Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa
File: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (raw, json)
Hash identifier: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=
Subject key identifier: 94:D6:C4:D5:88:31:A8:90:9C:DD:C1:C8:DA:F5:E9:5E:5C:B3:FE:73
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EBD0EB03AAE4AA5F07BC8AAA0F34
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19437
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:eb:d0:eb:03:aa:e4:aa:5f:07:bc:8a:aa:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94d6c4d58831a8909cddc1c8daf5e95e5cb3fe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:5a:26:c3:33:43:85:58:41:f8:0e:5f:ac:
b4:f0:00:5d:89:b8:64:12:2f:e0:80:0a:ce:eb:74:
ff:d9:c9:4b:b2:fe:68:ea:d5:cd:15:aa:a5:bf:04:
83:8a:2c:d9:5f:38:0f:a1:66:8c:53:c0:7b:ab:86:
db:28:16:af:c0:3e:2e:3c:d2:94:38:cf:ed:a3:a1:
46:da:ba:ea:f6:64:9f:ee:ea:8a:92:ae:5e:fe:0f:
7a:06:25:c7:46:ca:68:b2:b9:16:ad:81:c9:78:a0:
72:17:ca:87:79:2b:c8:e0:24:e5:84:9f:6d:2d:80:
9a:96:13:41:22:7e:97:de:11:d4:f5:e5:76:4e:de:
2c:87:5f:ab:04:7a:88:cf:67:08:04:fb:c8:be:ed:
75:30:e8:80:9d:36:b9:50:64:83:56:ab:d8:d9:34:
e8:87:ee:bf:7b:69:f1:37:21:ae:62:69:35:43:cd:
9a:b7:d2:01:13:ac:a6:ed:bb:db:86:f8:e9:76:0f:
6b:0e:08:06:de:53:90:a5:e3:96:0c:9c:df:c2:79:
a9:87:b7:e1:97:ca:1b:07:98:b8:ca:3e:f2:91:36:
e6:72:01:5a:74:f2:e1:93:c0:a6:60:35:d8:28:37:
fc:bd:41:e4:da:b0:de:c1:c3:c1:a3:e6:1f:37:97:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:C4:D5:88:31:A8:90:9C:DD:C1:C8:DA:F5:E9:5E:5C:B3:FE:73
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
14:61:a2:83:b9:f3:ff:db:e2:fe:ee:fe:8c:de:05:fb:ca:a3:
3f:b7:85:a1:a1:cc:7a:78:13:89:99:a6:72:54:e9:c3:93:62:
fb:a0:4a:81:94:83:49:8b:21:ba:af:6f:12:db:5f:d1:1a:c1:
4d:c9:6b:42:f6:2a:38:0b:8b:e8:f8:97:0a:fd:08:85:86:ca:
57:ce:e8:7c:d2:3d:f9:a9:23:07:40:37:39:26:ef:3f:33:4e:
40:57:4a:c9:24:7f:25:ff:77:97:33:3b:c3:ee:2d:10:ad:32:
ec:93:67:3e:c0:d8:4d:b0:2d:63:cf:cc:8f:be:8c:2b:2c:f6:
84:66:0d:fe:ee:63:a4:c3:b2:5e:1e:cf:b9:dd:05:36:4b:12:
48:4f:b9:1b:57:82:ab:2e:93:77:8d:bb:82:71:cf:c1:80:31:
26:32:c2:38:3c:79:ed:f7:9c:79:9b:79:05:9a:96:6a:66:fc:
f2:ba:be:88:55:d5:81:1d:bc:d2:e1:19:86:9a:9d:90:a3:3a:
61:8d:5b:1b:a1:c7:d8:13:de:d8:b0:ac:20:8b:33:88:91:03:
f0:2e:f3:51:c7:25:df:d9:fb:3f:3b:10:32:6b:8c:9e:63:20:
66:63:1b:72:80:a5:54:c4:5d:01:2b:dd:f5:c7:e4:74:83:a7:
a3:91:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:43:47 2025 by rpki-client