Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/VS6A9Nbd5sl9Hf2TdN7cMgdngfY.roa
File: VS6A9Nbd5sl9Hf2TdN7cMgdngfY.roa (raw, json)
Hash identifier: Svc2ldKL+Y1ZgSQNM8lK7XoXfQs5duEl69yOb3AypNo=
Subject key identifier: 55:2E:80:F4:D6:DD:E6:C9:7D:1D:FD:93:74:DE:DC:32:07:67:81:F6
Certificate issuer: /CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Certificate serial: 018820867278487C3F90CC6305E024B7341D
Authority key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/VS6A9Nbd5sl9Hf2TdN7cMgdngfY.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:78:48:7c:3f:90:cc:63:05:e0:24:b7:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552e80f4d6dde6c97d1dfd9374dedc32076781f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:3a:d4:09:c2:0a:c8:4a:f4:c4:74:3d:10:
1f:cf:95:0b:48:39:f3:1a:39:16:66:24:03:69:ed:
d1:47:40:9d:76:06:6e:02:c7:0a:f4:a1:1f:8e:72:
ef:ca:b2:e1:c5:e5:93:3e:f8:95:66:09:7b:dd:69:
e4:b1:af:41:ab:f9:cb:50:0a:0c:ac:a0:bc:91:3e:
3d:ab:2c:7b:a7:94:c2:c2:31:ad:b8:38:c2:d3:9c:
db:ad:07:9c:c4:e6:26:d9:f2:f4:9d:7c:7e:cb:05:
8b:f1:86:f3:fb:6b:9f:79:a9:f4:a6:32:b3:be:e6:
8c:8a:ce:b8:36:9d:b3:3c:ec:24:c3:2d:c3:79:c8:
73:be:03:1a:0e:87:44:50:fa:01:08:ae:6c:0c:6e:
87:8f:26:1a:44:0a:1f:f5:32:e6:3c:79:45:1f:69:
73:bd:90:9f:05:ab:05:d3:34:b3:63:02:74:4b:95:
e6:f3:af:83:d8:38:de:3d:5c:2a:9c:69:da:95:4e:
fd:ec:13:77:7d:1a:38:cc:23:48:7e:a0:f3:0c:b0:
3a:97:13:02:9d:2c:2a:08:49:08:45:8d:5e:db:eb:
35:5f:b9:5f:d3:da:a3:25:0c:69:55:17:16:d8:50:
0d:ed:80:72:f1:0c:01:24:4c:02:ee:52:5a:90:5a:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:80:F4:D6:DD:E6:C9:7D:1D:FD:93:74:DE:DC:32:07:67:81:F6
X509v3 Authority Key Identifier:
keyid:15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/VS6A9Nbd5sl9Hf2TdN7cMgdngfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ff:ae:e7:ee:43:93:82:86:3e:6f:c4:d4:a8:79:82:29:df:
28:c6:44:4c:ac:5d:c3:d5:80:b4:69:8f:e8:c5:f4:0b:ab:bb:
01:19:ca:39:29:18:a0:bb:35:dd:42:fa:42:7a:4d:84:85:c6:
29:41:29:4e:0c:10:5a:e8:e1:29:eb:45:22:8a:4a:b5:d9:b6:
60:4b:c4:77:c2:4a:13:ac:a7:b7:22:6e:85:fa:6b:32:e7:f3:
8b:93:bf:14:5a:c8:b3:0d:f3:d6:6b:02:69:a3:f9:9e:c2:e8:
52:df:95:3d:bb:fc:37:01:d1:0d:1c:21:54:4d:32:71:1b:ec:
3d:f7:6d:86:c9:ae:32:57:57:d8:21:0e:01:70:2b:7d:39:e8:
ef:32:96:d8:ca:d2:9b:f1:ae:fe:2a:6a:00:8c:b2:dd:31:48:
b2:0f:ae:90:77:90:37:90:a8:35:cd:6e:68:52:73:c2:de:20:
af:6f:38:ac:41:7f:9e:c9:75:a7:b9:a9:5f:08:b0:71:bf:2b:
2a:98:8b:4d:52:83:3d:59:d8:99:43:f7:77:72:48:67:c1:d7:
90:22:b6:8e:d1:8b:c2:f8:58:3d:36:7e:c9:c4:45:30:2f:ea:
74:53:65:4a:26:45:9e:2b:0c:68:39:5a:37:c0:05:49:e5:da:
34:09:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:57:27 2025 by rpki-client