Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa
File: 1Kic9PipFo8pwCZDv3CKN34LbfU.roa (raw, json)
Hash identifier: Cu+Shv949Afv6/3jR5dY8Pu9uRFMb9W/7Y3+hzY9L3g=
Subject key identifier: D4:A8:9C:F4:F8:A9:16:8F:29:C0:26:43:BF:70:8A:37:7E:0B:6D:F5
Certificate issuer: /CN=2f32b5d5f1b98e085eea3a016e080c859b417583
Certificate serial: 0181F4557AD0EEDFECDAA39A8F88487536C0
Authority key identifier: 2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa
Signing time: Tue 12 Jul 2022 21:34:11 +0000
ROA not before: Tue 12 Jul 2022 21:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:55:7a:d0:ee:df:ec:da:a3:9a:8f:88:48:75:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f32b5d5f1b98e085eea3a016e080c859b417583
Validity
Not Before: Jul 12 21:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a89cf4f8a9168f29c02643bf708a377e0b6df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:fe:3e:15:eb:80:57:de:ee:e3:82:79:5c:
19:c6:90:04:d9:13:be:79:e1:ca:94:d2:df:d8:26:
dd:99:fe:fa:13:20:ce:5f:ab:ed:3b:71:60:ec:c0:
fc:0d:dc:94:14:22:f1:b6:8d:e3:49:f1:b2:05:8e:
2a:2e:15:0c:65:e8:e6:00:2c:26:06:c2:00:84:15:
6b:b9:96:73:76:36:ad:98:68:59:1a:42:85:12:bf:
1c:ca:f5:c1:15:23:b1:26:87:98:9f:e2:8e:b5:a2:
f9:b4:50:b6:bc:e8:e1:74:e6:97:c3:e7:86:17:8a:
20:17:91:f4:bd:49:51:c4:5a:b3:81:ca:39:52:cf:
cf:a4:2b:be:92:8c:77:87:a7:cc:44:fc:ef:f9:6f:
fb:06:4e:48:4f:0d:87:68:aa:e5:26:18:6e:fb:9e:
fa:1c:a9:3c:ef:e7:88:d0:5e:85:14:e9:81:f4:aa:
32:77:f6:a5:86:b7:cb:a4:79:72:14:9e:42:c3:62:
56:24:a1:52:5a:e8:8a:cf:3e:57:6e:d9:9c:7b:b9:
8c:c4:74:de:6e:1e:a5:60:32:04:27:32:de:0e:84:
39:ac:12:d0:33:ad:41:f6:08:5c:1b:a0:26:45:a8:
a0:d1:eb:36:78:94:79:63:a9:b3:7c:29:d6:99:dc:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A8:9C:F4:F8:A9:16:8F:29:C0:26:43:BF:70:8A:37:7E:0B:6D:F5
X509v3 Authority Key Identifier:
keyid:2F:32:B5:D5:F1:B9:8E:08:5E:EA:3A:01:6E:08:0C:85:9B:41:75:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzK11fG5jghe6joBbggMhZtBdYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/1Kic9PipFo8pwCZDv3CKN34LbfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/759ca5-0d99-428e-85ad-f8872bbdd186/1/LzK11fG5jghe6joBbggMhZtBdYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.150.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8c:be:08:52:1e:a9:89:bc:88:7a:d9:e2:8e:1c:c4:66:31:
80:be:5b:32:c5:8d:5a:5a:d5:88:1c:e6:1d:5e:82:3b:0f:01:
1b:0f:62:03:04:37:80:16:cb:9f:40:f8:94:e4:2c:a6:ee:ca:
85:7c:6a:63:14:f0:1c:df:2a:94:aa:f1:7f:48:e2:67:2b:5a:
57:ca:ec:bd:b0:48:7a:a7:21:3f:bc:e6:9d:79:07:78:17:3e:
86:da:d9:9a:2a:93:b1:dc:0d:bf:0e:36:93:89:2e:c6:bd:04:
a0:74:36:28:cd:75:97:26:73:cc:7c:db:af:f2:2b:98:ea:c1:
8a:b2:4f:8e:22:b5:46:63:5b:a5:c8:8b:71:60:5e:65:e0:0c:
83:7a:7e:d7:62:17:d0:7e:0f:a0:64:43:2d:85:31:82:a4:b6:
e3:7a:8d:d1:b5:8c:30:33:db:7c:48:67:fb:03:d8:23:3d:7a:
04:c9:18:90:66:ea:06:eb:a2:8d:f9:46:30:92:69:6f:15:de:
36:d4:cd:91:47:95:b2:43:0d:60:f1:a5:0a:6c:64:a9:05:97:
46:81:c1:77:51:e6:73:fe:cb:cc:e1:59:d2:71:ea:1b:20:72:
52:c7:89:28:a7:c2:91:c9:de:e6:eb:7e:fe:4d:84:09:b4:5a:
41:18:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:08 2025 by rpki-client