Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa
File: mU3FZeC6E1rGHiitAF-Nu200MO4.roa (raw, json)
Hash identifier: y8bUKQW0VQRV65K6GfDZrKwbsCfO8o5TzidrxbxeG9M=
Subject key identifier: 99:4D:C5:65:E0:BA:13:5A:C6:1E:28:AD:00:5F:8D:BB:6D:34:30:EE
Certificate issuer: /CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Certificate serial: 01856F8244C7FAE433F647E6740F3CB47B7E
Authority key identifier: 04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa
Signing time: Sun 01 Jan 2023 22:44:46 +0000
ROA not before: Sun 01 Jan 2023 22:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:44:c7:fa:e4:33:f6:47:e6:74:0f:3c:b4:7b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Validity
Not Before: Jan 1 22:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=994dc565e0ba135ac61e28ad005f8dbb6d3430ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:ff:f4:d4:cb:a4:70:55:45:ad:d6:8f:d5:
c9:0c:2d:b0:9c:03:77:9c:97:d2:04:d4:cf:ed:ed:
25:9d:20:f7:1c:a3:ae:ea:33:5e:2c:1a:f9:f8:f7:
40:d2:71:22:fb:fd:cd:16:0b:45:3d:35:53:70:e1:
11:3e:cf:70:af:43:50:3b:a7:54:0e:5b:10:11:f8:
6b:06:7b:10:6f:cb:41:86:77:e7:70:d3:98:2e:29:
41:02:68:83:a8:ca:fb:31:dc:c5:67:06:0a:3b:30:
a3:49:41:3e:93:7f:4d:d1:05:51:05:14:2a:98:79:
5f:cf:7c:0b:18:1b:aa:45:58:06:3d:96:3a:f5:81:
de:9c:74:cc:53:1d:02:f8:91:9a:43:9f:03:56:ce:
8e:9b:5b:29:d3:e8:9d:fb:4b:62:c0:e4:a5:d5:37:
7f:7a:07:d7:52:50:fc:cc:cd:fd:c0:ee:3d:8e:b2:
e0:13:48:81:1f:59:f2:4e:0e:b9:4d:17:e6:24:62:
68:54:20:37:a9:ec:fe:5d:37:d1:8e:3e:68:36:9c:
18:0b:37:5e:d5:62:21:71:66:ef:4c:8d:79:11:16:
ba:1c:f1:ce:1f:18:3b:27:e4:ab:17:c8:04:0d:74:
05:89:0b:ed:80:ee:db:4f:fb:24:63:86:2b:e1:28:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:C5:65:E0:BA:13:5A:C6:1E:28:AD:00:5F:8D:BB:6D:34:30:EE
X509v3 Authority Key Identifier:
keyid:04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.61.0/24
Signature Algorithm: sha256WithRSAEncryption
69:aa:a9:9f:0f:7b:7c:b1:39:54:79:44:b8:58:4f:06:20:92:
e0:e4:1c:f6:49:9f:4e:92:15:37:07:17:dc:b5:a8:94:99:9b:
dd:b9:5c:18:98:02:f1:03:bc:d4:87:a6:7e:b2:3d:da:23:12:
31:a3:5f:0e:fa:60:b4:31:31:ce:d0:6e:44:1b:5a:e7:17:20:
b6:5f:d6:90:e9:b3:be:d3:28:3b:54:15:5e:6a:a7:9c:11:01:
4e:f6:ff:5a:9d:95:ba:84:2b:d0:21:3a:06:3e:01:1c:ea:ac:
64:db:de:ed:2a:0d:c7:9d:6b:d6:57:60:c2:c3:fc:7b:e8:32:
32:71:16:7e:1d:38:51:28:3c:94:49:89:22:3c:1d:ad:0e:27:
b4:ea:f0:f1:9f:74:da:36:cf:ff:a3:c8:a3:20:20:c1:f3:94:
95:bb:9f:d1:e5:73:16:c0:7b:d5:41:55:f4:2b:0e:3b:dd:6b:
e0:89:48:4a:34:bd:42:13:03:1c:e5:f9:f7:b0:b1:ad:7b:3c:
b0:06:d9:9e:bb:86:5d:f4:aa:4c:03:70:b7:ba:80:86:6b:50:
f2:02:07:4f:71:6a:61:a3:87:33:b4:c3:3f:47:11:5a:aa:64:
c4:96:db:32:ce:28:0a:d6:27:99:78:d5:76:a8:24:3a:3b:2d:
f7:0c:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:36 2025 by rpki-client