Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/LbI5MlYE-MxEsNqdlhlwLWhNQxM.roa
File: LbI5MlYE-MxEsNqdlhlwLWhNQxM.roa (raw, json)
Hash identifier: /sgZPQBC2hXvau2tiTDy/SGHI8QEtiXC61n/F6JcrRs=
Subject key identifier: 2D:B2:39:32:56:04:F8:CC:44:B0:DA:9D:96:19:70:2D:68:4D:43:13
Certificate issuer: /CN=4099e4ac63c4c12a21624819cbf78638b86d42f3
Certificate serial: 01856DCAED6A55D141AC641A6177119F23DC
Authority key identifier: 40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJnkrGPEwSohYkgZy_eGOLhtQvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/LbI5MlYE-MxEsNqdlhlwLWhNQxM.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8849
IP address blocks: 146.19.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ed:6a:55:d1:41:ac:64:1a:61:77:11:9f:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4099e4ac63c4c12a21624819cbf78638b86d42f3
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db239325604f8cc44b0da9d9619702d684d4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:92:f6:e2:c4:5f:53:cd:5d:81:3a:b7:12:
1c:7a:55:28:34:00:13:89:a0:3f:ae:23:38:3b:34:
a5:c6:53:b9:2d:41:86:ab:47:73:72:76:7d:06:15:
8e:55:7c:f6:da:8c:54:49:a8:e8:10:fa:07:12:f1:
77:89:3a:ca:54:e7:ab:24:3c:30:76:58:61:c3:26:
27:9c:73:db:72:68:af:8f:53:be:d6:e0:a7:f5:96:
7c:d3:51:48:6b:fd:ca:36:59:34:94:d9:8e:e8:4e:
d5:9f:c1:b4:02:78:2d:4b:ae:e8:be:0d:de:cd:6a:
df:85:79:46:4f:78:ac:54:d4:2e:f5:bb:c3:ad:ed:
78:28:96:9f:a9:23:38:21:0e:bc:9c:46:b8:4c:49:
8a:85:1e:56:1a:e4:e8:c2:35:16:6a:40:61:1e:c4:
b7:83:4c:f8:56:df:56:78:b2:98:a2:dd:d4:e9:f2:
3b:ca:b5:c1:ea:25:c0:50:29:71:1c:1c:95:3c:a3:
c5:53:04:fd:7a:a8:81:df:ed:c9:d0:65:9b:3d:cb:
e3:5d:10:a3:b0:53:1d:19:2e:96:0e:08:5d:37:c9:
6a:2e:07:0d:e0:45:f7:88:41:8c:e9:e0:e7:7f:3e:
c7:fa:6e:ef:98:84:f7:0d:48:07:67:4e:21:fb:2d:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:39:32:56:04:F8:CC:44:B0:DA:9D:96:19:70:2D:68:4D:43:13
X509v3 Authority Key Identifier:
keyid:40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJnkrGPEwSohYkgZy_eGOLhtQvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/LbI5MlYE-MxEsNqdlhlwLWhNQxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.196.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2f:ad:59:77:a8:d4:8b:83:8f:86:f8:4c:92:63:8b:e8:f8:
ba:ae:a1:63:b2:29:3a:a5:9c:36:ed:d8:1a:3f:f6:3c:24:b7:
82:af:a0:ab:4b:f3:c8:7d:29:c3:d4:4c:97:3d:57:b5:f9:98:
6d:73:0c:51:43:2b:9a:cd:d5:82:b7:f1:bc:d2:9b:5c:11:06:
13:6d:e2:67:4c:5a:5a:97:ec:2d:7e:1d:e7:82:a4:d4:82:fe:
39:33:56:0e:19:a8:b9:ea:26:02:bb:54:86:e3:9c:d8:01:81:
f7:35:2c:57:09:b7:0d:2b:71:ce:6b:02:d5:92:a6:6f:80:ef:
25:28:5f:25:ca:41:79:ff:2e:a9:f2:cf:44:c6:b6:e7:b2:38:
e0:dd:97:ef:b6:d9:64:17:ec:99:0a:5e:e2:fe:57:ff:c2:03:
6c:f7:24:87:86:23:4b:00:9d:9c:b3:f9:7f:3d:34:4b:b0:5b:
dd:75:c8:11:0c:36:7c:06:45:a2:e3:00:f9:20:a3:9d:a0:fb:
f4:83:0f:6c:8f:c0:ec:12:2c:42:4f:d1:27:1f:3f:75:94:59:
75:98:71:73:61:7c:41:f1:70:5a:6c:3c:fc:8a:a9:2e:6d:5c:
d2:d7:9b:77:04:0c:4e:fe:b8:cf:ed:bf:0b:8e:fa:53:61:e8:
fa:8d:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:39 2025 by rpki-client