Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/7cxMv69eFKESSQnpAx4U9QjEjh0.roa
File: 7cxMv69eFKESSQnpAx4U9QjEjh0.roa (raw, json)
Hash identifier: GtDOxi2hgkBO/iOJafyc3w9ZKV2WUU26WT42FD26734=
Subject key identifier: ED:CC:4C:BF:AF:5E:14:A1:12:49:09:E9:03:1E:14:F5:08:C4:8E:1D
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 018B01062E01B7611336292D3E13540B25D1
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/7cxMv69eFKESSQnpAx4U9QjEjh0.roa
Signing time: Thu 05 Oct 2023 18:07:43 +0000
ROA not before: Thu 05 Oct 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 146.19.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:06:2e:01:b7:61:13:36:29:2d:3e:13:54:0b:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Oct 5 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edcc4cbfaf5e14a1124909e9031e14f508c48e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:f6:b3:0a:e5:9b:69:c7:21:34:f5:69:d7:
65:47:12:68:1b:08:93:96:9c:8f:5d:9d:d3:ff:1c:
fa:3c:62:9f:06:86:6d:8c:ba:92:37:85:9e:e6:27:
26:17:37:64:28:b6:f0:71:74:05:6f:8f:92:a0:e7:
73:59:71:32:68:33:35:9e:d5:30:c2:e6:c8:1c:a0:
df:d4:f9:c0:65:f8:d8:7b:75:71:7f:db:b1:4b:8d:
39:0b:5f:4b:bb:69:57:06:23:cc:73:30:00:4b:1f:
a8:86:bf:44:7f:71:1c:e8:29:54:d9:34:db:2f:b0:
ee:84:16:78:84:31:74:bd:81:b7:05:0c:39:33:84:
71:4d:42:99:3b:bc:76:92:0e:b7:77:6c:06:63:49:
39:23:57:31:e8:47:d5:db:ed:16:96:07:84:e7:a8:
79:ef:29:10:ec:ff:23:5b:7e:f1:b7:d3:fb:8c:de:
dc:9b:bc:11:0c:37:a7:6d:74:05:11:7c:6b:d7:19:
51:b4:0e:67:71:5d:78:6e:e1:58:8b:85:7e:af:23:
4b:84:ad:c0:d2:1d:87:5a:1f:b3:4b:89:7e:6b:0a:
cf:98:d2:50:de:b1:00:83:ad:66:a5:69:41:87:3c:
d8:c1:ac:1d:51:d7:18:5e:6a:5b:58:ad:3c:29:15:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:4C:BF:AF:5E:14:A1:12:49:09:E9:03:1E:14:F5:08:C4:8E:1D
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/7cxMv69eFKESSQnpAx4U9QjEjh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a2:13:f1:0b:11:8f:cf:81:51:8b:f1:8f:43:57:39:ad:ac:
c3:88:5f:40:81:22:98:6b:e4:3f:bc:2d:72:57:b3:97:a5:70:
16:5c:c4:41:ef:d2:f6:e7:d0:2c:87:28:9a:6d:e6:3c:c4:e6:
9c:09:27:61:c1:56:9e:f7:29:6d:d8:d4:07:c8:01:e8:8c:fe:
89:03:8d:2b:2b:68:50:f0:cb:52:64:95:df:d9:95:9b:f0:2d:
df:fd:18:f9:0f:50:8b:bb:38:3c:24:4c:e7:7f:94:9a:c1:0b:
88:f1:34:20:70:78:ad:c3:40:ee:8c:14:92:e2:62:89:29:96:
8f:a1:91:9a:be:86:76:e9:90:a3:84:d4:75:e2:52:aa:86:44:
c4:df:a8:6d:c2:64:19:cf:f3:31:bd:fb:a1:7b:cf:02:20:ec:
9e:cb:1d:bb:04:7e:e2:7a:c3:fb:98:d3:a4:18:17:cc:4c:ed:
32:ce:9a:8a:00:0e:1f:80:dc:e8:23:15:b6:08:62:54:c6:d5:
ff:33:81:fd:ce:1d:4a:0b:db:4f:52:62:0a:26:29:b5:ce:e2:
61:8d:e4:89:cd:fa:5a:61:5d:c0:2b:3d:be:ce:b7:3e:f0:82:
17:aa:25:dc:ad:16:45:ea:f1:79:3a:65:1b:c3:5f:d9:a9:cf:
88:33:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:05 2025 by rpki-client