Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0Q7_BOnxjsplYcU63k4UrkOHbMY.roa
File: 0Q7_BOnxjsplYcU63k4UrkOHbMY.roa (raw, json)
Hash identifier: 9pEWlFmZS+jo56euVaT+I73a2u4sxRL/AjwHx8AvR/o=
Subject key identifier: D1:0E:FF:04:E9:F1:8E:CA:65:61:C5:3A:DE:4E:14:AE:43:87:6C:C6
Certificate issuer: /CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Certificate serial: 01856BF7EB140C0B16BE2C70873D614631B1
Authority key identifier: 25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0Q7_BOnxjsplYcU63k4UrkOHbMY.roa
Signing time: Sun 01 Jan 2023 06:14:47 +0000
ROA not before: Sun 01 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:eb:14:0c:0b:16:be:2c:70:87:3d:61:46:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Validity
Not Before: Jan 1 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10eff04e9f18eca6561c53ade4e14ae43876cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:30:08:d3:09:db:da:db:ec:8b:88:a0:ba:
9a:f3:09:04:59:b3:97:cf:88:24:1e:00:bc:f0:18:
22:3e:0c:3a:28:63:b0:a0:c2:33:94:b7:c7:30:38:
d8:a2:c7:ee:ab:c0:1a:0a:0c:e0:6a:b9:bf:73:80:
b4:80:c7:9f:df:e0:1c:1c:af:6a:10:ad:06:b8:65:
e7:a6:6f:6a:fe:86:a9:f7:86:3a:1e:e8:32:61:7e:
83:9e:7f:e9:c0:a6:d0:c8:14:1a:a4:fd:14:cc:80:
aa:f1:cd:da:21:98:10:0b:58:11:04:08:6d:4e:82:
3f:c1:07:e0:e5:7b:3a:09:04:4e:7a:ff:45:97:fd:
0e:74:dc:6b:49:52:7d:07:2e:e1:6c:3f:a2:e1:4a:
2a:54:5c:43:2f:fe:be:8d:78:b8:97:0d:ea:a1:69:
83:2e:ac:a0:83:f6:eb:98:d6:8b:ce:fa:b2:a2:1c:
2a:5b:db:c1:c6:c6:c9:60:ff:f9:0f:28:be:c9:d0:
e2:2f:89:ba:90:15:6b:33:e3:74:2b:9f:2d:77:1f:
73:0f:d1:32:31:1c:23:13:d2:3a:59:79:50:64:9f:
e4:23:8e:e1:3b:af:11:c9:aa:3c:01:5e:25:04:a4:
42:9e:c3:41:c1:70:b5:64:16:77:69:35:2f:d6:98:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:FF:04:E9:F1:8E:CA:65:61:C5:3A:DE:4E:14:AE:43:87:6C:C6
X509v3 Authority Key Identifier:
keyid:25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/0Q7_BOnxjsplYcU63k4UrkOHbMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:3d:98:cf:c7:c6:4f:9d:02:26:e4:d3:36:27:e2:c6:cd:
de:61:0a:df:8c:6f:83:b0:72:35:06:49:8b:5f:41:d0:ee:58:
63:8c:9d:a0:e3:8e:08:e4:91:fa:03:4b:ca:e2:e2:f8:2d:6d:
42:76:08:d9:51:38:85:74:e9:f2:13:ea:84:8f:ee:6b:be:98:
41:f8:b5:a0:25:b8:5f:71:78:85:b2:0d:75:ec:c0:84:34:39:
2c:41:4d:8f:77:d8:d0:86:c1:c9:04:e1:67:ce:76:65:4d:83:
45:f7:7e:66:d2:a8:2c:a7:50:7c:8b:5b:e1:3b:b1:4a:26:fd:
59:d5:41:26:c5:e1:c9:47:e7:fb:28:c4:c2:1b:51:c5:a4:2f:
0a:ca:c8:22:f8:5c:0e:78:8c:db:df:ee:6b:49:0d:3f:93:b8:
76:48:25:8e:22:02:a5:b3:5c:47:c0:dc:ad:c4:01:ae:9c:53:
1a:01:03:ab:99:01:cb:83:0b:ba:0a:49:97:35:54:ec:10:7f:
52:2f:d9:86:49:b3:15:6c:1e:be:f9:12:bc:73:ec:ae:81:d1:
94:51:a2:4e:89:96:2e:54:95:12:b1:0c:c0:0b:b4:67:31:c2:
eb:f3:15:c4:a9:db:00:76:b3:32:58:9f:79:f7:45:67:51:8e:
37:c2:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:06 2025 by rpki-client