Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/86oammqkU0TE8AzqwBVv1FmzBYc.roa
File: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (raw, json)
Hash identifier: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=
Subject key identifier: F3:AA:1A:9A:6A:A4:53:44:C4:F0:0C:EA:C0:15:6F:D4:59:B3:05:87
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019427470C571D8B26E1C348FF6CAFEBF9D9
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/86oammqkU0TE8AzqwBVv1FmzBYc.roa
Signing time: Thu 02 Jan 2025 13:49:15 +0000
ROA not before: Thu 02 Jan 2025 13:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0c:57:1d:8b:26:e1:c3:48:ff:6c:af:eb:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Jan 2 13:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3aa1a9a6aa45344c4f00ceac0156fd459b30587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:31:32:54:4a:3c:b4:e7:54:c3:0d:ee:0b:
5d:32:ba:3d:9c:fd:ab:78:fc:39:2b:fe:57:54:c6:
3c:0f:24:97:e9:61:c7:e8:bb:7b:4c:98:30:9e:4f:
64:ad:4f:46:3b:7c:18:63:42:6d:0e:e2:8d:c9:c9:
05:88:48:88:22:d6:f1:52:ee:81:2c:ab:9e:c9:4f:
ae:ac:b9:ad:ca:1d:ba:51:d6:ce:ee:2b:4e:9a:6f:
98:bb:81:81:74:55:36:46:e7:6e:28:b2:1b:38:c4:
f0:f2:7e:a5:02:9f:bd:42:c5:9a:52:93:90:83:cb:
27:b7:5a:3f:01:87:d6:fd:73:9c:5c:37:8e:ea:f1:
bd:ab:9c:82:4a:4c:28:80:4f:ba:54:8f:84:e0:06:
2c:dc:8c:5c:92:e8:e3:81:79:ef:e3:9e:2b:a8:2a:
29:3d:9e:d0:e2:ad:6d:4a:27:32:06:6f:a5:73:2d:
e2:00:d6:e3:a4:af:96:21:da:77:5a:f6:fd:15:0f:
e5:ee:c0:df:09:b5:b2:39:c9:1e:9d:f5:2b:77:cc:
b0:df:d0:aa:fe:29:c4:8d:96:f0:0d:22:b9:26:4c:
d5:34:a4:50:3e:f6:75:33:27:8e:2b:71:eb:1b:96:
8e:86:46:d5:2d:19:ce:fb:f3:8b:08:fc:72:4a:92:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:1A:9A:6A:A4:53:44:C4:F0:0C:EA:C0:15:6F:D4:59:B3:05:87
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/86oammqkU0TE8AzqwBVv1FmzBYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5c:61:b5:28:15:6b:77:cd:5c:1c:00:a2:e5:fd:c1:45:40:
fd:51:44:97:02:71:40:9c:2d:23:b5:7c:86:1e:85:9b:43:a8:
96:db:a1:55:f6:4f:dc:e5:ed:a8:35:f6:ba:57:9b:9e:1e:23:
2e:c7:5c:1f:23:10:83:7a:01:2f:9f:7c:9c:f5:82:33:73:b4:
10:fd:bf:47:ee:2d:82:89:89:03:2d:f0:df:6c:93:ae:ba:70:
06:ef:d2:7d:09:f3:52:77:0e:e2:3c:23:b7:3b:77:d8:20:55:
91:f0:0b:8e:df:c3:25:4d:87:d1:4c:9a:cd:3d:e0:30:52:1e:
c1:7c:a9:24:61:a4:76:ef:ab:23:ee:f8:01:b3:c5:6c:f1:51:
8d:f6:95:02:30:86:1f:20:76:e7:c3:2e:15:41:f9:73:e0:cc:
2e:88:ba:3c:95:ab:2d:cd:ad:3a:52:ab:4b:c3:d8:b5:e8:e8:
bd:b1:f1:55:64:1e:9e:85:d5:8f:e0:2b:b7:7f:05:4d:e0:97:
19:b3:c8:05:a7:76:f8:ed:c5:e0:51:45:98:40:86:28:ed:5a:
09:df:02:d1:22:1d:b0:45:f5:1a:4b:ee:9b:e1:84:78:06:85:
34:6d:ae:2a:61:eb:06:c3:f3:70:f5:4d:71:54:51:d3:f8:ae:
33:e7:84:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRwxXHYsm4cNI/2yv6/nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzM3YzZlMDYwMmJlMzgwNGUyNzc1ODBiYWI3ZTIxZTZl
MzM0NzQwHhcNMjUwMTAyMTM0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FhMWE5YTZhYTQ1MzQ0YzRmMDBjZWFjMDE1NmZkNDU5YjMwNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rkxMlRKPLTnVMMN7gtdMro9nP2r
ePw5K/5XVMY8DySX6WHH6Lt7TJgwnk9krU9GO3wYY0JtDuKNyckFiEiIItbxUu6B
LKueyU+urLmtyh26UdbO7itOmm+Yu4GBdFU2RuduKLIbOMTw8n6lAp+9QsWaUpOQ
g8snt1o/AYfW/XOcXDeO6vG9q5yCSkwogE+6VI+E4AYs3IxckujjgXnv454rqCop
PZ7Q4q1tSicyBm+lcy3iANbjpK+WIdp3Wvb9FQ/l7sDfCbWyOckenfUrd8yw39Cq
/inEjZbwDSK5JkzVNKRQPvZ1MyeOK3HrG5aOhkbVLRnO+/OLCPxySpJiuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOqGppqpFNExPAM6sAVb9RZswWHMB8GA1UdIwQY
MBaAFGlzfG4GAr44BOJ3WAurfiHm4zR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEt
ODM4YTQ1MDU3MzVhLzEvODZvYW1tcWtVMFRFOEF6cXdCVnYxRm16QlljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEtODM4YTQ1MDU3MzVh
LzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN6MA0G
CSqGSIb3DQEBCwUAA4IBAQB/XGG1KBVrd81cHACi5f3BRUD9UUSXAnFAnC0jtXyG
HoWbQ6iW26FV9k/c5e2oNfa6V5ueHiMux1wfIxCDegEvn3yc9YIzc7QQ/b9H7i2C
iYkDLfDfbJOuunAG79J9CfNSdw7iPCO3O3fYIFWR8AuO38MlTYfRTJrNPeAwUh7B
fKkkYaR276sj7vgBs8Vs8VGN9pUCMIYfIHbnwy4VQflz4MwuiLo8lastza06UqtL
w9i16Oi9sfFVZB6ehdWP4Cu3fwVN4JcZs8gFp3b47cXgUUWYQIYo7VoJ3wLRIh2w
RfUaS+6b4YR4BoU0ba4qYesGw/Nw9U1xVFHT+K4z54SU
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:15 2025 by rpki-client