Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa
File: cobKmcWPiKPAsZP00KPzWEugUNI.roa (raw, json)
Hash identifier: DCvQbMOzCHXjqBEAvOKz1z6TiwEETrgWOjxlmhMiK5M=
Subject key identifier: 72:86:CA:99:C5:8F:88:A3:C0:B1:93:F4:D0:A3:F3:58:4B:A0:50:D2
Certificate issuer: /CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Certificate serial: 01856BDCB50BAF6258778ECD3A763DB201C3
Authority key identifier: DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa
Signing time: Sun 01 Jan 2023 05:45:04 +0000
ROA not before: Sun 01 Jan 2023 05:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b5:0b:af:62:58:77:8e:cd:3a:76:3d:b2:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Validity
Not Before: Jan 1 05:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7286ca99c58f88a3c0b193f4d0a3f3584ba050d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:b6:40:ed:27:00:56:4e:8c:ff:32:26:af:
88:68:50:33:7f:28:c4:99:d9:01:ba:0e:2e:d5:f0:
40:da:8e:f1:89:f4:bc:cb:25:7d:c0:73:9b:95:57:
16:8a:d0:d7:dc:68:13:f8:59:1b:60:2e:bb:ee:47:
eb:c7:bd:8e:e5:9e:b4:db:c1:f1:ba:55:9e:3b:e9:
77:8b:8b:c5:ed:4d:78:3a:fc:9b:4c:3b:d7:f1:5b:
07:90:8c:17:40:ba:f1:01:a2:d0:29:2d:29:09:fc:
57:63:16:4c:35:a9:a1:bf:3e:e9:83:59:b7:f2:d7:
f1:86:97:a1:51:17:56:6c:39:76:52:df:d3:2a:ed:
bf:7a:46:d4:ec:74:b1:a6:2c:67:75:ba:82:d9:d7:
b6:55:5a:f4:35:f4:64:90:6f:2e:26:50:65:8e:2f:
f8:c8:69:42:b5:a0:0d:35:aa:35:e6:e4:1c:e1:62:
17:b0:22:2e:56:02:ac:ef:46:9a:45:be:b4:98:82:
ba:8b:33:61:f2:d6:91:f0:c2:4c:de:18:18:81:67:
2c:87:37:90:07:85:80:49:35:58:d1:ab:35:4f:eb:
0a:60:96:cb:3c:9a:77:15:8f:2a:c7:64:f4:2e:7d:
c7:04:74:cd:9b:24:1a:bf:79:1d:89:b2:4f:3a:76:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:CA:99:C5:8F:88:A3:C0:B1:93:F4:D0:A3:F3:58:4B:A0:50:D2
X509v3 Authority Key Identifier:
keyid:DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/3vDiAmytPgwmX9bIH_WA2BBN7pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cc:df:54:3f:08:b5:4d:cf:36:fa:80:b0:12:23:df:35:00:
b0:0c:78:81:4f:a9:2f:78:ba:b7:a6:fe:e1:86:6e:19:f3:eb:
08:dd:a9:de:ba:fe:38:45:9b:bf:cb:fb:dd:3b:27:00:fd:ec:
dd:77:d8:aa:6c:19:19:e2:5a:76:a3:d4:48:c3:b0:ab:bf:56:
71:ae:f2:ee:61:17:11:5f:c8:a5:4f:33:7b:41:df:d6:b6:a8:
fb:40:34:28:23:54:5b:fb:6c:9f:35:4d:18:80:a6:54:b0:d2:
5c:d5:ab:26:31:86:1f:56:80:51:5d:c1:eb:6a:f3:6a:18:4c:
0b:77:a4:36:1c:74:17:b6:bc:41:ad:af:8c:d0:7a:70:3b:5e:
a3:32:be:52:aa:0f:4f:37:0c:ae:c2:9b:8f:5f:98:d5:37:25:
e5:b4:5b:75:2c:bd:25:7b:5e:b6:8b:f3:52:33:99:4d:58:2f:
f6:8c:cf:1f:90:c8:b2:30:b3:7e:42:6b:6e:53:eb:6e:29:8e:
26:38:7f:63:a6:6d:2c:a2:f5:6a:27:77:d8:ba:60:b9:91:e4:
3f:78:ae:ca:70:8b:ee:8f:89:4b:5d:bd:4e:07:fe:44:8e:40:
a8:79:e2:89:55:00:f7:15:48:12:6f:ec:88:44:52:c9:05:3f:
c6:da:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:42 2025 by rpki-client