Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/zY7EseiORSbr8T7Y8SjwrOgyVBA.roa
File: zY7EseiORSbr8T7Y8SjwrOgyVBA.roa (raw, json)
Hash identifier: lc5mDeETqvWkRUI7o7/3U4kbYXcqfkgMsQ/vXW0umRQ=
Subject key identifier: CD:8E:C4:B1:E8:8E:45:26:EB:F1:3E:D8:F1:28:F0:AC:E8:32:54:10
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 0183D2B6778F5674FA2BD0652773BDA96FE6
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/zY7EseiORSbr8T7Y8SjwrOgyVBA.roa
Signing time: Thu 13 Oct 2022 18:58:36 +0000
ROA not before: Thu 13 Oct 2022 18:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:b6:77:8f:56:74:fa:2b:d0:65:27:73:bd:a9:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Oct 13 18:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd8ec4b1e88e4526ebf13ed8f128f0ace8325410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:46:31:a8:22:ff:93:96:6f:82:ba:43:3c:
21:9f:db:a0:7e:f0:bf:3b:4e:ba:f7:39:0a:19:ca:
44:40:1b:f4:48:64:da:50:c2:a4:aa:8b:fb:b1:45:
d8:13:6f:2d:ea:6d:0c:c4:d9:a5:d8:88:08:2b:6d:
aa:54:98:7e:c0:a3:51:36:58:a1:c2:88:38:03:c8:
61:7b:4a:77:7c:a1:99:01:bc:2b:cf:a3:66:86:5f:
38:52:f3:2b:2d:cd:69:71:37:aa:89:4b:35:3a:3c:
51:49:35:c8:b5:36:18:a4:b1:7f:08:65:d8:2d:a6:
fb:1f:59:2d:73:4e:0c:95:e4:c5:e6:8e:6b:fe:cc:
bf:d3:d1:63:66:3a:e5:3d:40:49:9b:ed:8e:6f:fa:
71:db:37:ad:4d:4b:bc:f5:72:0b:80:68:f6:8e:c9:
e4:0a:80:ef:18:6f:98:c6:ac:b2:61:4c:aa:85:e2:
79:cd:fa:16:24:9c:37:d5:22:12:fd:f8:00:6a:31:
e2:0e:9b:f9:46:64:46:4a:46:40:06:fd:6e:f2:41:
c2:1f:49:3b:d5:1c:bc:eb:1f:44:a4:a8:c6:e9:07:
a6:64:04:29:cf:58:bc:64:e2:b9:80:a7:e0:15:97:
b0:07:8c:05:b3:91:7c:a1:73:6a:64:ee:dd:b5:3a:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:C4:B1:E8:8E:45:26:EB:F1:3E:D8:F1:28:F0:AC:E8:32:54:10
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/zY7EseiORSbr8T7Y8SjwrOgyVBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2e:be:34:12:06:01:ce:52:2f:28:ff:2b:c5:ea:52:b5:fb:
7e:c4:07:b6:9b:ca:0d:2f:13:67:30:56:bf:02:46:45:1c:d2:
6c:e7:d9:48:64:b5:78:9c:93:58:0d:fa:db:74:58:b0:9e:34:
bb:70:a5:da:02:30:10:a3:c5:5d:94:05:96:2b:97:14:f9:b0:
3d:f8:e9:97:b5:19:39:d0:a2:68:ea:99:bf:73:73:e2:f1:74:
13:91:e3:d2:82:4d:31:42:82:a9:e9:91:65:6c:ab:72:d0:11:
a4:ff:8c:e9:60:6e:75:c4:34:1d:a4:9d:ac:c8:10:19:a2:f0:
00:de:a1:0b:0c:a9:36:43:8c:65:a3:c0:19:44:7d:89:51:7e:
75:35:fa:73:a1:cf:1a:6d:7f:58:9b:e7:51:75:e3:7f:fe:7d:
8c:35:03:a4:37:b7:26:8c:b0:ca:c9:03:12:7e:da:eb:59:0f:
cb:15:0d:d4:59:01:1e:9e:82:f9:e0:9f:ee:e0:42:81:84:1e:
98:8b:cc:10:db:68:d0:0f:b6:ba:bc:6c:c9:f4:ba:9f:4d:96:
07:4e:32:5d:c4:ae:6b:85:74:31:29:83:53:38:59:f5:ba:bd:
81:f9:66:e0:9a:30:a8:1b:b5:b9:13:17:eb:5b:fc:24:8b:e8:
69:c3:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:41 2025 by rpki-client