Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eaH07OW5KOtKpWvHksqObMQWq4E.roa
File: eaH07OW5KOtKpWvHksqObMQWq4E.roa (raw, json)
Hash identifier: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=
Subject key identifier: 79:A1:F4:EC:E5:B9:28:EB:4A:A5:6B:C7:92:CA:8E:6C:C4:16:AB:81
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D95C4C308FC4C5810A38324BA9B3C6
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eaH07OW5KOtKpWvHksqObMQWq4E.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142299
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5c:4c:30:8f:c4:c5:81:0a:38:32:4b:a9:b3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79a1f4ece5b928eb4aa56bc792ca8e6cc416ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:33:8f:1f:ef:6c:78:35:50:bd:13:4a:19:
e9:09:e1:b9:23:0c:c8:45:4f:43:38:ca:60:87:b0:
cc:4e:34:f5:e5:52:a7:f9:1f:d6:c2:da:44:c0:d0:
a2:7b:22:8a:03:de:d6:de:51:46:eb:1b:4e:2a:5f:
ef:04:aa:bd:8a:b9:65:bb:2d:5d:f5:33:8e:4a:e6:
56:48:ce:ed:0e:7b:89:c5:e0:16:45:80:a0:41:80:
68:a0:1b:5e:72:6d:1b:2f:3f:20:2e:66:7e:4e:2d:
e4:7a:85:b1:bb:f6:e9:6b:02:34:75:91:a7:a2:8d:
05:18:01:47:32:7f:5a:b8:4c:6e:7c:b9:ed:fa:61:
b9:61:fd:d1:22:59:ba:82:73:69:6c:1a:88:4b:b6:
31:37:70:82:62:6f:55:0b:e7:1b:9f:81:42:51:01:
cc:77:9e:e2:e9:3a:c2:cf:a4:39:51:79:c9:78:e5:
66:a2:e0:e9:73:0c:ca:00:74:ed:52:65:7a:cf:e7:
29:6e:be:4b:85:9d:dd:9f:91:07:68:4b:40:8e:54:
22:8b:4c:ec:ad:e6:08:a3:4a:64:e9:02:7a:01:be:
bc:b5:2d:d8:90:a2:86:13:2b:7b:14:46:38:de:75:
f1:7f:72:f5:74:e9:c2:a4:fc:e9:3c:8d:07:c0:5a:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:F4:EC:E5:B9:28:EB:4A:A5:6B:C7:92:CA:8E:6C:C4:16:AB:81
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/eaH07OW5KOtKpWvHksqObMQWq4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
87:af:86:87:e7:04:f5:74:c3:cc:76:a2:f1:e6:78:ac:66:1f:
46:bc:d7:3b:59:1b:9a:02:a8:f5:62:86:16:3b:2e:0f:5c:35:
e9:ae:70:27:ac:d9:65:0e:f7:33:80:61:46:fc:fd:82:09:1b:
f9:de:ad:cc:7c:38:2f:d1:31:17:cf:44:74:98:7e:83:16:7a:
98:2b:d9:97:a7:ac:96:4c:e9:20:be:30:04:8a:3f:5a:c3:2a:
66:80:df:5e:f8:ef:28:b7:e0:64:a8:68:87:fd:5d:03:e9:cd:
d3:24:da:6c:b3:03:f2:9e:24:92:74:f2:36:d7:08:9d:87:18:
e6:0d:be:73:e6:e4:7a:fa:99:15:4c:a2:93:01:a9:cc:34:54:
3b:91:2e:78:7c:9b:ca:a5:e7:a0:7c:2b:0b:b4:30:1d:3f:07:
06:01:17:1a:ef:01:b3:dc:89:bf:e6:4d:d0:b6:b7:d1:e9:f3:
fa:8b:d0:f5:08:a1:87:83:3b:87:88:69:4d:7a:8f:62:f9:e0:
01:99:f3:05:0c:61:a6:01:31:80:63:97:4a:b1:1c:d9:9d:b5:
27:24:e0:06:ab:21:e0:9d:09:9e:33:d0:63:d2:b3:38:33:db:
99:91:e2:5b:16:2b:54:c0:85:81:2d:e4:a3:5a:b3:77:b1:41:
12:00:76:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VxMMI/ExYEKODJLqbPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUwMTAyMTE0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWExZjRlY2U1YjkyOGViNGFhNTZiYzc5MmNhOGU2Y2M0MTZhYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUMzjx/vbHg1UL0TShnpCeG5IwzI
RU9DOMpgh7DMTjT15VKn+R/WwtpEwNCieyKKA97W3lFG6xtOKl/vBKq9irlluy1d
9TOOSuZWSM7tDnuJxeAWRYCgQYBooBtecm0bLz8gLmZ+Ti3keoWxu/bpawI0dZGn
oo0FGAFHMn9auExufLnt+mG5Yf3RIlm6gnNpbBqIS7YxN3CCYm9VC+cbn4FCUQHM
d57i6TrCz6Q5UXnJeOVmouDpcwzKAHTtUmV6z+cpbr5LhZ3dn5EHaEtAjlQii0zs
reYIo0pk6QJ6Ab68tS3YkKKGEyt7FEY43nXxf3L1dOnCpPzpPI0HwFoOlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmh9OzluSjrSqVrx5LKjmzEFquBMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZWFIMDdPVzVLT3RLcFd2SGtzcU9iTVFXcTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNFMA0G
CSqGSIb3DQEBCwUAA4IBAQCHr4aH5wT1dMPMdqLx5nisZh9GvNc7WRuaAqj1YoYW
Oy4PXDXprnAnrNllDvczgGFG/P2CCRv53q3MfDgv0TEXz0R0mH6DFnqYK9mXp6yW
TOkgvjAEij9awypmgN9e+O8ot+BkqGiH/V0D6c3TJNpsswPyniSSdPI21widhxjm
Db5z5uR6+pkVTKKTAanMNFQ7kS54fJvKpeegfCsLtDAdPwcGARca7wGz3Im/5k3Q
trfR6fP6i9D1CKGHgzuHiGlNeo9i+eABmfMFDGGmATGAY5dKsRzZnbUnJOAGqyHg
nQmeM9Bj0rM4M9uZkeJbFitUwIWBLeSjWrN3sUESAHaX
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:31 2025 by rpki-client