Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa
File: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (raw, json)
Hash identifier: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=
Subject key identifier: E8:D5:8F:E1:29:99:60:82:86:AC:C2:87:92:21:D8:6D:9E:89:E4:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019427B59DB0DC07F0CAF4085EF0C2248B76
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60893
IP address blocks: 146.19.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9d:b0:dc:07:f0:ca:f4:08:5e:f0:c2:24:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d58fe12999608286acc2879221d86d9e89e48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:c1:f5:d7:e7:0e:2e:01:91:71:f6:c9:61:
56:b9:81:df:4a:1d:9e:aa:d5:3c:53:33:7d:c7:73:
03:cc:4a:c1:2f:f9:9d:3f:04:50:cb:01:d7:65:01:
aa:4e:9e:e9:95:c4:b9:8c:89:24:2c:97:de:62:5d:
21:6b:76:c1:58:cb:1a:55:9a:1d:41:7e:89:d5:0d:
d6:e2:9c:97:08:da:9f:d8:87:bf:e9:73:ff:f4:97:
95:18:f2:1b:4c:28:b1:63:b7:dd:c2:d9:db:3b:91:
7e:40:55:aa:84:4a:23:3d:b3:3d:3a:5a:80:33:8f:
d6:8b:f7:27:36:ac:fc:99:25:fe:5a:55:e6:dd:d2:
da:62:a6:ce:c9:2f:97:27:91:fe:7d:6b:6a:a2:b4:
9b:db:46:f5:4e:d4:36:6e:e4:b1:a6:86:5c:f6:50:
d0:90:b0:1a:ec:8d:67:13:ea:17:88:76:de:2e:73:
7a:24:50:93:31:92:66:b6:93:ef:bb:ec:b3:46:28:
83:c1:59:e6:a3:70:34:b7:79:0a:3b:74:68:9c:8f:
00:29:76:03:67:a1:28:e4:81:23:76:72:b3:d9:4b:
e2:25:49:66:7a:61:5e:e7:65:37:fe:7a:14:2b:2b:
cf:d9:80:37:e2:3b:31:dc:ee:b7:ac:2a:c2:ff:5b:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:8F:E1:29:99:60:82:86:AC:C2:87:92:21:D8:6D:9E:89:E4:8E
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:be:cd:d9:ee:3d:8e:1e:35:6b:c8:6a:fb:b5:56:f1:73:c2:
f9:ae:d2:47:37:8d:6e:51:7d:82:ed:d8:9f:e4:a7:3e:a1:c2:
19:04:c5:df:64:ae:62:39:b4:57:96:69:fa:00:51:04:42:7e:
5a:c4:1c:69:a2:a3:36:ba:a2:c8:94:25:aa:75:de:08:bd:cb:
bd:0d:0e:b3:8f:e3:50:84:53:da:2d:70:e7:3f:11:c3:a7:2e:
81:a1:a9:50:57:9c:a0:c9:2d:34:10:be:38:0a:ce:f3:8b:31:
c2:e2:38:34:d5:ca:a1:d9:23:09:77:f1:d6:a8:f9:43:e0:75:
cd:75:49:a5:44:1f:2b:45:a3:45:ce:d0:55:bb:77:8c:cc:08:
4e:fb:c3:4c:70:8a:ed:ab:94:11:57:c7:1c:e0:98:ae:a3:54:
9f:13:c8:ac:40:22:66:4c:2d:2d:b3:c1:8b:e5:d9:42:f5:6f:
a9:5b:24:16:30:7d:47:ad:12:cd:5c:22:35:a1:4e:c8:42:24:
c6:31:fd:2e:25:f5:06:da:59:3b:86:21:4e:0d:20:79:c6:8a:
5f:ee:81:12:91:b6:f5:00:15:01:d4:5c:3e:5e:ef:f5:f0:f2:
27:f8:fa:c4:c2:da:fa:b7:2b:42:e1:f7:2b:37:bc:20:8c:3e:
86:66:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:55 2025 by rpki-client