Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/RGMT5W1wDjrnDGeGHnwqgxTTcXc.roa
File: RGMT5W1wDjrnDGeGHnwqgxTTcXc.roa (raw, json)
Hash identifier: 3CvnlZW/Lm0ddRhRT4zLyUJXQRKvKXeIz9W67FucY0U=
Subject key identifier: 44:63:13:E5:6D:70:0E:3A:E7:0C:67:86:1E:7C:2A:83:14:D3:71:77
Certificate issuer: /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial: 180B9772
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/RGMT5W1wDjrnDGeGHnwqgxTTcXc.roa
Signing time: Thu 12 May 2022 15:47:02 +0000
ROA not before: Thu 12 May 2022 15:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 46.249.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403412850 (0x180b9772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
Validity
Not Before: May 12 15:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=446313e56d700e3ae70c67861e7c2a8314d37177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:79:c8:e3:11:d2:04:3f:73:21:75:36:2c:
38:8b:a0:d4:94:1b:d7:dc:e9:6e:17:57:b9:cf:1c:
ce:dc:69:d6:91:b5:f8:76:c6:cf:05:a9:55:13:70:
db:19:bd:ff:c8:5c:2b:6d:a4:d4:5b:e2:36:46:81:
4a:02:ce:6a:d9:ed:d0:fc:51:0c:94:28:e3:9a:a6:
a5:59:76:ee:e6:0a:66:50:ed:a7:3a:09:1e:03:16:
69:e9:74:f2:86:b0:c8:15:2d:3b:ee:af:80:5a:ef:
37:73:d5:36:06:82:ba:32:78:9d:22:fd:32:fc:c9:
a8:3c:73:4e:14:b8:1a:f9:ab:0c:09:73:c4:22:fa:
8d:f7:f5:b6:ed:20:2e:f8:a4:94:52:a6:07:02:41:
a7:09:e1:1a:4b:d8:c4:65:c9:b7:70:23:71:6d:45:
89:90:f7:63:3d:62:4b:66:9b:ca:4b:1d:47:33:a8:
df:4b:8f:5f:37:55:41:16:8e:7c:ba:8e:7a:f1:c0:
fc:2d:f4:ec:7f:d3:ef:c2:dd:c3:ab:15:21:66:b2:
5a:91:69:b3:c9:b6:0f:82:7e:14:03:59:c0:9e:6e:
47:2c:42:10:47:cf:0b:80:c1:4e:62:12:b2:2a:9c:
d6:77:3e:71:ac:a2:c4:81:2a:9e:fb:30:88:2f:65:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:13:E5:6D:70:0E:3A:E7:0C:67:86:1E:7C:2A:83:14:D3:71:77
X509v3 Authority Key Identifier:
keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/RGMT5W1wDjrnDGeGHnwqgxTTcXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.64.0/19
Signature Algorithm: sha256WithRSAEncryption
76:10:29:d0:ef:ab:1d:8c:1f:ba:f6:f6:92:78:fa:73:63:0c:
18:56:ca:19:24:d4:9b:5c:e4:77:d8:1e:4a:06:17:74:c6:d5:
06:b8:6e:1a:8b:68:b1:31:94:67:75:78:92:29:75:5e:47:bb:
6f:a9:6d:55:55:e1:9c:0e:34:cd:7e:be:79:58:6e:94:f4:5b:
1b:59:78:8f:b5:47:bc:97:d4:16:af:47:bf:e8:d6:b1:ae:67:
52:c1:38:d4:33:73:dd:5f:bd:ac:a8:70:e7:a0:fe:95:c3:5c:
06:9c:57:77:e8:fd:0e:9c:c1:39:4e:6b:54:62:99:77:e5:91:
5d:46:6e:21:fb:a0:fe:26:b0:9d:39:f0:04:e4:e7:20:7d:2c:
c4:24:ea:8c:21:52:89:38:eb:7c:b8:d4:72:e9:71:8c:9c:d2:
5a:5c:c4:bd:4f:58:80:59:d5:8d:4f:db:3c:32:ce:6a:a3:d5:
8a:aa:c0:44:db:d0:d8:14:2c:92:5d:ff:aa:2f:f5:4c:45:69:
a8:70:27:50:a0:c7:31:ec:cd:a9:f7:01:bc:0f:f9:c3:89:b6:
cb:ff:46:7a:3e:3e:4b:08:3f:45:6b:f1:f6:ce:d5:75:28:54:
ed:a8:46:e8:dc:a2:e5:e1:c2:a0:16:c2:1f:be:d3:dd:47:cd:
53:8e:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:37 2025 by rpki-client