Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/No5JxRUpGZsjzT3bSqbzIxlfZG0.roa
File: No5JxRUpGZsjzT3bSqbzIxlfZG0.roa (raw, json)
Hash identifier: f5Og0oQ+R/Nqvowl7q/VnvSkiDctchx3DV1MkOTQcG8=
Subject key identifier: 36:8E:49:C5:15:29:19:9B:23:CD:3D:DB:4A:A6:F3:23:19:5F:64:6D
Certificate issuer: /CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Certificate serial: 01852BD6A74F149C4C9B62600009426A35BF
Authority key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/No5JxRUpGZsjzT3bSqbzIxlfZG0.roa
Signing time: Mon 19 Dec 2022 19:22:45 +0000
ROA not before: Mon 19 Dec 2022 19:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207709
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:d6:a7:4f:14:9c:4c:9b:62:60:00:09:42:6a:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Validity
Not Before: Dec 19 19:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368e49c51529199b23cd3ddb4aa6f323195f646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:f4:a6:1f:6b:af:48:a2:ac:4b:06:c5:95:
7d:73:18:fc:d2:97:70:cd:2f:9b:59:69:18:17:0f:
23:c7:41:a7:88:5f:bc:e7:24:97:d6:a2:73:91:d6:
27:02:d3:5d:55:b5:bf:af:a9:e4:60:ca:a8:26:7c:
6a:34:f4:bd:bb:9b:f9:26:54:fa:72:b1:a1:0a:ac:
cd:14:bf:bb:51:41:63:29:03:1f:21:9a:95:dd:be:
35:cb:74:e2:a9:d1:34:d0:f0:0a:c3:ba:26:d8:51:
8c:71:8d:81:69:01:26:dd:46:a1:f6:9e:ea:81:b5:
a6:00:68:b6:74:c2:c2:52:7a:f4:70:47:8e:b8:0d:
37:63:32:cd:04:1d:37:a8:0d:24:ff:b7:8c:b3:d3:
6f:1d:24:3b:0b:85:a4:b5:f3:a8:26:54:df:f2:1a:
9f:5c:b7:4e:c5:2d:fe:0a:cd:19:e2:6b:c4:86:b4:
9f:86:05:e6:5f:34:a9:d5:74:7f:f6:2b:49:47:1a:
74:dc:23:7a:04:90:da:e3:80:56:b0:95:ea:42:ae:
95:a5:33:39:dc:3d:56:bc:9a:d5:49:7c:40:44:85:
13:14:d3:38:29:3e:c2:64:f9:c3:61:63:9f:b1:a6:
1c:6a:67:e8:a4:1c:46:97:2a:cf:1f:1f:3f:9a:1d:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:49:C5:15:29:19:9B:23:CD:3D:DB:4A:A6:F3:23:19:5F:64:6D
X509v3 Authority Key Identifier:
keyid:4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/No5JxRUpGZsjzT3bSqbzIxlfZG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0e:69:ea:d9:0c:d4:fb:9e:29:e0:47:a5:f3:eb:12:6b:2a:
21:b0:f0:ec:03:ec:bb:eb:00:23:31:9a:43:8a:1f:3d:ce:2f:
bf:0a:a2:4b:08:93:5a:c3:13:e1:df:75:ea:e6:ef:e3:1c:b5:
bb:db:cc:13:9b:32:89:2a:8f:33:e2:b4:35:a1:79:74:66:0c:
d3:fa:3b:e5:46:bc:9c:40:d4:19:bd:cb:79:8f:8f:bc:7f:51:
de:59:65:32:16:81:0d:ff:fb:cd:48:d1:50:e5:73:7c:20:5c:
bb:5a:eb:bc:c2:14:39:b2:74:69:18:34:00:c8:fd:c2:4e:88:
35:66:37:2a:85:12:6c:b8:14:72:46:a7:77:b1:1c:ad:08:35:
ce:c0:8b:64:67:52:68:0a:17:1c:13:0b:d7:44:8d:bd:15:89:
db:50:03:b4:92:1c:a6:e2:b6:92:a8:af:a3:1d:46:81:75:98:
57:c8:52:f5:75:a8:f5:73:c4:75:26:9f:42:46:77:b0:aa:9c:
71:93:3a:f7:67:8f:e0:f7:dc:cb:47:62:fb:9d:bf:9a:64:30:
32:2a:18:c5:65:f5:78:5e:a9:ba:c4:fe:02:22:92:0f:77:e9:
c7:0f:b8:05:30:eb:e2:42:6f:3f:10:5f:43:53:af:04:60:ec:
dc:8a:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:07 2025 by rpki-client