Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/T9zXstNqPo69hjrbbV-8iRawSP0.roa
File: T9zXstNqPo69hjrbbV-8iRawSP0.roa (raw, json)
Hash identifier: OEwWhDbS5mOVf5nVlTfVxnxdeVii6LaMhZrXBrFpG0s=
Subject key identifier: 4F:DC:D7:B2:D3:6A:3E:8E:BD:86:3A:DB:6D:5F:BC:89:16:B0:48:FD
Certificate issuer: /CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Certificate serial: 7929DE
Authority key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/T9zXstNqPo69hjrbbV-8iRawSP0.roa
Signing time: Sat 01 Jan 2022 02:56:11 +0000
ROA not before: Sat 01 Jan 2022 02:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7940574 (0x7929de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Validity
Not Before: Jan 1 02:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fdcd7b2d36a3e8ebd863adb6d5fbc8916b048fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:76:b6:79:ec:74:ad:2b:0f:f7:e0:82:ca:
b1:de:ee:60:da:e0:32:68:2f:71:1f:d9:91:d5:b1:
17:65:40:e7:25:49:e8:10:12:78:47:5a:e0:59:8e:
71:b8:71:c4:20:1f:08:e9:fd:96:81:e6:ad:a0:c4:
3e:e6:7a:26:16:50:36:fc:24:81:f4:99:06:e7:d4:
a1:32:08:23:31:db:b5:bd:6c:a9:15:36:e7:52:ba:
a1:3f:f9:bc:3a:8c:d4:e0:8c:9c:9b:e6:f9:a4:da:
1f:ac:c4:8b:76:ab:fb:04:ef:35:0f:6c:3f:c8:86:
75:80:94:18:4b:49:cd:ab:83:56:e0:88:33:6e:74:
71:b8:c4:de:28:22:5e:b0:12:60:52:a1:fb:5c:00:
ba:7d:34:8f:dc:1b:de:cd:48:07:d5:98:52:a6:36:
ee:99:f3:f8:e2:94:67:82:b1:ca:de:ea:c9:ce:e4:
ab:87:81:33:f6:af:8e:50:41:c6:e1:0f:b5:89:df:
b4:cc:ae:73:c3:b3:d5:1c:78:6d:68:f5:f5:c8:2c:
83:96:ad:cb:1e:cb:06:c1:d5:81:14:75:3b:fc:52:
e2:53:41:57:6a:45:47:0a:fb:fe:b2:ee:55:d3:6a:
6f:95:1b:ea:cb:b9:99:3f:28:1b:85:68:4d:21:b2:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:D7:B2:D3:6A:3E:8E:BD:86:3A:DB:6D:5F:BC:89:16:B0:48:FD
X509v3 Authority Key Identifier:
keyid:B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/T9zXstNqPo69hjrbbV-8iRawSP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b9:af:3c:a9:31:f4:79:51:cc:50:e1:4e:04:0b:a9:d8:68:
4f:bf:73:2d:e9:a0:59:20:50:57:1c:f4:77:b9:d3:ee:14:49:
db:b4:b1:b7:ea:b2:9e:18:e1:78:a1:54:7e:86:09:4b:8f:dc:
5b:35:ce:45:20:0d:23:44:fe:dd:10:3a:0a:7f:3e:2a:01:98:
3f:5f:be:60:e3:a8:e2:32:57:f7:82:7f:cf:8f:33:0c:3a:65:
dd:a3:15:5d:46:62:22:7e:c6:ab:cb:18:4f:35:5b:4d:b8:1e:
2e:03:ec:cd:1b:dd:b2:45:d0:6a:51:3a:d3:6a:72:77:cd:5c:
ec:26:32:af:21:f5:5f:e0:f8:22:71:e3:74:1f:7f:74:de:92:
ec:50:f2:e4:bf:04:ba:a3:9f:10:cc:65:40:29:cd:6f:1a:e5:
b6:2f:cb:9e:fe:ce:53:48:4e:d0:26:e5:a7:64:11:36:89:aa:
47:5f:71:9b:cb:04:c1:63:30:f6:be:44:c2:c2:c0:43:10:f1:
21:30:53:c9:f9:d5:dc:9f:30:e9:c6:c2:7d:c9:ff:bc:ea:3b:
32:40:36:c9:09:1a:95:75:97:6e:5a:43:49:7c:20:c8:9f:f8:
cd:e3:3c:7e:f2:dd:cb:07:db:aa:2e:9e:fa:56:81:72:4e:9c:
02:6d:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:38 2025 by rpki-client