Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/XXKgIuiU-_M3rWzDnUQhh2MJ4bA.roa
File: XXKgIuiU-_M3rWzDnUQhh2MJ4bA.roa (raw, json)
Hash identifier: rJsfKUQlLsXAps3k15sZFLFtfvumbrilXY30dTPpR0A=
Subject key identifier: 5D:72:A0:22:E8:94:FB:F3:37:AD:6C:C3:9D:44:21:87:63:09:E1:B0
Certificate issuer: /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial: 4870E2
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/XXKgIuiU-_M3rWzDnUQhh2MJ4bA.roa
Signing time: Sat 01 Jan 2022 02:59:26 +0000
ROA not before: Sat 01 Jan 2022 02:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 146.19.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4747490 (0x4870e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
Validity
Not Before: Jan 1 02:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d72a022e894fbf337ad6cc39d4421876309e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:b8:9c:77:3f:38:76:6f:09:ba:6d:f2:ad:
c8:b7:b8:f4:fd:35:f3:17:f5:2d:c5:c7:b2:8a:96:
94:b9:c0:cb:14:af:26:c7:c3:76:f9:a4:3a:6c:a7:
91:bc:e8:c0:1d:8d:bc:c8:72:09:d0:51:c7:19:4f:
af:8c:b8:b5:23:03:3b:7b:86:a6:77:9b:5b:41:f6:
b3:cd:98:2f:0a:75:a9:de:86:b0:b3:9b:66:0b:df:
90:3a:70:7f:3b:d2:a2:06:a1:96:04:5e:de:e0:bd:
d7:82:85:23:28:98:50:ab:a5:08:d0:ba:62:30:2a:
dc:b2:9a:14:e7:f9:25:89:a5:d6:92:7a:f6:17:b1:
67:7e:67:9b:b4:d1:72:39:72:d3:7f:c0:bd:15:78:
50:29:d7:55:7a:fc:20:0a:b7:c7:3b:d6:c7:d1:b5:
57:31:6b:27:dd:2f:21:a6:66:a0:32:ef:96:0d:e8:
aa:9b:ae:c0:f8:b9:45:91:9c:e5:62:c9:96:7d:56:
d9:fc:38:14:15:92:f4:84:14:be:8d:44:51:8a:64:
83:28:d0:99:2a:c8:86:32:38:7d:47:e0:89:84:88:
d2:1f:1c:98:8d:8b:a7:34:bc:9c:46:c4:58:cb:1f:
1f:6a:3f:b6:b5:f8:7e:66:cb:8c:a1:01:61:a7:f7:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:A0:22:E8:94:FB:F3:37:AD:6C:C3:9D:44:21:87:63:09:E1:B0
X509v3 Authority Key Identifier:
keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/XXKgIuiU-_M3rWzDnUQhh2MJ4bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e0:dd:5f:4f:c5:84:05:a0:11:76:7a:e8:b0:63:88:4b:65:
51:a3:fe:28:69:b4:f7:e5:fc:85:4b:8e:c4:ae:cc:c3:e7:77:
67:11:7d:62:ca:3f:ae:06:7e:b4:8a:30:1c:02:28:fb:ef:2c:
e5:f5:41:a3:95:c9:49:72:a7:29:c6:19:4f:1f:57:c0:54:00:
e8:17:b0:28:fd:c8:8f:c2:e2:ec:0e:24:83:de:bd:68:0e:e0:
a3:4c:61:d7:b0:7c:dd:1c:cc:5f:a3:69:02:f6:6b:b4:a3:0d:
28:71:26:41:a1:2b:f9:bd:bc:3e:6d:1d:2a:d3:6e:9b:0f:84:
5b:71:28:2a:09:de:c0:0c:83:56:9c:fd:da:f8:f2:15:a8:da:
14:6e:a3:9a:8e:b7:d1:f9:62:8d:97:67:e8:5a:39:78:d5:43:
83:4c:a3:7b:6e:8b:50:28:d3:bf:9c:77:4d:a4:de:cc:11:74:
44:47:7d:3a:86:5a:4b:62:f3:7d:d2:3d:38:49:04:0f:ab:dc:
58:8a:52:e2:00:d2:7d:39:2b:74:54:27:4a:0c:30:78:c5:36:
a6:ce:81:06:85:05:ce:05:39:d0:b0:1e:6c:09:a5:10:26:ca:
1e:26:d4:2f:9b:40:c6:d9:14:a7:36:a7:45:91:d8:61:06:22:
a4:c7:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:02 2025 by rpki-client