Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/4o0KWseWILEzeOylrmLT5fYCtxg.roa
File: 4o0KWseWILEzeOylrmLT5fYCtxg.roa (raw, json)
Hash identifier: iTvJuel0Oza7WiUdbQ4grrRW1qEqQfxLUGniD8n0eXY=
Subject key identifier: E2:8D:0A:5A:C7:96:20:B1:33:78:EC:A5:AE:62:D3:E5:F6:02:B7:18
Certificate issuer: /CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Certificate serial: 0185719E889A4F917C8614D825BCE451A58C
Authority key identifier: C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/4o0KWseWILEzeOylrmLT5fYCtxg.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 146.255.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:88:9a:4f:91:7c:86:14:d8:25:bc:e4:51:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e28d0a5ac79620b13378eca5ae62d3e5f602b718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:40:e0:4d:0d:d4:a7:b0:e4:8f:83:3f:cb:
8c:77:4c:1f:a0:2d:1e:b7:64:2c:5d:10:1f:a2:eb:
e1:22:1f:0a:5a:2a:0e:c9:09:25:30:74:e8:f9:31:
15:8d:5a:b0:6c:24:f8:ec:36:46:28:be:6c:03:4f:
f4:64:9f:71:4b:fd:d5:f2:c2:b1:9b:b2:f7:e7:68:
13:03:e8:54:ea:c7:f8:da:1b:35:cb:17:56:65:34:
c0:a5:6f:71:3d:77:5b:3d:54:9b:79:7b:e6:41:0e:
ab:88:9e:01:27:1e:fc:78:64:c8:78:a4:e0:98:a9:
a5:a9:7e:0f:77:84:9e:95:d9:3e:07:fb:cd:6a:0a:
3e:6e:cd:c6:22:3b:6f:75:3b:8a:c0:0a:ac:92:a7:
1a:6a:68:a4:74:1d:29:6a:22:ab:72:96:e7:75:e7:
bd:bb:db:2a:8c:c3:ae:a0:d9:fc:e9:ba:ce:a5:98:
68:bd:21:28:56:74:a6:84:d8:52:2f:f3:e5:e7:d5:
cc:12:e9:65:9a:94:d7:c6:c1:0d:f9:44:c4:58:8b:
a9:ed:b1:aa:f9:f4:6f:3f:64:4d:7f:f0:6a:77:c5:
89:1e:7d:8f:d0:e0:19:cc:cc:6a:25:2f:e1:4c:93:
e9:71:b0:94:36:02:a0:92:9d:ad:20:51:19:9c:8d:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:0A:5A:C7:96:20:B1:33:78:EC:A5:AE:62:D3:E5:F6:02:B7:18
X509v3 Authority Key Identifier:
keyid:C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/4o0KWseWILEzeOylrmLT5fYCtxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:60:ea:9a:30:db:9f:bb:41:de:bc:84:8c:d8:32:3c:b0:dc:
8f:12:fc:7f:5c:ac:05:f1:a7:9f:b1:41:07:03:e9:14:a9:90:
fe:88:6e:5c:22:0f:82:81:6c:5e:cd:3c:b5:b9:0d:1f:67:5b:
b5:f1:45:ae:4b:02:e7:04:af:28:4f:08:3b:85:85:c5:48:74:
4f:b4:8b:42:2f:e4:d3:6d:17:8e:16:02:64:8e:12:de:e7:bc:
e3:e8:0a:d9:a9:42:d3:09:e8:52:02:e7:fd:60:8b:c0:ed:06:
69:ae:03:cf:48:9f:45:a1:5a:73:3c:25:a0:ba:de:3d:fc:21:
fb:c7:53:9d:44:a4:dd:b3:5d:6b:bf:b7:08:95:d3:88:6b:43:
36:46:ac:40:5b:69:17:79:97:f6:88:30:39:2e:c5:0d:0a:57:
88:c0:ef:88:ca:9b:5f:19:2b:a5:69:6b:04:00:14:b3:7d:32:
74:3b:b3:34:e4:4b:39:b8:8b:fa:5a:b2:bf:59:48:32:b3:17:
fb:60:79:c2:04:35:9c:28:24:a7:5c:c6:6f:26:07:85:f0:03:
cd:dd:0e:3c:31:1e:1b:66:c6:0d:12:4f:91:0e:f2:62:11:d5:
c4:b4:b4:7e:0d:80:43:aa:a5:32:c7:de:82:24:02:a3:e7:54:
a7:29:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:07 2025 by rpki-client