Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa
File: yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa (raw, json)
Hash identifier: /EaxrvQwMhaZ6SbNKMEhV+oc3eqOAAugU5sbBPV4svg=
Subject key identifier: CA:34:B5:59:B8:74:9E:68:A5:0C:87:91:2A:93:9C:34:61:67:34:08
Certificate issuer: /CN=d57d321483d9493d9a265b276da3e65bcbfe6400
Certificate serial: 018572CCB166498139D06D3B8BAA3F88FDDE
Authority key identifier: D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b1:66:49:81:39:d0:6d:3b:8b:aa:3f:88:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57d321483d9493d9a265b276da3e65bcbfe6400
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca34b559b8749e68a50c87912a939c3461673408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:92:3b:3b:81:d5:9c:4c:b3:9a:d2:64:2b:
42:cc:86:e3:7d:7e:08:95:81:48:c3:2e:1c:fb:47:
e9:62:88:82:8a:42:4b:95:4b:90:f1:44:0a:fb:17:
a8:07:b6:dd:8b:5d:77:fe:66:74:3a:0a:ff:21:e7:
1b:64:3b:ab:b0:d2:8d:2e:2f:5b:27:fd:bc:60:d0:
c4:af:3f:9e:e6:7c:bb:c4:6b:d6:1b:b5:53:6a:7e:
9d:9c:e6:f9:47:a5:b1:46:40:ea:75:c6:fc:35:61:
11:0f:3c:0b:86:ef:2b:c5:c6:d9:33:74:73:c6:6c:
7e:ba:20:a7:5c:32:81:ea:e0:ea:b7:72:48:d7:23:
73:19:8b:16:55:8d:47:17:dd:2c:40:eb:6f:b2:f3:
b3:a8:56:15:c0:88:2a:00:62:e6:2b:35:52:3f:e5:
b5:ea:65:40:41:aa:94:97:30:3a:db:6d:0b:cf:4f:
1a:82:76:dd:e3:b1:17:fc:4e:0e:a5:f9:8c:0a:8c:
03:43:92:8f:8a:14:fc:b9:1f:0a:24:c2:85:2d:72:
0c:2d:91:fb:44:28:5e:84:dc:2b:35:2c:9d:36:57:
e2:57:28:ec:82:e8:d6:df:c7:a4:ab:2a:ac:bd:8b:
dd:51:70:4b:db:ea:e6:4a:10:ac:fd:7a:85:9a:ed:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:B5:59:B8:74:9E:68:A5:0C:87:91:2A:93:9C:34:61:67:34:08
X509v3 Authority Key Identifier:
keyid:D5:7D:32:14:83:D9:49:3D:9A:26:5B:27:6D:A3:E6:5B:CB:FE:64:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1X0yFIPZST2aJlsnbaPmW8v-ZAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/yjS1Wbh0nmilDIeRKpOcNGFnNAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/825e24-f784-4ba9-b7b9-0657495df373/1/1X0yFIPZST2aJlsnbaPmW8v-ZAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:75:36:75:9a:14:c5:f4:b8:51:ba:21:96:af:1a:f4:48:48:
21:15:ee:8c:7f:46:88:c0:17:00:65:cb:25:2d:56:17:5f:31:
88:db:20:e4:e2:e5:c8:cd:ed:f8:07:78:49:c0:57:de:bf:52:
8b:17:54:8d:cc:26:2d:84:85:1b:45:28:24:de:ec:78:5e:22:
50:6c:e9:6a:a6:e2:43:08:fc:f5:28:a4:d7:e8:f1:69:f6:fe:
93:a6:fb:86:c9:e4:63:54:71:ed:b7:c9:c4:21:56:33:2e:b3:
05:2a:28:6d:93:24:70:c6:09:6f:90:b9:50:f9:7c:73:18:06:
7d:c5:e1:91:62:10:d9:93:79:94:df:8b:2c:4a:f5:cf:fd:ed:
f0:d9:9d:d9:c9:29:f2:8e:2d:09:1d:7d:28:99:79:b4:93:f9:
af:86:11:23:32:d9:65:69:63:27:7a:cc:d3:08:c3:99:66:b6:
f9:d1:88:55:49:ee:67:00:d0:09:97:04:5f:33:52:e5:8c:12:
b2:c5:88:97:39:17:a0:b2:d9:c0:b7:29:4e:81:b0:42:f2:c8:
9e:36:20:56:54:92:83:a9:a0:bd:2c:04:cf:81:e5:3f:3a:69:
7d:18:14:88:e3:7f:89:f6:bc:17:f8:db:1b:e8:5d:be:bd:5d:
c6:73:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:54 2025 by rpki-client