Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa
File: Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa (raw, json)
Hash identifier: 1oHMUjP5fT2oRpZ2oDZml7Pt/rd251lsV9WWMI+BlAk=
Subject key identifier: 4A:CC:F4:2D:FE:C1:83:3C:E3:22:CD:85:7B:64:D3:50:36:9B:95:D1
Certificate issuer: /CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Certificate serial: F23B97
Authority key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa
Signing time: Mon 07 Mar 2022 17:31:21 +0000
ROA not before: Mon 07 Mar 2022 17:31:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15874967 (0xf23b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Validity
Not Before: Mar 7 17:31:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4accf42dfec1833ce322cd857b64d350369b95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:90:81:12:d2:09:46:ee:10:1c:55:1f:5a:
f6:89:57:01:9f:d1:6e:34:74:8d:bb:74:91:98:c7:
da:a5:d0:e6:2e:8c:30:36:87:19:80:f1:e6:1d:7e:
c0:45:85:7a:a5:86:b9:6b:ed:15:79:3f:96:fe:1a:
c4:9c:92:4c:6c:be:60:3e:a3:90:ac:08:22:9c:10:
05:36:f9:80:1e:14:2b:c2:73:9f:0c:a1:66:c9:4f:
36:48:62:72:c8:89:d6:a6:a2:72:23:f9:0e:a2:27:
49:d0:ce:1b:9b:01:f5:07:20:20:58:42:75:95:ce:
e4:e7:c7:a8:2c:b3:19:22:81:99:3e:18:38:0a:54:
10:b8:9f:8c:95:d1:89:0e:64:67:bd:d2:6f:c0:e7:
0d:48:6a:da:92:bf:61:05:a7:b9:3e:d8:b0:59:3c:
bf:5e:81:5c:e4:61:38:a1:4e:a4:44:bc:1d:e9:be:
05:ff:18:56:63:aa:1a:35:62:61:28:bf:57:95:22:
e3:d4:f5:d2:2e:5a:b1:02:1c:c3:ff:7a:e6:d5:c5:
66:9a:ff:d1:8e:6f:d6:86:1f:a2:e9:0a:6f:fa:15:
fe:70:a1:4b:a5:19:40:dd:b8:a3:52:4f:16:55:af:
5e:7d:cc:ac:f2:b2:5a:c4:54:de:3f:91:1c:52:93:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:F4:2D:FE:C1:83:3C:E3:22:CD:85:7B:64:D3:50:36:9B:95:D1
X509v3 Authority Key Identifier:
keyid:15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/Ssz0Lf7BgzzjIs2Fe2TTUDabldE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:60:a1:32:7b:81:c2:c6:48:ad:61:06:67:59:24:87:12:7c:
df:59:75:0f:ec:44:26:93:93:b8:93:b3:07:c0:40:4a:c9:5c:
cf:1e:0a:95:3a:4f:ba:06:17:f5:16:ff:6d:9f:3c:66:81:e7:
03:aa:ff:34:13:71:12:57:ae:a3:70:a1:db:09:ff:52:4c:3e:
59:f1:6a:1b:36:db:bb:3f:f2:06:06:4d:ba:56:da:3b:98:b3:
b7:dd:66:89:9c:b2:0a:bf:cf:7e:c8:1b:4f:d8:55:e0:cc:51:
66:c1:8a:36:7c:3d:62:30:59:9e:ca:62:51:a4:c2:b9:ee:c2:
0c:f8:1f:d4:58:21:7a:b7:08:b2:c2:4f:db:86:a4:f2:45:ed:
12:bf:8d:04:40:fb:78:c3:c2:79:f0:fe:be:6e:9e:59:a0:98:
b9:bd:ed:3a:8c:f3:d4:5d:75:84:86:1b:24:fb:06:70:de:a9:
19:00:70:78:4a:b3:76:b9:67:ae:c6:86:d6:01:1d:d4:62:52:
f4:5b:cb:d3:25:e0:f3:ea:3a:90:7f:b2:f9:d6:65:de:35:08:
8d:09:f6:91:a0:a4:e5:8c:9e:bb:66:26:a4:5b:53:71:73:cc:
e3:5d:f1:db:a0:c2:67:b8:ee:54:ad:87:42:16:62:3b:78:cd:
bd:84:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:07:32 2025 by rpki-client