Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/w6yaxbp4PMENMAhjgNAclFnnS4A.roa
File: w6yaxbp4PMENMAhjgNAclFnnS4A.roa (raw, json)
Hash identifier: u6aLdNjrjq3MjmPDPasWueIg+y93KzpELNSkHkq25lw=
Subject key identifier: C3:AC:9A:C5:BA:78:3C:C1:0D:30:08:63:80:D0:1C:94:59:E7:4B:80
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 018572D5DA303A037CE74BE082494B779412
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/w6yaxbp4PMENMAhjgNAclFnnS4A.roa
Signing time: Mon 02 Jan 2023 14:14:55 +0000
ROA not before: Mon 02 Jan 2023 14:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:da:30:3a:03:7c:e7:4b:e0:82:49:4b:77:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Jan 2 14:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ac9ac5ba783cc10d30086380d01c9459e74b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:4a:ef:af:02:f9:63:12:9e:50:5b:2f:a9:
51:cf:08:9b:58:7a:0b:dc:ca:5a:5a:3b:65:b1:9c:
a2:4e:ae:5f:60:54:01:89:92:26:48:f6:3a:14:60:
f5:1c:ea:0f:57:47:5a:8c:bb:05:39:00:7e:7a:b8:
95:f0:ee:b0:0a:2a:7f:ae:da:ad:2c:71:55:af:aa:
b5:9e:37:ba:00:3b:37:96:5c:ce:c0:a7:fe:6a:b0:
92:d9:7c:ff:07:6e:77:a0:55:bb:33:b2:2f:b7:a2:
ed:68:28:bf:0d:6d:98:5c:c4:b6:50:0f:6f:0c:e6:
3a:47:64:80:d3:2c:ee:00:40:2d:c2:65:da:85:36:
85:57:a9:5f:d2:de:a8:b8:37:fe:92:ea:70:7f:15:
7b:92:58:79:17:40:da:55:c5:cd:7e:f6:c8:b3:19:
49:95:a7:9b:a5:b9:f4:c0:64:bf:06:2c:90:e9:45:
91:de:56:a3:f0:1b:c9:27:a2:6f:69:6d:05:e8:b7:
26:2d:11:c2:8d:f5:98:1c:20:50:08:6b:67:9a:ad:
78:c1:de:d4:d8:f9:aa:dd:69:7a:41:8b:75:eb:92:
7d:3f:75:9c:c9:ce:b5:4c:1c:d5:d2:d1:a6:a2:ca:
d6:f6:d1:52:62:01:9d:42:4e:a4:47:4e:56:59:3f:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:9A:C5:BA:78:3C:C1:0D:30:08:63:80:D0:1C:94:59:E7:4B:80
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/w6yaxbp4PMENMAhjgNAclFnnS4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
65:65:9b:22:a6:ea:98:29:8e:51:bf:2c:65:f1:ca:c3:95:e3:
4c:c7:46:0a:3a:75:2a:66:f7:b8:29:eb:6f:52:b9:96:0d:e3:
33:37:4e:9d:f5:c1:fb:71:b1:dc:48:43:ea:0f:da:5d:7b:42:
d0:d9:78:e5:8a:1d:bf:2c:8e:ed:92:72:cb:70:6f:e7:88:0e:
be:0d:f9:d4:03:5e:e8:a8:e8:90:6b:a3:39:52:bd:73:e1:45:
65:cf:42:29:83:56:a6:73:62:11:68:42:8e:60:f6:41:2f:47:
a1:0a:d8:dd:50:8e:af:0c:2d:de:17:12:24:dd:ea:bb:e4:36:
29:7b:4e:dc:a0:98:2b:86:d9:67:70:b5:3a:b8:35:f3:ee:12:
a3:a8:07:6a:d6:34:74:6a:02:70:e4:e5:00:16:41:c8:3a:50:
cf:6d:83:3f:38:44:5e:65:fe:7d:cf:53:05:39:85:68:fc:bf:
51:7d:82:c9:de:f7:c9:e8:b3:67:c1:da:84:d2:36:82:06:d8:
b1:34:c6:ca:13:c9:33:93:00:d4:6b:9a:fc:59:50:50:d8:c8:
51:0f:8b:3e:69:8d:13:e5:26:8b:27:e3:ac:e2:72:81:69:d7:
a7:22:2e:b0:a8:28:13:9c:e5:e3:17:d2:02:a5:76:71:e5:10:
4d:94:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:37 2025 by rpki-client