Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/6HwsdY4vKZWs8nWIaOXYGgcnjHY.roa
File: 6HwsdY4vKZWs8nWIaOXYGgcnjHY.roa (raw, json)
Hash identifier: pgbS1pumO/nPNIdvx1gUFKZ3JxZn77K4hJs9WKwiuyw=
Subject key identifier: E8:7C:2C:75:8E:2F:29:95:AC:F2:75:88:68:E5:D8:1A:07:27:8C:76
Certificate issuer: /CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Certificate serial: 01856F9DAC013B30D849B6AEC6EE719FE801
Authority key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/6HwsdY4vKZWs8nWIaOXYGgcnjHY.roa
Signing time: Sun 01 Jan 2023 23:14:42 +0000
ROA not before: Sun 01 Jan 2023 23:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ac:01:3b:30:d8:49:b6:ae:c6:ee:71:9f:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Validity
Not Before: Jan 1 23:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87c2c758e2f2995acf2758868e5d81a07278c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:9f:c1:21:95:a5:96:fb:e6:66:51:54:ed:
ec:56:fd:29:9c:27:57:05:92:0a:b3:c9:00:dd:6c:
68:a9:56:b1:a5:ef:e4:f1:0c:ad:aa:eb:be:a2:c9:
c8:65:ff:f6:04:e7:93:2a:83:56:58:23:3a:fd:11:
92:78:38:49:4c:f5:07:1a:b0:c7:c6:99:d2:83:e1:
b0:6f:02:ec:fd:d1:e5:88:07:11:e1:04:5a:cc:20:
ba:29:a2:1d:67:dc:e6:81:3a:aa:ca:fc:78:be:9e:
ca:7a:a0:02:46:6a:0e:15:f8:0a:0d:34:4a:e6:a5:
df:4e:29:0d:eb:a4:0f:80:3c:73:b3:ae:8d:4b:19:
60:07:c5:e3:f6:d8:bf:9a:36:9e:8e:47:2b:5c:80:
64:17:52:4c:ee:13:64:a4:d5:c8:2e:8e:f8:57:60:
08:a4:55:e3:4c:2d:61:8e:7c:6d:1e:ef:2e:d0:fc:
07:88:15:27:48:17:e5:d6:0e:ca:6a:91:21:b4:09:
ca:52:6b:24:bf:f3:4e:e9:81:f0:a6:8c:d2:9c:ce:
d7:93:93:69:82:f8:31:e7:b3:0e:89:b9:26:27:70:
56:93:f7:92:44:41:3c:bb:23:37:56:48:c4:b5:c3:
fd:e1:28:08:af:91:b2:12:7a:84:86:c4:e7:c5:59:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:2C:75:8E:2F:29:95:AC:F2:75:88:68:E5:D8:1A:07:27:8C:76
X509v3 Authority Key Identifier:
keyid:15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/6HwsdY4vKZWs8nWIaOXYGgcnjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.232.0/24
Signature Algorithm: sha256WithRSAEncryption
43:65:85:74:c0:74:21:14:a8:fd:69:18:59:c9:ff:86:fe:b3:
10:c3:24:55:5e:6d:b2:15:39:3b:56:2c:b7:1c:6f:9f:21:d2:
ec:77:27:93:1a:54:8b:81:54:90:c9:db:3f:19:71:87:59:86:
d4:77:ad:ce:98:c5:a5:e2:c3:25:13:69:63:be:77:22:20:36:
51:ae:4d:03:14:ed:7f:3d:f1:c3:aa:58:7a:3d:11:1f:c4:fe:
98:76:30:11:ac:77:4f:21:30:ea:0e:a9:d9:f2:c8:f3:17:6b:
86:0e:ac:c3:68:c4:7e:62:d8:18:37:00:d0:f1:fc:62:8f:4f:
3b:1a:cb:d8:d5:21:19:9e:0f:d9:dd:59:e2:e9:93:6c:d5:e0:
b7:fc:78:28:1e:9c:12:36:8d:85:0a:a2:e3:b0:f2:88:79:e0:
cb:98:ce:66:a3:cd:dc:80:36:7e:c7:18:36:57:83:c7:65:fe:
da:9e:37:fa:c2:65:1e:41:21:63:01:e8:f6:ee:13:88:99:cc:
49:82:3f:4a:93:8a:05:73:2e:37:11:12:c3:df:21:b0:1d:c1:
8f:bd:4c:43:61:e9:d4:95:0c:1f:b9:3f:58:2e:85:24:99:ff:
20:a6:0b:8d:8e:b4:46:dd:45:e2:2a:84:0e:af:94:28:81:8b:
0e:65:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:08 2025 by rpki-client