Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/a2kvnmoqm97alV25tqT3JKGoC-4.roa
File: a2kvnmoqm97alV25tqT3JKGoC-4.roa (raw, json)
Hash identifier: mC1qrjGIyZjvG1ahwIK2xZR8SXunhQRkRZbHsWedL+w=
Subject key identifier: 6B:69:2F:9E:6A:2A:9B:DE:DA:95:5D:B9:B6:A4:F7:24:A1:A8:0B:EE
Certificate issuer: /CN=5dddc965c3e90a82200f4afbb92991904d06422c
Certificate serial: 0186B89FB95B21FAF231B62E89A137D33644
Authority key identifier: 5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/a2kvnmoqm97alV25tqT3JKGoC-4.roa
Signing time: Mon 06 Mar 2023 20:32:00 +0000
ROA not before: Mon 06 Mar 2023 20:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 146.19.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:9f:b9:5b:21:fa:f2:31:b6:2e:89:a1:37:d3:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dddc965c3e90a82200f4afbb92991904d06422c
Validity
Not Before: Mar 6 20:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b692f9e6a2a9bdeda955db9b6a4f724a1a80bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:ec:5f:41:77:9d:34:f8:4c:86:0f:f6:ca:
65:78:6a:53:dc:d7:0e:64:e4:dc:a1:a9:d2:49:4d:
77:07:95:02:e4:35:de:e0:78:28:ac:9b:e3:4c:5c:
47:0d:89:7f:03:1c:8c:28:61:b3:e3:64:4d:9d:95:
10:3f:48:99:10:13:cc:94:ed:19:b5:a7:d7:f7:2a:
32:c8:42:a4:6b:ec:3c:41:be:0a:ed:fc:94:09:0d:
4d:de:d7:c2:77:b9:f5:ab:1b:91:33:94:49:6b:23:
a0:ce:cb:8e:c2:ad:f3:a8:0d:2a:df:a5:47:47:4d:
30:8d:75:ae:69:a8:16:c7:e8:b5:4e:d8:4c:0c:7e:
93:f6:1a:8c:c8:76:8d:14:a1:c0:6b:dc:c9:8c:17:
ad:5e:39:83:60:73:ee:8f:d7:01:33:64:c8:a6:c8:
5b:3d:d5:03:dd:4b:f7:25:e2:04:02:37:95:fb:87:
2b:a9:a8:0f:ad:58:2a:3e:8e:9a:54:60:09:6d:2d:
f7:3f:a0:9d:61:09:02:a9:fa:05:a5:a3:1f:f4:9c:
1a:59:38:06:06:af:5b:a0:dc:06:32:20:97:46:36:
44:f2:bc:5b:19:aa:83:5e:8b:c3:9c:56:09:62:a1:
b9:4b:df:05:52:fb:dd:8f:4e:a5:65:43:62:09:f0:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:2F:9E:6A:2A:9B:DE:DA:95:5D:B9:B6:A4:F7:24:A1:A8:0B:EE
X509v3 Authority Key Identifier:
keyid:5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/a2kvnmoqm97alV25tqT3JKGoC-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a3:73:7f:d2:99:c3:3b:ea:69:de:13:31:c0:07:a0:47:63:
49:a0:b9:ac:6c:ce:f2:c0:67:63:a4:85:2f:f4:98:06:5d:ae:
f4:37:16:60:3c:05:32:0d:41:e6:56:1f:ed:16:ec:37:20:c6:
aa:6b:b6:17:a5:a3:8f:cb:80:9d:bd:03:3b:42:7b:e9:e0:43:
90:0b:1f:77:dd:3f:b2:df:53:08:0a:7e:70:d1:d1:a2:77:cc:
4f:c5:06:da:9b:4b:a4:af:92:93:fb:4d:f4:de:9c:07:76:69:
32:97:e1:b0:ce:47:ba:ba:94:c2:80:a5:74:f3:89:bd:9e:13:
47:41:80:10:25:a9:cf:c6:2a:3b:6a:d4:fd:07:2e:2d:11:ac:
5e:03:fa:7b:2a:89:4f:40:73:cd:f8:94:54:ad:58:32:d0:d4:
37:2c:c4:a3:c7:c6:1e:77:89:ca:8e:38:e3:58:7e:0d:48:2e:
e8:dd:37:84:69:97:08:c1:f8:66:cf:eb:33:30:3a:7e:50:90:
5e:53:14:5f:84:27:03:19:dd:a6:d7:0c:8b:6e:09:ac:fa:c1:
d2:a3:9c:5a:7a:7a:80:6f:28:9e:26:96:ee:8d:0f:1b:2a:ba:
85:f8:b3:5a:3e:30:3b:72:e0:92:57:5c:c2:04:33:44:57:39:
9d:71:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:00:56 2025 by rpki-client