Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa
File: _qjc89Gvscwl1V0ZppYH__jzc6I.roa (raw, json)
Hash identifier: lt9Cjd9TbjIHm9T5futo+4VAKgrefGifoF+R1HS2RyI=
Subject key identifier: FE:A8:DC:F3:D1:AF:B1:CC:25:D5:5D:19:A6:96:07:FF:F8:F3:73:A2
Certificate issuer: /CN=73afc75778e90802d1d2db2872533d19099f13fc
Certificate serial: 4EBFFC
Authority key identifier: 73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa
Signing time: Sat 01 Jan 2022 00:51:01 +0000
ROA not before: Sat 01 Jan 2022 00:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 146.19.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5160956 (0x4ebffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73afc75778e90802d1d2db2872533d19099f13fc
Validity
Not Before: Jan 1 00:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fea8dcf3d1afb1cc25d55d19a69607fff8f373a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:e0:61:01:f3:6a:90:cf:52:d9:25:bc:fa:
5c:43:34:ad:d9:68:0f:72:ac:85:39:ed:6c:e5:6b:
ef:e7:25:bf:af:31:6e:42:f9:62:32:75:e0:2d:52:
c6:39:02:e4:3d:ec:60:4d:38:20:c3:f5:6f:5e:86:
1e:23:c2:dd:06:c2:df:ef:ac:77:c5:cd:0c:00:c8:
33:fc:b0:7c:b9:c3:fb:c4:90:5b:57:f8:d5:3e:c6:
97:f3:8e:5a:bf:36:90:43:d8:61:76:51:44:f9:7b:
1e:a7:c7:74:c4:40:b9:2c:19:85:31:ab:1f:29:e3:
23:ae:ff:1a:3b:a1:31:44:4e:19:b0:b5:9f:df:cb:
85:09:4d:a4:b2:60:c7:b9:b6:4e:8c:7f:ce:a0:27:
05:24:18:5c:56:ea:96:35:e6:4e:9e:3f:f1:ce:05:
50:76:fc:87:00:94:f3:40:c9:f4:91:90:fb:d7:1f:
00:c8:a5:32:cf:15:42:7a:94:a6:46:18:81:0d:fc:
b6:97:b5:e3:9b:8d:af:9d:47:b5:8e:c4:3b:40:0c:
39:ac:db:ed:50:97:c9:e9:83:bc:66:28:1d:20:ce:
70:dd:1a:1e:0e:e0:f5:7f:de:2d:b5:6f:0e:cd:fc:
f1:e0:c1:e5:b7:b7:43:ab:d2:0b:8a:1f:55:88:7e:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:DC:F3:D1:AF:B1:CC:25:D5:5D:19:A6:96:07:FF:F8:F3:73:A2
X509v3 Authority Key Identifier:
keyid:73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.169.0/24
Signature Algorithm: sha256WithRSAEncryption
09:04:8e:71:8d:d2:0d:a0:67:38:1b:2a:78:29:8f:6a:18:6a:
3e:cb:44:a1:73:e3:90:20:dd:3b:fb:af:20:4d:af:b3:e7:45:
85:bc:09:73:36:9a:fd:bb:7e:d6:ce:03:71:60:e7:d5:b0:25:
70:29:94:13:0a:e4:1e:6f:2c:0d:70:91:e2:eb:54:7f:c2:69:
02:b6:44:e1:70:ab:2a:68:bf:f0:ca:be:ef:ae:60:45:0b:56:
8a:d1:69:a4:64:6a:a5:89:23:d7:01:01:3f:5e:f1:39:ed:ee:
f8:14:97:2f:dc:62:27:4c:6d:e1:3e:da:3c:aa:bc:a0:49:bc:
4d:ee:e9:30:10:27:fc:76:e7:57:a9:c1:bf:59:bc:f0:ec:87:
d1:3c:43:4e:3d:65:77:e9:aa:5e:65:54:01:bc:fb:e8:71:a6:
28:44:62:e4:12:08:2a:a2:9a:ad:cb:30:68:27:e1:14:db:4e:
e3:07:f3:70:23:43:f1:2b:26:0c:6d:d0:f2:64:1d:37:74:c8:
08:ef:3b:ce:ca:f2:29:d5:d5:87:bb:5d:94:4b:fb:75:ff:83:
dd:36:ae:27:31:14:de:ac:d9:58:01:81:bb:9f:eb:c4:ee:28:
c4:f4:27:c4:1b:25:f8:2e:df:55:42:ea:8b:d8:ee:90:63:a6:
3e:4c:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:06 2025 by rpki-client