Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/TKY5lCj60dHKI_CFmoUfMDmbTs4.roa
File: TKY5lCj60dHKI_CFmoUfMDmbTs4.roa (raw, json)
Hash identifier: g0koe4EIzkoFNvkzQu+b6eSbam1ZsYU/CJUsxe9a8qI=
Subject key identifier: 4C:A6:39:94:28:FA:D1:D1:CA:23:F0:85:9A:85:1F:30:39:9B:4E:CE
Certificate issuer: /CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Certificate serial: BC789C
Authority key identifier: B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/TKY5lCj60dHKI_CFmoUfMDmbTs4.roa
Signing time: Tue 26 Apr 2022 15:11:23 +0000
ROA not before: Tue 26 Apr 2022 15:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 146.19.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12351644 (0xbc789c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ebca1bf2aaae6361cc4c80f30eca6be265ecbd
Validity
Not Before: Apr 26 15:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ca6399428fad1d1ca23f0859a851f30399b4ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:76:dd:bc:75:c7:82:3f:01:84:e5:61:bb:
3d:7a:14:8b:74:2b:1c:58:55:42:39:9e:63:2f:6e:
38:25:83:57:53:1a:51:0f:1d:85:75:25:74:3c:09:
59:3a:c8:f2:6a:a3:a4:f6:c6:ea:5a:95:6f:cb:57:
e8:50:21:25:c8:d2:03:5f:40:eb:de:f5:c7:61:8a:
7a:38:1f:77:2d:d8:7b:61:bf:f3:da:19:5c:35:37:
4b:6c:d6:c8:bb:79:72:49:25:e7:10:fa:ce:f0:7d:
9b:8c:1e:60:85:a4:73:b6:01:34:6e:b4:0a:78:3d:
fd:c3:84:63:e9:eb:f0:fb:ca:fa:e8:07:be:0d:9b:
a6:ae:73:af:86:4a:59:10:98:b5:6c:cb:9f:ff:43:
06:78:94:a3:e2:40:57:ab:e8:f1:fb:f0:2e:ab:d1:
37:6a:17:53:03:ec:70:a0:04:60:08:90:9d:e9:5b:
15:78:e9:d8:a5:d9:0b:71:8b:62:67:dd:de:b1:84:
61:57:4e:3b:8b:87:f5:2a:01:fb:19:b7:73:ee:7a:
1e:e1:8a:2c:41:41:ca:55:36:9e:5f:5e:d2:c1:f7:
78:79:fb:d2:4c:51:ad:68:43:7b:37:ad:29:62:9f:
f3:dd:2d:b6:89:39:d1:f1:12:d6:ec:13:c9:14:9b:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:39:94:28:FA:D1:D1:CA:23:F0:85:9A:85:1F:30:39:9B:4E:CE
X509v3 Authority Key Identifier:
keyid:B6:EB:CA:1B:F2:AA:AE:63:61:CC:4C:80:F3:0E:CA:6B:E2:65:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/TKY5lCj60dHKI_CFmoUfMDmbTs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/55d7ee-15f3-49f6-80c4-b6440baa9459/1/tuvKG_KqrmNhzEyA8w7Ka-Jl7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3c:b8:9c:3d:60:10:20:d7:cb:25:c0:cb:92:b1:66:aa:fe:
e6:84:ce:50:43:8d:69:26:9c:bd:48:ca:15:03:b9:87:6c:4f:
66:e1:b8:ca:9e:87:b3:a5:2a:7e:78:62:e4:87:96:4c:38:fc:
05:38:e3:df:ae:80:4e:be:3f:32:23:26:e7:10:72:98:23:bb:
36:56:ff:46:e2:ba:3f:7a:2f:6c:e0:c3:d4:a8:be:40:22:3a:
3c:28:bf:7c:97:35:84:17:72:79:f4:4d:ba:c9:b4:68:38:00:
33:d8:7d:83:d8:44:b2:3c:12:fd:ef:91:99:1c:de:96:76:1f:
21:c8:ff:60:41:c6:97:96:c0:fb:96:71:16:81:9e:c8:9a:b7:
c1:a7:64:96:75:7a:6a:3f:4d:e0:44:82:38:85:18:c9:06:15:
51:39:51:0a:79:95:db:20:e8:a0:12:88:c3:f6:f1:04:76:7a:
c1:1d:81:b0:d7:94:20:f4:29:6d:90:0e:55:f3:cb:e7:94:b8:
ab:86:47:52:17:5c:0c:96:f8:9c:f2:24:38:6b:ee:7b:12:7e:
72:48:27:07:0c:94:21:5b:82:6c:3f:e8:82:ac:38:de:79:9d:
25:c5:ed:d8:15:c0:90:a8:db:9c:c2:5d:a2:46:2a:97:d9:98:
06:7a:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:26 2025 by rpki-client