Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/1okF6fOFXYAXKqpR4Q2nXbPsTtc.roa
File: 1okF6fOFXYAXKqpR4Q2nXbPsTtc.roa (raw, json)
Hash identifier: SyRs6eLdxIOjddbaACdm7VUFAgMHCYMszsJRytYpOa4=
Subject key identifier: D6:89:05:E9:F3:85:5D:80:17:2A:AA:51:E1:0D:A7:5D:B3:EC:4E:D7
Certificate issuer: /CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Certificate serial: 018605
Authority key identifier: B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/1okF6fOFXYAXKqpR4Q2nXbPsTtc.roa
Signing time: Thu 03 Feb 2022 16:59:17 +0000
ROA not before: Thu 03 Feb 2022 16:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 146.19.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99845 (0x18605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Validity
Not Before: Feb 3 16:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d68905e9f3855d80172aaa51e10da75db3ec4ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:b4:4b:07:88:dd:60:5c:dc:7c:f3:29:20:
a8:71:4f:6a:0c:3d:66:a4:30:b9:61:8b:35:b4:5f:
d8:26:9c:90:61:91:26:24:b3:dc:2a:1f:8f:ba:80:
7c:bc:90:29:8e:ec:0e:91:2d:2f:e0:01:33:e6:37:
80:f1:ee:3f:9c:8c:15:11:f0:61:fd:6e:60:82:08:
78:06:d6:52:ce:66:96:23:f2:85:d0:34:8d:df:8d:
e0:b0:f2:4b:17:a4:5e:45:3c:14:74:53:98:71:41:
76:c7:53:9f:a5:0b:cc:cc:e6:88:1e:a2:08:e8:2b:
f9:ef:fb:cb:c2:8e:03:1e:27:70:c6:ae:98:0f:76:
b9:57:4b:1c:20:b6:95:fc:87:77:43:fa:14:ba:44:
c4:98:f0:c4:66:f1:11:fe:a2:7a:7d:99:e3:28:db:
39:b5:37:7c:2e:c4:61:c8:17:88:e2:32:46:1c:3b:
76:43:b9:d2:85:19:df:19:18:9a:57:71:9a:0d:1e:
f2:ee:b9:ee:74:d0:a0:d3:e5:8e:d7:55:4e:fd:00:
f3:08:85:32:3e:e0:86:42:41:af:39:1e:b2:0f:78:
ac:fe:f8:d4:a4:f0:fd:79:ba:e9:f7:4c:89:bf:8c:
41:b6:27:45:55:80:18:b1:5e:b9:6f:4e:aa:81:9e:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:05:E9:F3:85:5D:80:17:2A:AA:51:E1:0D:A7:5D:B3:EC:4E:D7
X509v3 Authority Key Identifier:
keyid:B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/1okF6fOFXYAXKqpR4Q2nXbPsTtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:db:de:53:e1:97:28:6d:13:67:a4:d0:fa:e0:00:de:7f:
02:07:08:ea:e0:35:30:dc:96:03:04:2f:4f:93:b9:b5:6e:9d:
68:55:73:cb:f9:46:60:e6:ff:f4:75:5f:8d:7a:e2:99:6b:32:
44:b9:71:46:42:44:db:f3:79:4f:a0:17:e7:b4:72:1b:d2:d3:
56:e0:be:ec:71:8a:7b:f0:78:0d:2b:a1:f0:0f:16:47:1a:56:
4b:49:0b:ca:cc:73:93:07:ab:0b:61:09:18:f6:7e:7f:2f:64:
ac:de:b4:55:df:be:69:be:3b:9f:23:94:d4:51:26:09:81:cd:
80:09:af:ec:f9:c7:8b:48:3e:ad:0e:c1:3e:50:3f:6f:b4:39:
50:27:83:21:b3:6a:0f:b8:4f:3d:01:b6:10:04:2a:10:5a:9b:
25:fd:98:6d:e6:79:0f:df:e1:af:cb:1a:32:75:95:76:c5:5c:
4f:f1:8c:19:3a:75:ab:f5:06:cc:bd:1b:63:69:8a:7d:c1:96:
66:c5:d3:16:e9:8f:94:15:d9:49:8e:a6:dc:2e:5e:8b:96:22:
b6:c1:8c:4e:f7:6d:7f:91:0f:82:94:81:5a:b0:d2:2b:7b:b0:
43:1f:69:10:9d:c1:63:fe:6d:d4:ab:2b:d1:af:8e:b2:ec:90:
4d:45:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:53 2025 by rpki-client