Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/57IyqnNKtcBeqm4lYSAgxwz-6G0.roa
File: 57IyqnNKtcBeqm4lYSAgxwz-6G0.roa (raw, json)
Hash identifier: cBsrmA34VpdgddMwfuAyApJb1Lut/jrpgtu7rmSzGcs=
Subject key identifier: E7:B2:32:AA:73:4A:B5:C0:5E:AA:6E:25:61:20:20:C7:0C:FE:E8:6D
Certificate issuer: /CN=aef4e6ad24afb253408cad8834329162712bec75
Certificate serial: 1ADF6D
Authority key identifier: AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/57IyqnNKtcBeqm4lYSAgxwz-6G0.roa
Signing time: Sat 01 Jan 2022 01:55:22 +0000
ROA not before: Sat 01 Jan 2022 01:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206485
IP address blocks: 146.19.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761133 (0x1adf6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef4e6ad24afb253408cad8834329162712bec75
Validity
Not Before: Jan 1 01:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7b232aa734ab5c05eaa6e25612020c70cfee86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:45:3e:2a:af:73:b2:a3:f8:ff:17:f5:db:
30:58:46:56:40:d6:4b:62:41:9a:4f:5a:62:fb:17:
94:f3:84:3f:c9:28:6e:35:87:ea:c3:8c:cd:af:4d:
e2:ec:f4:84:64:a3:f1:10:1c:9e:6f:03:dd:ed:06:
75:fd:e7:fc:80:1d:4c:03:07:81:cb:89:c8:7e:1e:
92:ec:c4:e8:e7:a4:74:6e:25:cd:f9:9d:7a:ed:b0:
d1:2e:fe:cb:e3:f6:40:cd:7a:86:8f:99:1a:90:11:
ea:6f:2a:72:f3:cf:67:ba:21:90:28:a4:66:01:8a:
2c:b4:92:be:85:42:04:d3:9b:d9:af:57:16:67:ed:
c1:0c:4e:be:83:c4:44:67:33:bb:4c:6f:a0:43:55:
28:16:af:1b:23:26:5e:27:de:5f:11:f9:5b:d0:e6:
af:5c:18:ff:7f:47:00:ac:a2:66:bd:db:69:81:75:
4f:6c:6b:32:04:76:c9:17:4a:9f:34:1e:80:ed:74:
2d:1b:8d:b3:b8:18:e5:7c:c7:99:56:15:27:91:1a:
10:ab:06:e8:14:69:25:ff:60:8e:dc:e2:a0:30:be:
bf:c9:20:4c:a2:0d:da:e6:04:d7:56:02:48:b0:65:
9c:b1:32:6f:0b:6c:ea:be:5c:62:23:d7:11:d1:cf:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:32:AA:73:4A:B5:C0:5E:AA:6E:25:61:20:20:C7:0C:FE:E8:6D
X509v3 Authority Key Identifier:
keyid:AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/57IyqnNKtcBeqm4lYSAgxwz-6G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/rvTmrSSvslNAjK2INDKRYnEr7HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:13:51:ed:18:97:01:75:d7:28:b6:f6:df:cd:e7:08:bb:91:
5a:3e:ca:b4:0b:5e:e0:4f:4d:6f:f4:df:db:75:ee:10:51:f6:
e5:59:dd:78:e9:97:c5:e4:5e:68:f8:41:3b:c0:47:32:2b:cf:
5e:96:c1:cf:53:40:d6:61:6a:81:1d:5f:bc:66:9e:f0:fb:27:
66:f0:e2:a1:9f:10:17:cc:9e:ff:ce:a2:ac:8e:e1:a4:50:73:
91:46:85:07:71:81:f5:a6:cd:73:d6:85:5b:a2:e4:90:e3:e5:
9f:ee:06:45:18:cf:0f:b4:1d:91:f8:1b:59:84:72:16:02:07:
80:b0:37:0a:37:02:af:38:12:ba:21:a8:40:2b:7b:9d:b8:33:
5f:cf:59:73:24:69:9f:24:3d:ca:0e:e8:35:f0:47:21:05:1b:
6a:1c:14:9c:77:ee:ff:13:83:ac:b0:49:d1:dd:46:5f:a9:ae:
f0:4f:cc:85:e7:eb:1c:5a:05:52:e1:9b:fe:50:ea:dd:64:6b:
95:81:7e:ea:5d:9e:92:f6:75:8c:71:a7:69:af:5b:dc:ce:74:
58:c5:de:a7:a2:d9:fc:22:51:50:e0:e1:d4:91:42:ba:99:52:
b3:d6:31:e8:b8:ad:36:a3:f7:50:a4:8a:23:43:fc:17:9c:ff:
c5:de:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:07 2025 by rpki-client