Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/b3BEVrznBJNxfuky_tZ3M5h3YVU.roa
File: b3BEVrznBJNxfuky_tZ3M5h3YVU.roa (raw, json)
Hash identifier: oevzbpa2h+n3mOnAQKPuGd3EHMwQ0X7IPep53VV1rro=
Subject key identifier: 6F:70:44:56:BC:E7:04:93:71:7E:E9:32:FE:D6:77:33:98:77:61:55
Certificate issuer: /CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
Certificate serial: 018570153FB5782B854C0519C5ADF73876D9
Authority key identifier: 47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/b3BEVrznBJNxfuky_tZ3M5h3YVU.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20648
IP address blocks: 146.19.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3f:b5:78:2b:85:4c:05:19:c5:ad:f7:38:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f704456bce70493717ee932fed6773398776155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:6e:05:df:9c:7c:1b:65:2a:b1:5b:ca:0e:
8c:e6:87:6b:34:d9:ca:fb:b5:fa:16:bf:86:08:fc:
b8:a1:87:92:b3:99:51:ec:00:54:fb:cb:2e:4f:b9:
ec:96:ed:58:d2:1f:5e:09:1a:86:fc:19:5f:99:e6:
36:cd:19:3c:80:3a:b0:f4:ad:57:34:40:99:9f:e7:
5f:22:4a:e7:35:7c:8f:6c:c7:1f:91:f7:04:40:80:
a5:10:b2:c3:0d:ed:09:a1:b7:ad:4c:5c:34:a3:b8:
9d:2d:56:bf:05:4b:e2:47:5c:8a:2d:8d:f0:be:cf:
f1:b4:d2:06:f0:04:cf:ca:05:10:3f:27:87:fe:a6:
ea:5f:31:70:96:d0:5f:33:db:cf:87:9e:43:2c:1c:
f6:99:43:06:d0:72:79:32:35:fa:77:7f:c2:97:44:
04:58:7d:1f:c6:be:56:ef:a7:de:f6:c4:94:f3:4c:
80:ce:2b:d6:ec:d8:0a:25:15:e1:83:fd:ac:50:60:
66:7c:6b:10:f0:d8:a7:84:03:4d:e4:15:67:3a:87:
f3:7c:be:e7:96:71:70:fd:38:56:8b:f7:a6:b6:c2:
8e:30:6c:47:b2:f0:78:f9:35:bf:d5:06:1d:e0:14:
65:89:5b:e5:db:d5:ee:02:d7:de:a5:93:10:5d:3b:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:44:56:BC:E7:04:93:71:7E:E9:32:FE:D6:77:33:98:77:61:55
X509v3 Authority Key Identifier:
keyid:47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/b3BEVrznBJNxfuky_tZ3M5h3YVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:63:4c:3e:a8:0d:95:d4:6a:24:fd:6d:85:93:a1:3e:2d:ad:
6c:ad:94:00:89:85:22:b3:d9:4e:bd:6a:f7:5c:4e:4b:f7:b5:
d5:4e:da:92:cd:e7:73:0a:37:4a:77:ed:28:75:53:3f:7b:77:
3b:79:fb:dc:26:bb:4c:2c:00:6f:74:12:c2:98:e1:5e:38:59:
9a:61:ed:22:c9:6c:c8:8f:fd:8a:1a:b0:ca:62:29:6b:f0:76:
21:1c:61:9b:4e:8f:28:19:dd:f3:ed:51:c2:ad:c4:44:d8:37:
cd:50:3b:35:bc:76:c9:f0:cc:60:85:4b:17:6e:04:8d:17:89:
a9:68:5f:a0:f7:f7:0b:e9:91:1e:2e:07:90:6e:af:90:da:c8:
09:66:bb:dd:5b:63:ce:07:2b:b4:c4:c4:10:11:5c:a0:03:fb:
f6:3b:a1:27:e0:75:de:b4:22:cb:63:eb:bb:76:5b:c5:89:16:
9a:af:e9:43:05:c1:62:ad:5b:0a:2d:e3:7a:ae:26:36:c1:f4:
ff:01:e0:39:46:ba:44:9a:4f:39:77:4d:6a:c1:9c:af:0f:96:
1c:27:41:d6:e2:30:03:08:51:d7:57:b6:c0:52:db:0f:d9:af:
ea:a5:b5:e0:a7:01:30:1e:f9:8c:86:f4:1a:ec:d2:72:29:37:
0e:e6:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:32 2025 by rpki-client