Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/uKaOJeslQUYia2oAE1YldNzr4v0.roa
File: uKaOJeslQUYia2oAE1YldNzr4v0.roa (raw, json)
Hash identifier: /8jd4NVkY3oF8yCzG5Sanp7z6nMbD8xLLyPqWffNAoo=
Subject key identifier: B8:A6:8E:25:EB:25:41:46:22:6B:6A:00:13:56:25:74:DC:EB:E2:FD
Certificate issuer: /CN=52056e93c01726416d6e18cf1f23729481e03f91
Certificate serial: 6234DD
Authority key identifier: 52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/uKaOJeslQUYia2oAE1YldNzr4v0.roa
Signing time: Sat 01 Jan 2022 02:59:31 +0000
ROA not before: Sat 01 Jan 2022 02:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6436061 (0x6234dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056e93c01726416d6e18cf1f23729481e03f91
Validity
Not Before: Jan 1 02:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8a68e25eb254146226b6a0013562574dcebe2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:e7:51:42:6a:51:02:3f:82:93:cb:11:70:
19:fb:2c:19:7e:ce:06:5a:8d:01:e8:62:65:37:ef:
b8:9b:c6:29:75:6f:a4:56:57:fc:79:4b:bd:4b:ac:
e7:1a:c3:60:8e:fa:27:cf:4e:a9:ac:35:53:25:79:
2a:39:9a:21:2e:0e:a7:e8:67:7f:5d:7e:c9:02:84:
50:30:f4:4b:8d:e1:ff:2a:f9:aa:fb:10:6e:07:86:
80:6a:b0:2d:81:3a:9e:02:10:3d:ef:de:a3:99:a7:
52:cb:db:11:ad:c5:67:a5:d5:76:fc:14:f9:4e:54:
b0:d7:87:7e:4c:85:b9:53:ef:86:0f:bd:2b:f8:2c:
74:b0:a0:38:30:81:1b:41:03:7e:94:2c:ec:28:58:
df:7a:4d:a4:41:14:81:30:0d:1c:44:17:41:23:51:
0d:29:86:e7:6c:94:ee:e2:28:66:6c:e0:7e:b0:12:
8f:19:27:24:ee:73:7e:1d:d6:da:83:02:66:b4:78:
ea:fc:f1:f5:f5:7c:33:72:66:ae:f0:77:c0:f5:d4:
45:b5:30:c4:14:10:87:92:fc:92:a5:6a:94:75:0a:
60:f0:bf:ba:17:2e:57:60:4a:bc:c5:8f:df:46:a8:
a0:d3:f3:f2:a0:9d:1a:05:12:69:0c:d7:f3:4e:83:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:8E:25:EB:25:41:46:22:6B:6A:00:13:56:25:74:DC:EB:E2:FD
X509v3 Authority Key Identifier:
keyid:52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/uKaOJeslQUYia2oAE1YldNzr4v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/UgVuk8AXJkFtbhjPHyNylIHgP5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9d:f8:16:c0:37:0d:50:bf:95:b2:22:db:d9:cf:9e:a2:84:
6e:47:a6:7a:f0:77:b7:8e:6f:03:70:30:8b:86:1c:0b:4f:44:
43:cd:2c:47:c1:b8:a9:ea:38:e3:4b:fd:cd:a9:d8:e7:b4:19:
bc:ac:04:80:0a:d3:28:24:5e:9c:02:31:d0:48:1b:cd:9b:c0:
40:14:f3:e6:76:7c:a0:fa:d2:99:73:26:59:9e:d8:07:ec:d0:
43:28:c8:0b:ee:b7:9a:df:c4:8e:d9:3e:c6:16:cb:49:28:41:
e4:fe:5c:16:98:83:a2:3a:e9:f5:0f:64:b8:98:18:b9:78:49:
3a:6b:48:ac:c6:08:42:11:49:1c:d0:7b:43:bf:e5:83:41:34:
e5:b5:7e:c5:19:c9:3b:8e:81:5c:05:60:f6:d8:04:cf:37:8f:
96:b5:a6:6b:a6:d3:1a:5a:f9:85:25:77:13:f5:e6:ca:84:22:
29:8d:1e:1a:73:4d:bb:87:fe:1a:ef:20:ac:6d:58:fa:5d:06:
88:6f:d8:0e:bc:ee:64:50:be:fe:a4:59:d9:e4:9e:97:96:8a:
05:b3:0b:98:0c:e8:23:3a:8e:10:2c:08:d3:f9:1d:85:8d:f3:
bd:44:bd:31:5f:5d:13:b6:88:c3:7c:61:61:0e:47:93:5b:a5:
54:4d:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:28 2025 by rpki-client