Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/F0Nw4WRB_Jw_EikISGqDKy6BRmw.roa
File: F0Nw4WRB_Jw_EikISGqDKy6BRmw.roa (raw, json)
Hash identifier: yLY9kE5F79btIVKqH2M00P9BSm9GX1qCNGWrCjW7IVY=
Subject key identifier: 17:43:70:E1:64:41:FC:9C:3F:12:29:08:48:6A:83:2B:2E:81:46:6C
Certificate issuer: /CN=281a53f49ac8e821047dbe686d0cb88ea9e71f3b
Certificate serial: 6AAF10
Authority key identifier: 28:1A:53:F4:9A:C8:E8:21:04:7D:BE:68:6D:0C:B8:8E:A9:E7:1F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBpT9JrI6CEEfb5obQy4jqnnHzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/F0Nw4WRB_Jw_EikISGqDKy6BRmw.roa
Signing time: Sat 01 Jan 2022 03:51:04 +0000
ROA not before: Sat 01 Jan 2022 03:51:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6991632 (0x6aaf10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a53f49ac8e821047dbe686d0cb88ea9e71f3b
Validity
Not Before: Jan 1 03:51:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=174370e16441fc9c3f122908486a832b2e81466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:04:89:ae:a5:91:50:62:05:2b:68:79:c3:
d7:90:59:b3:42:db:1f:44:04:86:88:6b:cf:59:b0:
3e:4f:6b:26:42:4a:a5:77:2b:80:38:c8:01:62:b9:
50:bd:58:1f:17:6e:f9:6f:40:84:2c:37:59:3e:b4:
c5:c0:2d:df:db:5f:f9:89:07:78:b2:3d:0f:a0:88:
8b:69:8d:49:9d:98:f6:4a:09:c3:b5:5c:5c:bc:1f:
d8:7d:57:0f:d9:19:35:7f:b5:24:03:f1:3c:18:11:
ca:fc:f1:87:ce:43:ad:68:90:6f:cc:e3:5d:2c:90:
75:c4:79:fb:8c:8a:9b:c0:98:d7:d5:5f:b2:03:29:
54:c9:e1:69:b3:dc:eb:8e:fe:2e:64:5c:98:b6:7c:
21:37:e3:46:f9:00:5d:b9:93:3e:d6:34:7e:36:75:
ba:77:b2:c3:01:da:eb:6f:b0:fd:7f:6a:c8:75:c3:
31:49:f3:00:5f:6b:c3:08:4c:e4:e0:10:e6:45:a7:
47:e1:7e:7d:82:a7:ff:e4:6c:bb:2e:31:70:bc:8f:
c2:9f:97:02:34:ba:87:43:76:9f:39:82:5d:c1:55:
1b:e1:11:34:86:21:4f:24:37:61:fa:fe:b4:38:99:
20:c0:d4:71:94:90:57:08:c8:ff:0f:3b:9c:46:3f:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:70:E1:64:41:FC:9C:3F:12:29:08:48:6A:83:2B:2E:81:46:6C
X509v3 Authority Key Identifier:
keyid:28:1A:53:F4:9A:C8:E8:21:04:7D:BE:68:6D:0C:B8:8E:A9:E7:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBpT9JrI6CEEfb5obQy4jqnnHzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/F0Nw4WRB_Jw_EikISGqDKy6BRmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ad4f98-d5d0-4243-8d95-131ce883bfb3/1/KBpT9JrI6CEEfb5obQy4jqnnHzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:58:d3:21:d5:74:13:b9:4e:f0:9e:c7:f6:5b:69:99:fa:9e:
19:36:99:34:30:7b:1f:cc:8c:11:94:1e:cd:92:ad:e5:84:9e:
67:8a:eb:98:63:92:d8:47:01:98:99:b1:60:ef:6f:d1:6e:ae:
47:cc:38:3c:49:8c:1a:10:ed:6b:f1:5e:5f:19:5e:c1:a3:f4:
43:16:34:bb:82:0a:61:1c:06:6e:71:e8:f1:40:ee:90:4f:c6:
bd:6f:42:cd:ad:12:89:4e:42:6f:ff:a6:e7:4e:20:af:c3:3b:
79:cf:45:34:34:1e:3b:fa:00:72:67:5e:28:35:bd:64:9d:06:
95:b4:1d:ac:78:2d:0d:63:ee:48:d0:c1:39:27:ab:4b:70:28:
c7:06:f4:fb:42:14:c2:14:04:df:35:11:e1:59:68:e8:fe:99:
d9:9f:6e:1b:8b:43:36:e2:f8:25:d2:db:3a:00:f1:d7:10:21:
3a:e8:c4:11:8d:8e:09:fa:83:1b:40:d6:d9:68:f4:87:59:7c:
f3:6a:7f:5b:20:c6:11:ac:3e:01:56:f0:cc:e7:01:a1:d0:f8:
a4:a1:99:8a:35:a4:c8:1f:4e:f0:be:c7:c3:68:a6:1f:d5:46:
c0:dd:3d:60:cf:9e:38:27:a3:29:1a:71:04:02:5b:2c:56:5b:
94:98:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:04 2025 by rpki-client