Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/nR1ukhNSk10glNqbRgKIMT_9lP0.roa
File: nR1ukhNSk10glNqbRgKIMT_9lP0.roa (raw, json)
Hash identifier: GsivyavvldUmbeqljssZlkRSqYTpB/66qF4xo+jBAq0=
Subject key identifier: 9D:1D:6E:92:13:52:93:5D:20:94:DA:9B:46:02:88:31:3F:FD:94:FD
Certificate issuer: /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial: 01C8C755
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/nR1ukhNSk10glNqbRgKIMT_9lP0.roa
Signing time: Wed 22 Jun 2022 12:52:32 +0000
ROA not before: Wed 22 Jun 2022 12:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29935445 (0x1c8c755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
Validity
Not Before: Jun 22 12:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d1d6e921352935d2094da9b460288313ffd94fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:ea:d1:4f:8f:6b:87:0e:b6:7b:c7:06:49:
a3:52:e6:03:11:33:ec:85:f4:e4:4a:43:b6:e1:51:
b1:34:a4:54:f2:ee:e0:84:b0:7c:e2:4e:0c:74:7a:
76:c6:4f:d4:ef:a9:c3:a5:8f:86:d6:4d:a6:a2:81:
46:b1:a2:8d:f0:80:f0:47:d8:31:28:1a:78:31:8b:
71:28:81:0c:34:0a:2a:f5:da:dc:6f:1f:03:05:cf:
ed:a0:75:f0:11:6c:f6:cb:13:1b:17:da:a5:09:45:
83:94:25:7c:9f:d8:8a:eb:fe:54:1d:a6:74:30:44:
4c:4c:e4:de:72:43:97:d2:75:84:fd:e6:00:f6:58:
40:22:a3:9e:0f:fd:1c:64:ad:dc:a7:22:47:29:b0:
eb:99:98:c0:1a:24:f8:03:b1:e4:3d:e0:fa:87:f9:
1d:de:ce:ca:35:a3:d9:3d:39:86:09:06:dd:6f:4f:
fc:28:b6:76:aa:53:0b:47:12:ee:9f:42:ee:c4:64:
9d:dc:15:8a:cb:ea:19:6b:86:4e:ac:3f:7f:b6:f5:
7b:19:98:a6:7d:9e:d3:31:ea:ba:68:72:1a:b2:20:
86:55:6c:15:27:0a:e8:06:49:93:65:cf:89:df:66:
e8:a4:e2:d7:8a:0d:4e:c4:59:ae:42:ff:92:d7:44:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:6E:92:13:52:93:5D:20:94:DA:9B:46:02:88:31:3F:FD:94:FD
X509v3 Authority Key Identifier:
keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/nR1ukhNSk10glNqbRgKIMT_9lP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:61:90:4e:48:ac:23:fd:79:f2:29:3d:21:b2:a5:a3:96:9f:
49:ce:79:df:e9:d4:6a:d0:f6:22:0f:29:91:63:37:bf:46:b4:
60:5e:58:46:c3:a8:2b:a3:b8:31:42:4b:e6:70:38:f1:95:c7:
c8:ec:7d:11:eb:3f:e6:e6:ee:f2:c1:3d:37:3d:d9:f3:a0:09:
0b:ff:8b:9b:1d:84:5c:69:56:77:80:34:e3:0e:22:f4:de:20:
a2:dd:7b:a7:97:07:2d:d1:00:68:bf:1c:ac:49:4d:ed:aa:85:
bb:93:e2:ec:04:5c:5f:68:f6:cc:f9:4e:a5:7d:f8:04:67:a4:
7f:2d:8d:f1:4d:51:bb:35:0c:9a:d5:d3:2c:8c:98:df:0a:87:
5f:04:6d:8d:3d:f8:24:be:2d:e9:f1:1e:41:b0:a7:c0:64:3b:
e9:72:a5:1f:f5:3b:79:c4:e8:dc:20:17:d1:f1:5b:99:ea:0c:
32:ff:dd:2a:0e:3b:13:d7:2f:76:39:ca:65:ed:e7:bb:de:c6:
eb:b1:1a:2b:2e:59:3d:1d:a2:8c:58:77:77:05:be:d9:84:1e:
1b:3b:95:6a:1b:0f:46:b9:30:8a:08:36:01:77:44:6c:c4:d3:
29:e8:40:ab:6b:70:f5:82:b0:98:ee:87:82:11:f3:fe:8f:bb:
c1:1d:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:30 2025 by rpki-client