Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/75mViBaSa1LCZJ1gYMM2aAMzTvc.roa
File: 75mViBaSa1LCZJ1gYMM2aAMzTvc.roa (raw, json)
Hash identifier: BXLAgZMvAh8d2bhVjhb0bjlsz2kHWFdP/eXfMTBa7C0=
Subject key identifier: EF:99:95:88:16:92:6B:52:C2:64:9D:60:60:C3:36:68:03:33:4E:F7
Certificate issuer: /CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
Certificate serial: 01825591EDEB964461BD66E349EF84234506
Authority key identifier: D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/75mViBaSa1LCZJ1gYMM2aAMzTvc.roa
Signing time: Sun 31 Jul 2022 18:43:23 +0000
ROA not before: Sun 31 Jul 2022 18:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41957
IP address blocks: 146.19.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:55:91:ed:eb:96:44:61:bd:66:e3:49:ef:84:23:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5db0956d24700a6c8c23bf458eda6c618fcfab3
Validity
Not Before: Jul 31 18:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef99958816926b52c2649d6060c3366803334ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:c8:d2:1f:2d:e7:fc:fc:03:40:94:f8:df:
03:36:1b:a5:46:a3:dc:50:25:18:a8:bc:ed:b0:76:
d3:ad:47:a0:4c:64:d0:60:8c:e0:df:aa:1b:a9:39:
7c:f4:fd:3e:3c:2f:38:3d:7e:13:bc:1a:98:3b:1b:
d9:e1:b4:80:27:f0:09:f4:67:0d:df:87:4b:b8:4a:
43:17:98:a7:8d:f0:9a:fd:d5:cb:27:af:59:f8:5d:
b5:ef:15:f0:67:cb:82:86:7b:17:fb:3a:f7:0e:64:
9b:52:9c:08:b7:9c:ae:00:c6:b5:ca:0e:97:8c:15:
31:b4:bd:af:89:f0:42:1d:af:b7:1f:db:87:d3:cd:
3a:a8:d6:f0:69:58:9f:14:6a:21:57:dc:7d:88:df:
58:ec:d5:fc:11:b4:69:ac:45:d7:c0:27:1e:a0:4b:
56:79:23:a0:70:01:a1:7c:94:49:be:fd:4c:05:cb:
b6:18:93:9f:58:17:f7:d5:2a:cc:85:02:73:72:e4:
6c:a1:dd:7e:c4:18:1a:4b:00:00:37:29:6e:b6:7b:
91:59:87:20:48:b9:8a:27:94:9b:84:a0:08:55:b4:
9b:c5:9f:71:9b:91:52:1c:4a:1e:75:ff:0b:48:63:
51:c8:7f:94:c6:62:1d:75:bc:fc:03:41:e6:9c:aa:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:95:88:16:92:6B:52:C2:64:9D:60:60:C3:36:68:03:33:4E:F7
X509v3 Authority Key Identifier:
keyid:D5:DB:09:56:D2:47:00:A6:C8:C2:3B:F4:58:ED:A6:C6:18:FC:FA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dsJVtJHAKbIwjv0WO2mxhj8-rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/75mViBaSa1LCZJ1gYMM2aAMzTvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0049ae-b743-4acb-8d7b-380888b642f3/1/1dsJVtJHAKbIwjv0WO2mxhj8-rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.178.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1c:41:0e:90:f7:15:23:a5:d3:70:29:56:dd:33:b1:09:de:
c2:40:23:b2:4e:ff:40:b3:f0:2a:4a:45:33:ce:a8:86:bf:de:
ff:73:13:1c:0d:81:cc:e3:0e:2e:64:a1:35:65:69:ff:84:ab:
ee:b7:d7:ee:db:a3:eb:f1:c6:36:eb:fd:b3:8f:5e:9a:d2:53:
7e:cf:2d:f5:62:bb:bb:70:84:2e:63:88:dd:2a:87:3a:97:3d:
99:28:e9:64:53:ee:b5:b7:49:1c:dd:15:bf:86:dd:8f:32:82:
c0:fd:68:64:4d:9a:d1:01:63:72:a7:f8:76:24:90:8d:6f:07:
3c:36:71:95:01:4a:fc:fa:ac:f5:fc:1b:fb:fc:27:8a:9a:49:
16:30:d7:39:e6:2f:5d:b4:74:08:cb:59:06:e8:4f:43:18:84:
8d:10:5d:80:90:c5:79:2d:54:fd:d0:d2:b4:ae:08:16:1f:88:
a4:28:98:83:39:5a:31:76:3c:8c:e6:30:56:4c:62:c5:ac:7f:
70:35:49:b3:0f:df:c4:63:3e:9a:ff:60:3c:e7:e7:f2:04:cd:
77:09:dd:f7:1e:e4:b7:e0:89:7a:e9:a7:77:58:0e:f4:e1:30:
d2:a8:8b:df:61:70:d3:86:fe:cb:0d:7b:63:ec:81:f3:77:85:
06:b6:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:18 2025 by rpki-client