Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GE8S6QweGIt3c85t_rnGab-IpQg.roa
File: GE8S6QweGIt3c85t_rnGab-IpQg.roa (raw, json)
Hash identifier: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=
Subject key identifier: 18:4F:12:E9:0C:1E:18:8B:77:73:CE:6D:FE:B9:C6:69:BF:88:A5:08
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019420680EDD3C303D366130C65FD947671E
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GE8S6QweGIt3c85t_rnGab-IpQg.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 146.19.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0e:dd:3c:30:3d:36:61:30:c6:5f:d9:47:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184f12e90c1e188b7773ce6dfeb9c669bf88a508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:fe:c7:41:c5:87:f1:ca:a8:95:e7:2d:a9:
83:80:4a:78:07:a6:74:a1:49:d4:c1:1c:75:6e:7b:
62:93:38:d2:6f:ac:89:00:87:9c:1d:06:0d:b1:c2:
5f:1e:60:90:d4:63:6e:94:7f:7f:b8:01:92:5e:59:
ef:68:d3:7a:20:85:47:69:ee:01:cd:fa:39:8f:e8:
8c:16:16:be:16:5d:a1:12:ba:6a:3e:57:0e:72:c8:
57:a6:1a:c1:31:06:5c:91:66:74:7f:a5:8c:10:d6:
92:c8:df:84:fe:8c:e6:b7:3f:77:5a:04:95:f7:cb:
e8:b6:c1:19:f7:06:5f:bb:17:43:fc:02:67:f4:62:
05:d6:b4:e2:30:0a:b2:e8:58:d5:bd:25:f9:24:e8:
1c:72:84:cd:97:87:77:e8:08:76:6d:57:72:c9:16:
d6:a5:68:4d:fe:83:58:4b:e4:fa:8b:19:b9:af:70:
ac:3f:bb:5f:71:71:9b:b2:f5:81:9f:1d:88:96:5a:
7e:29:42:e6:23:fe:a5:63:39:4c:f3:b6:1a:83:b7:
9d:a3:86:2b:65:45:97:7f:06:e8:63:4a:ed:32:3b:
39:75:ca:75:22:c1:93:79:c9:72:dd:cb:4a:a1:51:
d2:7b:1d:39:46:62:24:79:57:1f:00:36:33:4e:ac:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:12:E9:0C:1E:18:8B:77:73:CE:6D:FE:B9:C6:69:BF:88:A5:08
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GE8S6QweGIt3c85t_rnGab-IpQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8b:e9:ac:f7:72:cf:b5:44:59:6c:0c:2c:f8:b7:58:a6:0d:
ae:db:a2:2c:9c:70:2f:68:60:10:05:84:65:ee:3a:c3:22:ee:
31:ad:64:05:ef:64:21:2f:5f:f1:6f:9b:84:9a:10:8e:db:8b:
65:ea:e1:5f:a2:7c:fb:b4:f7:ca:53:2e:38:1b:f1:a6:aa:1b:
2b:b6:57:a3:be:af:57:27:d1:ff:d2:8c:88:1d:6b:6f:65:d1:
4f:5e:8a:f4:7b:90:1f:97:ea:82:b1:89:3a:6c:c2:18:83:af:
c1:6f:77:a7:d5:17:f2:e5:c3:46:a6:4c:b2:10:e9:ad:af:94:
9a:01:3a:35:89:9f:04:ba:b3:49:a7:99:68:4c:76:72:20:13:
41:4b:5b:fe:42:21:9e:e5:d4:03:2d:74:7b:28:c6:89:07:14:
d3:02:10:8d:31:12:84:4b:a5:42:16:d6:da:ca:61:66:ec:34:
28:f1:98:ff:26:0c:ad:52:38:c8:06:fb:05:6a:dd:89:5f:50:
1b:97:52:a2:45:98:31:37:b7:c6:2e:e4:cb:49:6e:27:f1:3f:
03:e6:09:6c:71:06:b1:ba:ef:0b:04:51:d5:44:fa:4d:3f:27:
9d:42:8b:33:b7:48:06:82:07:3b:66:2c:f1:d4:db:98:26:dd:
72:70:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:26 2025 by rpki-client