Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/HhkVkRmins85vLtIuNe_a-R91Wg.roa
File: HhkVkRmins85vLtIuNe_a-R91Wg.roa (raw, json)
Hash identifier: vU/rsPiZ9GMBqlHT8PR1GGRiXsyJRgnM/47Pa2j3iUQ=
Subject key identifier: 1E:19:15:91:19:A2:9E:CF:39:BC:BB:48:B8:D7:BF:6B:E4:7D:D5:68
Certificate issuer: /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial: 0185E4630F84481C4F9624897DB7D80BE904
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/HhkVkRmins85vLtIuNe_a-R91Wg.roa
Signing time: Tue 24 Jan 2023 15:26:15 +0000
ROA not before: Tue 24 Jan 2023 15:26:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:63:0f:84:48:1c:4f:96:24:89:7d:b7:d8:0b:e9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
Validity
Not Before: Jan 24 15:26:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e19159119a29ecf39bcbb48b8d7bf6be47dd568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:71:00:ac:9a:cd:5c:3c:40:e0:68:c9:6e:ac:
d1:b9:59:57:f3:5c:46:35:26:8c:8b:2e:23:06:78:
7c:29:57:87:4c:cf:da:f6:b0:5a:9d:d9:ed:15:f3:
38:cc:cf:9f:ed:78:c8:0c:39:b4:52:0e:e1:a4:32:
99:c7:da:a9:a2:9c:66:60:71:52:99:e5:5b:9a:be:
bf:45:07:02:34:2f:e3:d3:7c:6b:53:c1:6c:da:16:
1c:db:39:10:3d:ab:70:43:72:b7:6d:d1:0d:ee:cb:
be:80:9a:18:ce:69:ed:f5:83:7b:97:42:e4:dd:f2:
5e:b1:d7:0d:b0:73:00:e3:4a:0e:74:ad:8e:88:f9:
67:cb:c4:83:6f:92:9f:5a:8f:ac:24:2b:31:94:37:
c2:3a:23:f6:62:57:7f:7d:08:12:ee:2a:5c:7a:f5:
74:d8:dc:b7:34:9c:ff:f0:6b:24:e0:ed:e4:9f:7a:
7a:64:2a:50:5c:ae:d2:8b:8a:11:99:a1:2e:95:71:
a2:98:ad:1c:14:1d:7e:16:94:98:23:0c:f3:2b:a9:
74:47:d3:e8:d1:c3:d6:6b:c5:71:65:43:b3:24:1b:
09:97:a5:3c:58:53:f7:e5:21:fc:e0:f2:b1:5c:b1:
2a:ed:4d:80:90:f3:08:97:c3:7d:12:1c:32:af:ef:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:15:91:19:A2:9E:CF:39:BC:BB:48:B8:D7:BF:6B:E4:7D:D5:68
X509v3 Authority Key Identifier:
keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/HhkVkRmins85vLtIuNe_a-R91Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
58:56:ed:0f:a0:15:1a:f4:af:1a:99:89:ef:90:c9:09:6d:19:
6e:10:d5:bf:ea:dd:08:0c:2f:3b:6d:ee:c0:6a:ed:d3:70:77:
f2:19:8f:98:5d:49:27:c9:b9:81:a6:88:07:0c:e2:dc:e7:cb:
b5:11:70:03:61:bd:68:c5:74:68:f1:62:af:7d:52:f7:0e:3d:
d4:79:64:ad:cb:a3:cb:82:bd:f5:27:ba:6e:8a:80:12:71:25:
f8:07:95:d4:11:39:db:85:f1:7e:49:86:14:11:a5:9f:cd:51:
cc:3e:71:9d:c8:71:db:21:68:e6:6c:8e:e6:5c:97:7c:16:5d:
fc:e7:cb:5c:c3:ec:1b:c2:8b:a6:dc:a0:94:3e:aa:11:f0:49:
5e:68:fa:4a:fc:36:12:e6:c7:76:90:97:9a:51:27:2e:ef:79:
9e:b7:37:a3:61:bf:94:69:09:7b:d2:fb:bd:3e:6e:3d:a1:54:
c3:ca:43:89:d2:a3:a8:0f:22:ac:4a:33:81:ac:43:53:70:3a:
37:27:6f:ec:02:db:3d:d5:a5:5d:84:84:ff:a7:a1:84:3a:66:
bb:aa:b6:7c:f4:27:39:c4:e4:c8:16:1d:1d:c5:ed:af:85:fb:
df:ae:8e:5b:11:f6:46:36:c3:7e:3b:79:89:d9:b8:01:d8:d0:
27:16:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:05 2025 by rpki-client