Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/b_4jAEZDrSY6hFioGYn18LN0H1A.roa
File: b_4jAEZDrSY6hFioGYn18LN0H1A.roa (raw, json)
Hash identifier: vSqUF8N4jheZulZ/+dTdQ14FQGSCIfFfe1XTHWuLTsY=
Subject key identifier: 6F:FE:23:00:46:43:AD:26:3A:84:58:A8:19:89:F5:F0:B3:74:1F:50
Certificate issuer: /CN=4737263af544e1bba5dec5e988896b69884e08b4
Certificate serial: 0185732816345723454613AD8FC7ADE2F865
Authority key identifier: 47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/b_4jAEZDrSY6hFioGYn18LN0H1A.roa
Signing time: Mon 02 Jan 2023 15:44:44 +0000
ROA not before: Mon 02 Jan 2023 15:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.230.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:16:34:57:23:45:46:13:ad:8f:c7:ad:e2:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4737263af544e1bba5dec5e988896b69884e08b4
Validity
Not Before: Jan 2 15:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ffe23004643ad263a8458a81989f5f0b3741f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:ce:7a:8c:8a:e9:5a:5d:8e:20:be:7a:40:
23:0d:53:7f:2b:c8:d1:97:a3:b9:d3:a9:d1:20:46:
b0:0e:31:51:06:61:bf:25:26:5b:60:23:d9:2a:9c:
b9:b3:a7:2c:3e:dc:d3:34:6d:bf:32:0e:a0:b7:76:
76:49:a6:3a:3c:c2:da:3b:68:27:cc:82:8b:10:ff:
11:ac:fc:e6:06:5a:08:ae:e4:24:91:07:14:fe:88:
01:2f:0e:7a:ec:47:40:4a:13:f5:a7:7e:82:5e:29:
83:eb:ed:33:7c:cc:e2:d2:9d:2d:37:46:32:6b:c1:
c4:a9:43:1a:f6:f7:97:cf:6f:80:8a:05:e6:ca:d3:
fd:6a:90:f9:c0:dd:21:ff:7e:2b:dc:70:23:64:da:
d2:ac:fb:08:58:0c:66:f8:b7:fb:64:76:79:3c:e0:
4a:f1:f4:73:08:ee:87:5d:4d:7c:f5:fb:bb:8d:8b:
55:5d:39:dd:ba:99:de:17:da:f7:6c:79:6d:e4:5f:
d4:d7:a7:52:9e:41:a2:a0:a4:42:90:bd:32:28:ac:
0f:ce:5b:bc:8a:df:05:10:5c:91:94:43:75:c6:0e:
29:b5:71:6d:af:18:fd:ce:36:cc:a9:37:5d:47:ae:
80:fd:69:f0:96:68:06:f4:af:ad:b8:9b:46:41:10:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:23:00:46:43:AD:26:3A:84:58:A8:19:89:F5:F0:B3:74:1F:50
X509v3 Authority Key Identifier:
keyid:47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/b_4jAEZDrSY6hFioGYn18LN0H1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/RzcmOvVE4bul3sXpiIlraYhOCLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:56:71:f7:8e:81:e4:6d:d6:a0:25:6c:d0:3a:2b:dc:0c:ff:
f9:63:b5:35:5a:98:c9:03:35:c8:05:79:94:63:66:94:53:dc:
f9:df:1d:ce:1d:3f:1f:8a:9b:5c:c9:66:80:15:29:90:d5:0b:
8b:f8:8d:71:32:91:a0:e7:2a:23:33:93:62:58:76:90:f2:ea:
13:72:0e:1b:9d:60:7b:98:53:b8:0e:bf:03:ee:f0:72:84:fe:
7a:8a:20:18:2f:50:40:27:8c:03:22:c1:9d:97:7c:59:52:fd:
7b:23:49:41:75:d1:91:77:25:66:b7:98:97:7d:7f:0d:5c:01:
72:c8:da:f8:0a:ef:3f:c5:61:70:7b:6e:d4:4c:ce:36:95:db:
1e:43:e4:39:45:d8:76:a9:41:e7:62:8a:6e:30:9f:63:a5:0f:
61:30:5d:e3:3c:60:39:59:87:3a:8e:b3:36:15:d0:2e:45:14:
93:e7:e1:63:3b:e6:27:a7:f6:71:0e:8f:2d:5e:1e:01:17:da:
ca:bb:30:67:1a:64:ae:dc:8e:a9:76:44:73:3a:82:db:c2:c5:
1e:27:77:8d:15:cd:37:36:0a:c0:7d:ed:d8:4d:b9:e6:54:51:
02:b1:08:56:6b:d3:81:0b:e4:3f:58:88:fd:58:9f:40:15:f1:
ff:eb:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:36 2025 by rpki-client