Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/cHgsLum03vUPk1ZqgWFlR06D1Gs.roa
File: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (raw, json)
Hash identifier: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=
Subject key identifier: 70:78:2C:2E:E9:B4:DE:F5:0F:93:56:6A:81:61:65:47:4E:83:D4:6B
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019423D7FA0AA62720EA8D82B608E7963A18
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/cHgsLum03vUPk1ZqgWFlR06D1Gs.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 146.247.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:0a:a6:27:20:ea:8d:82:b6:08:e7:96:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70782c2ee9b4def50f93566a816165474e83d46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:48:ea:37:bf:7d:82:d5:66:94:8e:d2:1b:
db:0b:fd:76:ed:d1:2a:51:ef:34:85:57:46:46:d0:
5a:5a:c9:83:e0:2a:7b:a5:3a:b0:c6:3c:da:a0:8f:
33:47:2a:98:6f:45:d7:1e:7b:4f:eb:95:c2:95:62:
7a:3d:96:db:f9:c1:da:20:98:31:ed:e5:64:92:68:
de:2a:8e:fe:3e:ed:e4:cc:09:77:46:e8:30:b3:c8:
d2:0f:59:06:b4:88:75:43:f3:ff:04:a6:62:e4:6b:
1c:ec:7f:08:ae:a2:5a:d4:dc:70:7c:fb:21:74:0e:
ff:b8:2d:49:e4:c4:17:bd:7e:ec:c0:88:15:56:63:
a5:1c:0d:83:6e:26:da:38:90:4a:c4:c6:c3:11:c0:
bc:3f:e8:a4:b5:fa:ef:ac:2a:83:9f:5f:26:66:3a:
78:f7:b5:49:50:4f:8c:63:89:bd:b4:46:09:23:15:
8a:20:50:f5:18:7e:33:02:f3:48:da:a9:75:7f:2a:
0e:47:a7:ab:13:85:bc:a2:9b:af:fb:03:a1:5c:7b:
92:e0:41:57:b0:ba:10:72:5c:9d:b4:c1:d2:f5:ca:
f9:bb:13:24:37:48:33:e4:ff:7c:82:2a:91:46:da:
69:6a:3d:54:fe:53:da:1f:40:49:b9:df:a0:61:af:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:2C:2E:E9:B4:DE:F5:0F:93:56:6A:81:61:65:47:4E:83:D4:6B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/cHgsLum03vUPk1ZqgWFlR06D1Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5f:34:87:c5:6a:d9:fb:83:fa:99:6e:82:54:a9:45:cf:b2:
f6:ac:75:34:fa:7c:c4:56:bc:99:eb:ac:88:3a:d2:96:4c:26:
8f:3a:68:f2:e6:3b:99:73:6e:1a:9f:ff:18:60:da:37:9e:b8:
6f:ef:ec:a8:6d:2d:ad:bf:9a:cc:82:14:85:4e:1d:26:86:9a:
df:01:32:af:c7:8f:53:f3:f5:30:85:01:2f:61:42:14:62:01:
bc:62:ee:a5:04:97:c8:d9:63:91:53:51:96:c5:99:95:7d:ba:
14:8d:fa:74:d5:3e:bc:83:43:93:54:8d:3c:23:01:f3:df:d6:
eb:8c:33:6a:bc:56:f3:2f:03:ac:61:85:1a:2b:fc:b8:d2:3b:
13:cf:80:25:7b:ca:18:4c:34:ab:3e:8f:d2:98:b0:d0:45:e6:
51:5c:25:a4:00:2d:9a:12:3c:e2:1b:34:83:88:c3:17:fb:b5:
ad:5b:35:dd:e6:69:06:2a:e9:2d:e1:d4:3d:96:79:5f:4b:6c:
29:b7:84:e6:81:c4:7d:4a:2b:4c:15:6e:00:ab:e1:31:24:cf:
38:a9:b8:04:ec:92:80:c7:67:51:4b:7d:33:03:ea:27:55:5a:
90:99:cd:5f:73:17:09:c7:17:ba:27:88:8e:a9:69:b5:35:ac:
ef:50:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:27 2025 by rpki-client