Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/dQnT2tHeVefXaNZvWEt-qtGMaHU.roa
File: dQnT2tHeVefXaNZvWEt-qtGMaHU.roa (raw, json)
Hash identifier: AxD1+zGwcgvgIk8NS+raMI5UQOuz50AZD6UERphWAr4=
Subject key identifier: 75:09:D3:DA:D1:DE:55:E7:D7:68:D6:6F:58:4B:7E:AA:D1:8C:68:75
Certificate issuer: /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial: 70A6CD
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/dQnT2tHeVefXaNZvWEt-qtGMaHU.roa
Signing time: Sat 01 Jan 2022 03:53:57 +0000
ROA not before: Sat 01 Jan 2022 03:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209235
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7382733 (0x70a6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Validity
Not Before: Jan 1 03:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7509d3dad1de55e7d768d66f584b7eaad18c6875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:a3:c1:46:c1:17:26:9b:69:2f:6c:eb:15:
bc:7c:9b:68:6c:09:4f:e2:56:3a:77:18:47:a3:28:
e2:81:04:c9:c4:2b:d9:93:6c:be:68:6d:5e:2b:0f:
1f:d2:ee:f5:83:23:53:c4:7d:3b:04:bb:97:7f:c3:
50:58:fa:6e:68:6b:e3:33:fa:11:24:a7:f9:c5:2c:
f6:a4:7b:71:1b:5e:8e:48:cc:6b:54:d1:b5:b1:9e:
d1:f8:6d:88:b4:b6:f0:f7:40:03:e4:19:d8:b0:b5:
87:1a:8a:f6:2e:f3:64:0e:41:1d:de:88:eb:30:a4:
af:db:e5:3d:1a:08:ac:3c:24:89:33:91:d3:3c:f4:
b8:b9:92:3c:75:71:ba:77:7e:b1:08:af:7c:be:b5:
fc:0d:2f:59:a4:9e:0c:7a:3e:dc:96:aa:a7:d4:ae:
59:ee:94:26:79:d9:ef:48:f0:5b:ad:e0:f7:fb:2b:
04:d1:6e:93:09:6b:94:04:91:5b:55:4d:22:6c:59:
0e:0d:d5:ac:94:7e:b5:4a:4f:a7:2e:4c:aa:4e:b7:
18:b8:01:96:9a:35:e0:ba:8a:89:8f:5e:e3:6a:0d:
2b:54:f2:75:d3:88:99:46:ff:86:6c:c0:96:b2:6d:
e3:3f:8b:b5:28:eb:02:52:72:5c:0c:6d:14:c8:42:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:D3:DA:D1:DE:55:E7:D7:68:D6:6F:58:4B:7E:AA:D1:8C:68:75
X509v3 Authority Key Identifier:
keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/dQnT2tHeVefXaNZvWEt-qtGMaHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:44:4d:b6:33:8b:25:4e:23:78:96:91:4f:f7:ea:f3:b6:6d:
36:e2:af:61:48:b6:88:de:da:27:80:ce:7f:cd:a7:99:0b:d5:
b5:76:93:67:39:dd:ca:d3:e5:7b:a8:1b:86:a4:2e:4e:9f:9e:
ad:7d:e0:6e:ad:33:92:ca:b4:dc:37:73:df:b0:f4:9b:53:ed:
21:95:07:61:08:d4:4f:3d:16:32:87:ce:5a:36:d7:77:ad:ea:
79:81:3a:87:47:8e:c0:fa:88:8f:b9:2d:bd:7d:46:a9:73:0c:
83:e4:ef:6a:89:93:81:1f:05:f3:b0:ef:a5:9d:c2:d3:18:7a:
a5:3f:dd:7d:ea:3b:ef:af:d3:6c:49:3d:99:94:9b:44:58:0f:
83:c5:b3:98:c7:0e:7d:5c:4a:9e:e9:30:ad:f9:bd:66:5e:de:
98:dc:f3:56:7f:8e:95:90:d0:91:25:ef:26:74:03:14:7f:b4:
d0:54:86:90:05:fc:a0:26:5d:f3:4e:dc:e7:0d:cc:05:8d:95:
3d:97:42:aa:0c:4c:48:f9:de:a5:69:b8:f0:11:94:0f:00:28:
81:57:0f:57:7a:0d:b4:cd:bf:02:30:ef:62:02:2c:e4:5a:35:
3d:82:ef:bf:d1:4b:8a:8f:85:03:da:58:68:81:81:2b:a1:1e:
fe:b9:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:24 2025 by rpki-client