Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/2M5zN6Ssfj41UBze5tBcFCxoG_I.roa
File: 2M5zN6Ssfj41UBze5tBcFCxoG_I.roa (raw, json)
Hash identifier: WokDLhnbJzCz/o5KDPaJTVBR9Mptv1+V2c9+YWPA+u0=
Subject key identifier: D8:CE:73:37:A4:AC:7E:3E:35:50:1C:DE:E6:D0:5C:14:2C:68:1B:F2
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 01856DB87B877A74CB18E6E1C187174CF1F5
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/2M5zN6Ssfj41UBze5tBcFCxoG_I.roa
Signing time: Sun 01 Jan 2023 14:24:44 +0000
ROA not before: Sun 01 Jan 2023 14:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:7b:87:7a:74:cb:18:e6:e1:c1:87:17:4c:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Jan 1 14:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ce7337a4ac7e3e35501cdee6d05c142c681bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:d9:f4:5b:f9:86:9b:ab:88:a5:d7:9f:bf:
8c:82:47:17:a3:c5:98:ef:ac:02:82:25:4c:ac:24:
df:59:66:17:79:2c:1a:7d:9f:bb:e1:4b:38:39:dd:
36:50:26:96:79:c0:89:ce:1f:9d:4b:63:a8:54:30:
d5:8a:10:23:ba:70:54:e2:64:57:4a:3f:59:87:0e:
8a:ab:35:33:5b:b0:a9:f4:59:69:3a:84:a9:20:c9:
62:f7:d5:58:ab:1f:e6:0b:f5:aa:9c:3d:76:76:6c:
6a:b0:90:f3:d8:64:c3:81:02:3d:be:ff:99:5e:4d:
3e:aa:7e:37:e6:b3:52:2b:0b:58:12:78:1e:91:6f:
9d:e2:7d:5b:5b:ad:c7:79:9f:05:f3:1e:7c:08:4b:
48:52:a8:87:6a:8b:6a:ed:06:25:70:70:8e:b2:e5:
b8:82:72:a3:5a:f3:1a:eb:08:3b:59:3f:d7:75:04:
f0:62:78:f6:31:50:21:0b:c0:a1:a3:e9:c2:95:95:
d2:cd:85:a3:2b:71:da:1b:72:c9:5d:d4:5d:48:d8:
c4:c2:18:bb:91:19:17:0c:38:87:2f:19:9c:9d:7c:
1c:14:58:85:23:33:1c:40:6c:7d:26:51:dc:3f:2e:
8c:e2:8c:55:fd:c0:74:2e:ec:2a:20:7c:67:83:2a:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:73:37:A4:AC:7E:3E:35:50:1C:DE:E6:D0:5C:14:2C:68:1B:F2
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/2M5zN6Ssfj41UBze5tBcFCxoG_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b9:8d:b2:02:9f:9b:ca:42:28:08:a6:28:4f:77:2b:11:d4:
13:41:d4:91:a5:b3:bf:e2:97:b8:24:d0:78:20:da:06:24:0c:
3e:7c:76:94:14:5f:8e:3c:39:dd:ee:4c:ea:9c:f2:3a:1b:cc:
ae:13:63:5b:91:bb:50:2a:67:e1:04:06:dc:75:2d:b5:5b:e9:
c3:16:82:ba:3f:3f:4b:bb:20:bd:fc:67:aa:81:55:94:d1:d0:
41:ce:f4:ab:ae:26:b8:fc:de:7a:e3:8b:79:bd:55:03:38:3f:
94:27:fd:98:0a:5f:13:4b:93:10:3d:ab:e7:2a:1a:f2:8d:5f:
49:fb:af:5d:61:d2:df:02:27:64:dd:63:49:c8:3f:2d:fd:9f:
68:69:e9:42:41:a1:19:2c:cb:5f:3d:67:67:a6:28:2c:de:29:
07:c2:d2:c5:6c:1c:7b:86:75:41:17:29:99:4a:63:14:0c:4b:
12:9a:06:21:7e:09:1d:5a:f5:a4:16:75:16:d7:4c:8b:fc:19:
a9:30:f2:19:8c:f6:2b:b1:a1:14:a7:5e:b6:51:66:6d:21:8f:
a1:0e:d0:5d:cd:68:51:02:38:18:48:4d:15:ad:85:d8:3b:40:
62:b0:2a:0d:db:64:8e:25:9c:7c:67:2b:f2:de:06:b9:c6:9f:
28:21:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:26 2025 by rpki-client