Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa
File: YwdN2No2Y0cgh79C6sajh-gSRMI.roa (raw, json)
Hash identifier: snH75mqCPJZO66dUA4ZID8mC3Ia+/DcoppqJ9OTB+jo=
Subject key identifier: 63:07:4D:D8:DA:36:63:47:20:87:BF:42:EA:C6:A3:87:E8:12:44:C2
Certificate issuer: /CN=73afc75778e90802d1d2db2872533d19099f13fc
Certificate serial: 01856F0B4544137FB038962E3A36BD39C637
Authority key identifier: 73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 146.19.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:45:44:13:7f:b0:38:96:2e:3a:36:bd:39:c6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73afc75778e90802d1d2db2872533d19099f13fc
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63074dd8da3663472087bf42eac6a387e81244c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:7a:4e:d9:89:9e:0d:ae:87:80:56:e5:9e:
38:29:2e:09:c4:fd:bd:70:d7:3d:3e:2e:4a:62:96:
47:82:c6:12:5c:de:dc:90:a4:10:77:f7:2f:7e:fd:
30:f7:cf:13:41:90:5f:52:87:5a:8c:83:17:74:8e:
b6:20:f3:13:8f:46:24:0a:6a:5a:e0:82:b2:24:7a:
56:52:c9:94:c3:0c:a8:27:e1:2f:46:5a:8e:6e:33:
85:dc:50:97:fc:20:43:31:4b:91:2b:70:28:69:34:
a1:f3:4f:2d:74:03:57:98:e8:84:cf:16:24:05:a4:
9c:ab:7d:07:f7:dc:c5:14:b8:93:b0:ae:1e:a9:3b:
b3:6a:23:6d:96:e9:f0:80:ec:d0:fc:bc:82:80:67:
df:e9:74:2b:80:d4:3e:f1:b7:ec:ce:b4:d8:a1:ab:
85:81:8d:38:0e:63:26:b4:ac:39:f1:f4:6b:88:dc:
80:04:0e:21:9b:36:2c:73:2b:6a:7f:d2:9c:db:cf:
36:16:c9:30:2a:20:ff:2f:14:de:01:55:31:ab:e3:
15:0b:f8:d3:f3:78:4e:b2:bf:0b:33:93:68:35:85:
c4:38:2f:5a:12:3b:a3:f0:f8:84:ea:4b:3d:fd:1f:
87:82:0c:31:df:d4:82:6e:bb:d3:ab:f6:c2:5e:b7:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:4D:D8:DA:36:63:47:20:87:BF:42:EA:C6:A3:87:E8:12:44:C2
X509v3 Authority Key Identifier:
keyid:73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/YwdN2No2Y0cgh79C6sajh-gSRMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c5:c7:ae:26:52:07:0f:08:63:ac:40:e6:ed:06:aa:ed:d3:
9b:0c:a1:51:3a:4a:cd:82:82:3b:2b:8b:0d:d3:ca:22:db:ba:
54:58:e1:34:8c:9f:10:7c:bb:35:95:ad:05:a1:de:65:dd:80:
af:2f:73:ee:93:13:bb:26:21:fa:1e:f0:ba:bf:10:e2:11:34:
aa:01:a5:1a:6e:28:28:1b:b4:83:bf:49:47:c1:17:7e:4b:ae:
c5:fb:39:ea:ef:64:29:d0:ed:a3:83:95:0d:1c:72:5e:bf:48:
07:50:da:09:8d:c1:f4:03:1e:4f:7e:40:03:05:79:14:58:a5:
10:7e:3d:e8:0e:fc:02:4b:db:ea:77:dd:34:d2:36:62:e9:7e:
7f:bc:70:fe:30:db:b8:a2:1d:95:25:77:a1:f8:cf:a0:b8:50:
69:70:26:df:47:97:fa:78:5d:f4:fe:3a:fc:a8:d4:f3:e8:59:
59:df:2e:02:3c:c0:31:69:53:a7:77:55:56:d4:d6:9b:40:8c:
cd:72:30:cf:86:3e:c9:91:14:72:f8:4d:36:2a:75:d3:44:51:
8c:88:7a:14:18:4f:ec:fe:3a:b6:21:22:e1:d2:44:2a:92:da:
bb:83:26:67:df:06:2b:03:93:a8:7a:c9:dd:db:55:f0:46:1a:
53:90:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:14 2025 by rpki-client