Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/g5KBFY13aHyms1C9ejX-ON85oQs.roa
File: g5KBFY13aHyms1C9ejX-ON85oQs.roa (raw, json)
Hash identifier: 4xfPW5Iy1gBwjHbHE0cZlb1OshNtaDM9MEAqaolgOyY=
Subject key identifier: 83:92:81:15:8D:77:68:7C:A6:B3:50:BD:7A:35:FE:38:DF:39:A1:0B
Certificate issuer: /CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Certificate serial: 018C45064D1FAFE87C4F6C0C206D08D2E7FC
Authority key identifier: 0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/g5KBFY13aHyms1C9ejX-ON85oQs.roa
Signing time: Thu 07 Dec 2023 16:04:49 +0000
ROA not before: Thu 07 Dec 2023 16:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206750
IP address blocks: 146.19.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:06:4d:1f:af:e8:7c:4f:6c:0c:20:6d:08:d2:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Validity
Not Before: Dec 7 16:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839281158d77687ca6b350bd7a35fe38df39a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:21:2a:e3:57:18:93:ca:b8:4c:13:61:bd:
76:72:c1:08:48:d1:2a:4c:11:ce:b7:1c:df:63:1a:
87:21:7d:b2:38:79:9d:9c:78:a4:46:b3:52:21:81:
c6:a8:ba:95:b9:65:5f:74:f6:29:90:5a:94:7f:e5:
84:30:82:24:77:81:18:97:23:00:2f:79:f7:1a:3d:
17:72:03:3c:fb:a9:fb:45:ca:57:9e:12:90:cd:6f:
bd:d7:ed:cb:58:21:02:20:1f:ff:8b:16:3f:58:d9:
92:9a:8c:18:fc:7e:93:5d:cb:fb:a9:2b:f8:3f:3f:
80:13:76:ec:50:16:26:be:57:74:a1:8f:25:1e:3d:
bc:5d:d0:11:ab:dc:fe:40:d7:bf:be:e1:89:da:2d:
3a:fd:3a:cc:3a:f5:57:32:a2:24:2c:9c:c2:07:c1:
ff:81:e4:5f:5b:b8:a3:e2:9e:e5:27:af:48:d3:4f:
48:1d:de:d6:1e:97:02:e8:f0:10:95:eb:b6:2e:0a:
f5:90:d7:21:3e:67:14:f8:6e:00:cc:5a:e7:23:da:
5c:da:26:65:a2:74:82:91:c4:9b:11:f7:47:a1:0e:
c9:73:45:0d:02:e9:d8:35:20:6a:dd:1c:b2:cd:e0:
01:90:51:42:26:ce:31:68:b0:5d:f2:f5:4b:e4:2b:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:81:15:8D:77:68:7C:A6:B3:50:BD:7A:35:FE:38:DF:39:A1:0B
X509v3 Authority Key Identifier:
keyid:0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/g5KBFY13aHyms1C9ejX-ON85oQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/D7L06jurD7DoiS7n-FXWRS6nMwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d1:86:2c:ff:6a:5a:4b:64:4d:cc:25:6e:7e:e1:68:f1:a7:
c4:de:b9:85:56:ca:e8:ce:5e:97:5b:cd:18:ee:54:49:ed:cd:
df:e6:7a:5d:51:eb:5f:3d:f7:73:44:de:1e:09:44:fc:dc:eb:
65:d8:c9:7a:b3:35:93:de:c2:9a:5b:ee:41:fd:f4:b7:c1:23:
32:b4:3d:fc:62:c3:77:28:32:9f:46:d2:39:30:be:ed:c0:20:
27:a6:76:09:ee:95:5f:c9:0f:f1:db:3e:57:63:ec:3e:ac:be:
67:90:25:59:96:43:08:90:4c:70:7f:ec:59:cb:96:b8:3d:b3:
ed:12:9a:54:f2:31:14:69:f5:cf:5e:53:d5:41:a9:34:e2:33:
78:13:96:34:fb:ad:13:d1:20:81:b5:9d:80:77:d7:10:ee:c8:
0f:2b:22:83:36:e4:9e:2a:cd:dd:a0:0a:1c:46:cc:82:40:66:
6a:f2:62:cc:0d:fc:14:d4:ce:f5:d5:c9:06:5c:ad:3e:b3:19:
41:07:db:95:1c:91:0a:8e:ae:16:dd:8b:80:b6:c9:a0:a2:88:
d6:20:f0:c3:4c:40:76:9b:44:21:fa:8b:fe:47:5b:82:3d:fb:
5c:8a:91:75:9b:91:e3:c9:a9:46:10:e0:0b:21:aa:a5:c0:7a:
e0:ee:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:02:26 2025 by rpki-client