Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/PuQX81isVYa27u-1b60hZZahBjs.roa
File: PuQX81isVYa27u-1b60hZZahBjs.roa (raw, json)
Hash identifier: UWxtaB84enBMUNzOHsvxqjNlRhxWNGpTs7SUeKsEyZk=
Subject key identifier: 3E:E4:17:F3:58:AC:55:86:B6:EE:EF:B5:6F:AD:21:65:96:A1:06:3B
Certificate issuer: /CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Certificate serial: 01856FCBA9B2D334EFBC9FB7D6F2B96F046D
Authority key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/PuQX81isVYa27u-1b60hZZahBjs.roa
Signing time: Mon 02 Jan 2023 00:04:56 +0000
ROA not before: Mon 02 Jan 2023 00:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a9:b2:d3:34:ef:bc:9f:b7:d6:f2:b9:6f:04:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Validity
Not Before: Jan 2 00:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee417f358ac5586b6eeefb56fad216596a1063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:66:b0:c0:f0:76:82:e9:3d:91:d8:da:9f:
76:36:a1:2a:09:e2:d5:ec:4a:c2:aa:63:ee:cc:82:
10:9e:8c:a7:79:18:5f:6d:54:5e:83:84:38:2b:ec:
f5:07:23:db:33:fe:d0:4a:71:ea:e1:60:a4:d9:d8:
6a:b1:cc:6a:d3:97:b4:da:91:e5:c1:35:f9:77:c0:
6f:35:03:85:22:70:5b:a1:4a:2f:a1:07:63:df:a4:
2a:b9:dd:53:d3:e7:07:2f:45:69:46:5f:37:df:70:
d6:1c:1f:5a:90:b7:8c:03:38:3f:9a:ec:ec:e3:08:
d2:82:61:0c:07:f4:08:c9:18:06:83:d8:e1:32:bd:
16:a2:cd:f7:cd:fc:81:02:8b:d8:ff:9a:88:3b:7f:
76:5a:49:a5:e7:9c:b8:98:80:59:45:3e:1a:bc:1d:
f8:eb:d9:f7:fd:58:9d:fa:a0:7e:7a:f6:50:42:d0:
cc:d4:3a:f8:a5:c4:2e:5f:85:56:ff:d9:f9:3c:6e:
20:7c:e7:41:76:7d:eb:fe:ef:86:e2:3f:cc:a7:57:
83:97:42:53:42:42:dc:48:ba:b8:34:56:51:85:bb:
d0:da:30:7c:85:28:39:ca:63:45:f9:0e:1c:a4:f1:
50:fd:ff:3a:cc:8d:24:d3:2c:54:76:fc:18:90:33:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:17:F3:58:AC:55:86:B6:EE:EF:B5:6F:AD:21:65:96:A1:06:3B
X509v3 Authority Key Identifier:
keyid:B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/PuQX81isVYa27u-1b60hZZahBjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:48:9e:d3:9b:e7:2a:ee:1a:d5:f3:55:e8:d1:6c:85:1b:b7:
65:37:73:02:ee:8e:61:b9:e9:1f:a5:5d:5f:57:2f:7f:d5:2e:
db:27:f5:09:9f:6f:96:dd:82:63:46:7d:9f:76:f7:9f:a3:d7:
c3:2d:25:c0:dc:15:fd:be:17:d3:65:c9:83:06:f0:6a:13:33:
90:7d:ad:0e:83:34:84:91:b2:83:2e:52:87:09:cc:68:8f:70:
c4:6e:26:d6:a5:e3:bb:9c:78:6e:93:80:8d:68:5c:8e:47:ae:
46:c6:c5:2d:ef:fb:00:53:af:46:0d:44:3f:43:cf:83:a0:4f:
f5:24:bc:7e:3a:38:ac:72:77:f0:56:d6:f9:55:61:20:e5:0c:
da:db:c5:13:4d:cd:c8:5c:26:1f:04:e2:f2:fe:a2:b2:dc:4a:
8d:7b:a9:cb:86:91:6e:93:0c:98:9d:ad:93:7a:04:6c:95:bc:
95:65:00:e5:39:65:31:53:55:4c:3b:a9:1c:b3:6c:41:2b:f5:
4c:e4:4d:76:cb:ab:cf:b2:73:f1:d3:00:36:43:84:98:1c:b9:
dd:7b:44:c7:41:dc:d4:fc:d0:f9:03:f7:64:64:8d:34:a5:21:
26:84:86:bd:68:87:92:88:a6:00:56:06:6b:36:3e:1b:be:81:
53:22:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:48 2025 by rpki-client