Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa
File: q_AnN0USshBiKM8Fa68kuo2Ggaw.roa (raw, json)
Hash identifier: xthbGJ00NbCZLSLGOfE2pPwOyUFSngK8rFU2JDWz1YI=
Subject key identifier: AB:F0:27:37:45:12:B2:10:62:28:CF:05:6B:AF:24:BA:8D:86:81:AC
Certificate issuer: /CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Certificate serial: 5FD6C5
Authority key identifier: 6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa
Signing time: Sat 01 Jan 2022 01:52:17 +0000
ROA not before: Sat 01 Jan 2022 01:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6280901 (0x5fd6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Validity
Not Before: Jan 1 01:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf027374512b2106228cf056baf24ba8d8681ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:23:39:42:73:17:3f:d8:11:77:15:ae:76:
0e:39:fc:95:3c:17:e5:4e:19:30:42:1e:7e:44:14:
27:5f:fb:05:e0:9e:a0:79:9a:6a:6e:7f:1d:bd:06:
c6:10:d6:7c:3b:9b:96:88:11:f8:23:b5:fd:ad:2e:
e4:c0:5a:6c:45:38:f6:0b:56:96:5f:96:70:fe:60:
20:b9:76:72:9e:b1:5b:a1:5f:70:59:8a:96:c4:c2:
03:cc:d4:73:a2:07:aa:47:1a:9f:9b:3f:23:1d:f5:
8e:2a:b5:ba:d6:fa:32:d7:e9:85:88:df:69:9b:d3:
a3:c0:2e:9d:bf:d6:85:31:67:84:38:62:32:f5:57:
cc:1f:90:ce:b1:20:01:f6:35:57:91:7c:c3:9b:7b:
f0:17:78:31:7f:ab:56:38:1b:0b:4f:87:ae:88:84:
39:71:ce:92:aa:9c:72:d0:4b:ef:21:ac:34:c9:ec:
85:f9:d7:20:0e:86:bf:6c:ce:7f:66:bb:55:c5:16:
f2:33:2a:02:9e:a6:3d:c6:f5:cf:6d:13:6d:98:82:
11:1f:9e:a8:2e:17:f1:e4:fa:47:bd:0c:6f:dc:42:
2f:ff:71:bc:c0:d4:fb:f8:4a:e7:5f:ab:e8:a7:dc:
a0:cc:de:b8:77:17:b7:e7:86:4c:2d:90:d9:71:29:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:27:37:45:12:B2:10:62:28:CF:05:6B:AF:24:BA:8D:86:81:AC
X509v3 Authority Key Identifier:
keyid:6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/q_AnN0USshBiKM8Fa68kuo2Ggaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a6:eb:6c:3c:bd:6f:ea:3d:f7:9f:ef:9a:2e:9f:93:43:aa:
32:8c:ed:55:c5:1f:15:b8:11:4b:77:61:41:c5:75:4a:27:d4:
89:65:93:8e:65:c5:e3:5f:0c:fc:bc:64:35:b3:76:99:b6:87:
a3:5d:e8:30:e3:a4:31:5e:69:05:36:41:7d:d8:e6:b6:f8:07:
9b:75:11:9e:17:26:33:59:7e:07:1b:d9:c4:0e:3f:8e:03:6d:
c9:51:05:b1:82:ef:bc:aa:dc:8d:fd:0f:fe:f6:9f:86:fa:7c:
37:37:8b:01:a8:4a:2b:ae:f1:6b:60:a1:1f:69:fe:fa:2d:ed:
60:0d:9b:34:0e:85:d0:94:f7:b7:88:37:04:a4:e3:da:e7:47:
5b:69:8b:f9:b3:76:a5:6d:3a:b5:59:d5:bb:0f:1f:6d:10:0e:
a9:53:f0:aa:98:1f:ba:d8:71:ce:0c:e3:01:b2:ce:c4:97:1e:
a0:e6:6e:00:bb:a4:67:1d:3a:62:d6:94:07:db:39:a2:cf:77:
79:79:93:f6:b0:09:ce:45:12:3a:2a:e3:92:a5:28:c7:64:95:
5c:0c:bb:e6:70:17:ed:11:fd:06:20:4f:06:dc:cd:37:9f:01:
2c:5c:6c:00:d5:50:e0:b8:8d:46:ea:17:8b:5b:32:3d:f8:8a:
26:2a:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:41 2025 by rpki-client