Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/1-Lw2bhhyeSGQ9QcldtAv0XRAc0o.roa
File: 1-Lw2bhhyeSGQ9QcldtAv0XRAc0o.roa (raw, json)
Hash identifier: 5tayuA5jHOrCnPTJmx8VQjyGoMHsiWdgivPBhGksBEk=
Subject key identifier: F8:BC:36:6E:18:72:79:21:90:F5:07:25:76:D0:2F:D1:74:40:73:4A
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 6F9ADD
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/1-Lw2bhhyeSGQ9QcldtAv0XRAc0o.roa
Signing time: Sat 01 Jan 2022 02:56:46 +0000
ROA not before: Sat 01 Jan 2022 02:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7314141 (0x6f9add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Jan 1 02:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8bc366e1872792190f5072576d02fd17440734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:e1:e2:1b:9c:a7:17:90:1c:72:aa:cc:fe:
51:5a:e5:d5:e8:13:86:e6:b0:5d:60:64:ce:90:77:
08:4e:9f:8b:6f:3d:f4:a6:fb:67:9b:17:04:a1:1c:
68:81:b8:36:3b:39:61:ad:d5:a9:04:1f:15:db:53:
e3:9b:bb:71:ca:1d:ad:30:5b:c2:ad:70:ff:fd:9d:
ac:35:31:cb:42:7d:e6:66:51:76:23:18:3c:f0:0d:
07:90:0b:be:54:aa:40:85:58:3f:3e:b9:3e:2d:ef:
32:80:5f:62:94:53:48:e9:bb:fe:a6:2d:51:e3:fa:
e5:6a:a5:03:2e:84:8e:b9:d2:d5:b6:a6:63:96:cf:
bf:12:38:cb:a9:11:dd:76:cb:86:2f:78:fa:3c:01:
7e:29:d1:21:fc:36:d7:1c:d3:38:67:06:41:ef:7d:
cc:99:71:1a:88:5a:97:52:08:7f:9f:5c:63:8f:e4:
cf:f8:b6:b2:2f:e7:f3:d2:57:8e:b8:e5:a5:87:3b:
a7:e9:a5:b6:0c:24:79:e0:fc:d6:3e:91:18:5f:88:
28:d8:aa:07:ab:05:77:fd:bb:a0:fe:d0:a6:88:77:
a9:e3:c4:70:83:a8:46:a4:70:11:95:5c:d2:8e:ec:
c6:ea:c0:60:5a:ed:bf:89:ae:48:e0:89:d1:d8:6a:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:36:6E:18:72:79:21:90:F5:07:25:76:D0:2F:D1:74:40:73:4A
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/1-Lw2bhhyeSGQ9QcldtAv0XRAc0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c4:fa:30:bd:8a:4e:a3:88:59:ec:bc:1e:e0:c9:d6:97:4e:
0c:c1:62:de:5c:34:e5:70:cd:d2:bf:63:d9:fe:d1:40:aa:42:
b7:83:73:49:04:31:2c:db:eb:94:92:bc:e1:a8:c3:8b:4e:09:
39:53:27:f7:3d:1f:b4:e6:e5:e8:1b:c6:d4:08:6e:5b:9a:de:
d5:c4:95:4a:bb:64:bc:1e:26:44:a6:e9:ac:9c:14:36:51:b9:
b7:a4:51:4c:6f:fe:46:02:b0:a6:c9:60:81:08:34:89:4c:92:
4c:cf:b7:48:b1:ba:0e:4e:81:d4:4f:34:f4:f8:00:21:24:86:
c2:cc:10:ba:49:4c:b2:30:da:04:c6:36:f5:ac:57:ff:e0:55:
b8:84:ad:d3:9b:51:e1:a9:d4:c1:bb:91:28:c2:1a:de:38:54:
e5:bf:a6:c2:84:49:4a:a1:05:9d:26:59:3d:49:af:fd:cb:bd:
96:1e:4a:cb:fc:3b:61:9a:7f:c8:e6:1b:8c:0f:cb:ea:3c:bd:
15:f9:56:ec:45:53:dc:6d:7b:2c:a3:76:8e:42:34:84:f5:15:
d5:db:1d:18:db:78:21:8c:ec:2e:b5:9f:87:e2:62:01:b0:6f:
c2:45:0e:3e:2f:96:40:9a:a8:54:95:55:88:44:a2:06:97:33:
19:75:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:26 2025 by rpki-client