Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/1-O-kiS05OrGFZfFElMiQjOaM9CQ.roa
File: 1-O-kiS05OrGFZfFElMiQjOaM9CQ.roa (raw, json)
Hash identifier: vVTgjP9bZ0X6erabSOuQoyBw0E1B6CEV+gwMDgeo+Tk=
Subject key identifier: F8:EF:A4:89:2D:39:3A:B1:85:65:F1:44:94:C8:90:8C:E6:8C:F4:24
Certificate issuer: /CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Certificate serial: 01856F2FDEBD7712AE5823352101594E3C11
Authority key identifier: 1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/1-O-kiS05OrGFZfFElMiQjOaM9CQ.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:de:bd:77:12:ae:58:23:35:21:01:59:4e:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8efa4892d393ab18565f14494c8908ce68cf424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:e6:51:c0:a0:4c:07:02:b1:f6:31:d9:43:
3b:4d:37:ee:51:a6:7a:af:e9:ab:b0:b9:89:84:31:
52:80:ff:71:31:df:f3:36:82:69:be:36:a9:be:af:
01:ba:06:92:b8:0a:4d:08:05:ae:15:3b:78:2a:1f:
22:3d:b6:85:6e:5d:ac:8b:94:ac:c8:32:95:fb:5b:
c9:bb:46:0c:be:6c:20:5a:c2:93:1b:50:94:29:fb:
37:29:40:78:f9:fc:c2:18:9c:4d:49:33:04:df:9b:
57:8e:65:21:e9:c9:ce:6b:a5:9b:7e:6b:08:f3:b8:
35:97:9d:86:0b:2e:bf:66:67:4b:1d:18:30:9d:17:
8c:a0:32:a6:12:53:2d:29:bb:a9:8c:a8:d4:d8:de:
2a:44:30:0c:52:07:2e:f5:be:06:9c:9f:05:8c:65:
1d:5e:62:1d:33:00:33:48:44:3a:2c:c6:0e:58:b5:
e4:4f:62:8e:a1:56:98:15:a5:8c:d4:03:e8:73:b9:
64:73:91:fd:db:7c:48:1f:43:5d:9a:e9:02:e4:27:
69:78:c6:37:6a:76:78:a6:f0:56:36:fa:3d:4a:b9:
15:2c:17:29:86:16:8b:39:1d:bb:88:85:c2:20:40:
ec:27:36:f1:5b:db:eb:ad:49:09:7e:59:fb:93:40:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:A4:89:2D:39:3A:B1:85:65:F1:44:94:C8:90:8C:E6:8C:F4:24
X509v3 Authority Key Identifier:
keyid:1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/1-O-kiS05OrGFZfFElMiQjOaM9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.185.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ce:4e:4f:63:7c:4f:d6:fa:4e:66:4d:0f:d4:d2:3d:40:33:
d1:2b:f7:bd:be:7e:40:57:d7:f4:e1:de:6c:fe:89:18:15:11:
49:4a:6b:64:ed:60:b0:a6:71:63:3f:59:b6:a4:bc:79:1a:73:
8b:7b:be:a3:44:ab:e1:69:5c:f8:57:1c:3b:a6:4f:99:df:8d:
b5:f6:d9:07:d5:19:69:67:b3:d5:36:8f:7a:b9:d0:1b:b9:65:
bb:6f:a4:1b:3b:1d:01:c6:b3:f6:90:88:3c:9c:11:b6:00:49:
c8:94:90:23:2c:01:27:ef:ef:99:f1:27:71:6c:b5:39:6b:15:
fd:04:95:2b:04:dc:ab:df:5a:d8:e6:50:5e:a7:1f:f6:56:99:
67:82:41:8e:f3:be:80:0f:1a:28:1d:f5:4e:2d:c8:b9:4f:c5:
f8:df:74:82:d5:5b:c3:a6:f2:12:c3:34:8e:23:93:5f:80:5f:
d6:da:36:4c:a5:69:0d:1c:5f:2e:47:31:b4:58:ee:38:ce:03:
dd:48:88:4c:5c:e3:d9:59:96:bd:3a:29:db:ef:c7:fc:b9:75:
04:01:fc:de:2c:e9:31:49:6b:45:30:63:8a:1f:a0:28:39:3e:
35:5b:64:9e:63:d5:33:78:ab:7f:42:81:dc:87:7f:f1:32:3b:
4c:82:02:eb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvL969dxKuWCM1IQFZTjwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2E3MTA2ZTIxYTZjMzIyZjk4ZTRiYzFiOWM5NjVkNzI4
ODkyN2EwHhcNMjMwMTAxMjExNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVmYTQ4OTJkMzkzYWIxODU2NWYxNDQ5NGM4OTA4Y2U2OGNmNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudbmUcCgTAcCsfYx2UM7TTfuUaZ6
r+mrsLmJhDFSgP9xMd/zNoJpvjapvq8BugaSuApNCAWuFTt4Kh8iPbaFbl2si5Ss
yDKV+1vJu0YMvmwgWsKTG1CUKfs3KUB4+fzCGJxNSTME35tXjmUh6cnOa6WbfmsI
87g1l52GCy6/ZmdLHRgwnReMoDKmElMtKbupjKjU2N4qRDAMUgcu9b4GnJ8FjGUd
XmIdMwAzSEQ6LMYOWLXkT2KOoVaYFaWM1APoc7lkc5H923xIH0NdmukC5CdpeMY3
anZ4pvBWNvo9SrkVLBcphhaLOR27iIXCIEDsJzbxW9vrrUkJfln7k0C1FQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjvpIktOTqxhWXxRJTIkIzmjPQkMB8GA1UdIwQY
MBaAFB06cQbiGmwyL5jkvBucll1yiJJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRweEJ1SWFiREl2bU9TOEc1eVdYWEtJa25vLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ZjVkNDEtZWVjMy00ZTYyLWFhMDEt
NWM0NmRhM2JjNWE1LzEvMS1PLWtpUzA1T3JHRlpmRkVsTWlRak9hTTlDUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWMvNGY1ZDQxLWVlYzMtNGU2Mi1hYTAxLTVjNDZkYTNiYzVh
NS8xL0hUcHhCdUlhYkRJdm1PUzhHNXlXWFhLSWtuby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITuTAN
BgkqhkiG9w0BAQsFAAOCAQEAOM5OT2N8T9b6TmZND9TSPUAz0Sv3vb5+QFfX9OHe
bP6JGBURSUprZO1gsKZxYz9ZtqS8eRpzi3u+o0Sr4Wlc+FccO6ZPmd+NtfbZB9UZ
aWez1TaPernQG7llu2+kGzsdAcaz9pCIPJwRtgBJyJSQIywBJ+/vmfEncWy1OWsV
/QSVKwTcq99a2OZQXqcf9laZZ4JBjvO+gA8aKB31Ti3IuU/F+N90gtVbw6byEsM0
jiOTX4Bf1to2TKVpDRxfLkcxtFjuOM4D3UiITFzj2VmWvTop2+/H/Ll1BAH83izp
MUlrRTBjih+gKDk+NVtknmPVM3irf0KB3Id/8TI7TIIC6w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:35:33 2025 by rpki-client