b0:df:70:1e:f6:33:42:71:37:e8:89:64:2d:69:
3b:75:3b:5b:6c:ab:7e:7c:11:39:e8:c1:1d:a8:34:0f:3a:b0:
94:67:8e:b1:9e:66:08:4b:91:bb:4f:c0:95:a3:3f:c3:0e:7f:
b6:bc:af:4e:92:d1:05:ee:20:2a:d1:8b:1b:36:2a:93:e2:b1:
91:ef:78:a3:58:3a:8c:e4:2b:85:a9:08:ea:b8:9d:5d:31:f9:
2b:2e:28:ee:57:d3:d8:85:3a:74:56:5e:75:e5:34:d8:8f:da:
80:33:cf:5a:fa:2f:a0:a7:da:3e:c0:7f:49:ef:33:a9:a1:28:
4e:69:15:4a:b9:1f:4f:84:02:41:5d:56:0f:c0:e5:f8:3c:b0:
fe:62:da:00:06:3b:e4:38:2e:c0:5c:8b:67:84:a5:af:cc:96:
ff:4a:48:91:2a:76:5a:d8:24:c8:af:e7:22:83:7b:7d:2a:a8:
1c:60:67:8d:1f:f1:9d:12:a7:02:00:55:86:e3:f8:73:0e:25:
d3:b3:97:42:43:20:cd:df:87:28:59:c6:77:75:98:d8:8f:e9:
f7:e2:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:04 2025 by rpki-client