Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/xfyb6G9lQqxlynYX3yqdfubjEV8.roa
File: xfyb6G9lQqxlynYX3yqdfubjEV8.roa (raw, json)
Hash identifier: gT2w+S+R/SnxF4ETAswIuzmH3ZV+dt7C0T2zTNXu280=
Subject key identifier: C5:FC:9B:E8:6F:65:42:AC:65:CA:76:17:DF:2A:9D:7E:E6:E3:11:5F
Certificate issuer: /CN=52056e93c01726416d6e18cf1f23729481e03f91
Certificate serial: 0187068D44217AC40AC6D1D8590B413089A7
Authority key identifier: 52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/xfyb6G9lQqxlynYX3yqdfubjEV8.roa
Signing time: Tue 21 Mar 2023 23:42:13 +0000
ROA not before: Tue 21 Mar 2023 23:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 146.19.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:8d:44:21:7a:c4:0a:c6:d1:d8:59:0b:41:30:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056e93c01726416d6e18cf1f23729481e03f91
Validity
Not Before: Mar 21 23:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5fc9be86f6542ac65ca7617df2a9d7ee6e3115f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:63:4a:2e:bf:8b:47:8e:1e:bc:72:8b:7a:
5d:2e:38:11:c4:0a:cc:b3:1c:8c:53:ed:e5:45:86:
6f:de:31:ad:14:f4:16:a7:8f:d7:a1:6a:88:4a:10:
28:89:15:7c:82:de:0b:b3:27:1c:3a:0c:f4:6d:df:
20:9b:f9:75:34:9c:f4:48:da:03:81:a7:7f:86:bb:
30:a1:96:34:2d:82:7b:1d:2a:f4:b3:10:ad:38:a8:
58:10:ac:bc:27:b8:1e:db:3f:b4:88:9b:8d:80:f3:
a6:73:78:b5:e5:f4:e7:7c:99:70:64:3e:68:57:2f:
34:cd:ef:7d:7d:83:75:b6:69:a3:1a:86:c8:0a:5e:
1e:81:be:a0:9b:1f:cc:3b:ed:94:40:bd:48:89:0b:
c9:e1:a7:ea:45:95:2a:ab:2c:da:34:c8:d5:ed:1f:
f0:62:e3:5a:71:f7:dd:99:a3:8f:f6:8e:18:34:c9:
f7:32:1c:fe:92:80:5f:27:5a:d3:5a:d0:b6:9b:e8:
c7:08:bd:a5:b6:57:cf:1e:42:b8:0e:a1:ad:59:10:
0d:ea:ef:e2:17:04:90:5e:4c:15:74:ad:c5:79:3f:
c9:45:85:2c:58:4c:1a:a1:24:5a:1a:6b:f7:7f:c8:
6b:2b:35:d6:97:ea:1f:12:24:f7:9c:a0:7c:e5:cf:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:9B:E8:6F:65:42:AC:65:CA:76:17:DF:2A:9D:7E:E6:E3:11:5F
X509v3 Authority Key Identifier:
keyid:52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/xfyb6G9lQqxlynYX3yqdfubjEV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/UgVuk8AXJkFtbhjPHyNylIHgP5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
13:25:e3:42:7b:50:73:a7:4f:94:89:69:1b:4b:14:1d:fe:cc:
48:68:0f:e2:db:8c:1c:32:8c:b4:f5:de:51:6b:04:33:d2:be:
48:0e:31:fc:81:f9:8d:a2:56:43:9c:f8:90:41:e3:df:86:4e:
5c:34:9b:37:eb:ae:2d:c4:f7:d5:fd:29:5b:33:ed:dc:af:ce:
8f:38:59:cc:3b:8f:24:e3:7a:11:27:a1:da:50:f4:88:89:1b:
6f:a3:63:8e:fc:c8:51:c4:32:bb:8e:a3:95:85:d1:7a:61:7e:
ac:cb:7e:be:04:a4:e2:16:1e:40:7f:fb:cf:b5:37:2a:4b:cd:
8f:07:92:1b:7d:fe:6a:e7:45:61:6d:88:ee:d6:f8:5f:4d:96:
ee:b3:0c:b4:2a:d2:bd:24:11:9f:6f:b0:15:fa:1d:75:a7:a0:
e1:75:ab:53:c2:4b:fc:a2:b2:6b:15:0f:32:2f:43:3f:b5:85:
05:5d:aa:67:77:1e:2e:c9:3f:81:d4:fd:5f:f1:49:37:26:ea:
8f:8c:04:61:a0:08:3d:77:42:74:20:35:62:71:1c:c6:6a:4b:
a3:64:da:79:80:ea:7c:59:d7:a7:7b:b9:56:16:d4:61:50:c5:
84:97:d1:c6:ed:c3:40:bf:b1:45:fe:95:ed:3c:2c:a5:39:3a:
b8:7a:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:13 2025 by rpki-client