Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/lCgJ2DRsdxvH7bFrSew1K8nzzHQ.roa
File: lCgJ2DRsdxvH7bFrSew1K8nzzHQ.roa (raw, json)
Hash identifier: huDMZee/r/S6lV5yZx0NPSmX4/lI5R5es7tZVWqEf3E=
Subject key identifier: 94:28:09:D8:34:6C:77:1B:C7:ED:B1:6B:49:EC:35:2B:C9:F3:CC:74
Certificate issuer: /CN=aef4e6ad24afb253408cad8834329162712bec75
Certificate serial: 656F17
Authority key identifier: AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/lCgJ2DRsdxvH7bFrSew1K8nzzHQ.roa
Signing time: Tue 01 Feb 2022 11:31:54 +0000
ROA not before: Tue 01 Feb 2022 11:31:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6647575 (0x656f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef4e6ad24afb253408cad8834329162712bec75
Validity
Not Before: Feb 1 11:31:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=942809d8346c771bc7edb16b49ec352bc9f3cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7f:c4:82:da:86:34:f9:18:5e:83:47:45:77:
54:98:1a:ba:86:cd:83:d2:ff:b1:a7:9e:4f:7d:22:
02:95:ce:65:24:f2:00:d5:d1:36:1e:80:79:a9:78:
36:5e:ce:b4:3e:34:4f:93:87:d0:41:1d:59:10:a1:
6d:fe:68:06:e5:e5:5a:bb:52:65:8a:21:d1:f7:f8:
24:10:29:4e:96:7a:5b:89:8b:3b:dd:8c:9e:5b:62:
53:51:cf:57:fb:20:02:34:c3:47:f8:fa:56:f6:0d:
e1:41:19:c9:ce:2c:0a:28:fb:d9:10:ad:18:53:46:
a1:db:51:6a:75:77:66:7f:ab:b3:8f:58:dd:6c:ab:
1d:bc:f9:3f:4e:d7:3a:8a:a8:c9:d7:c3:a5:13:75:
98:1e:a2:fa:4f:c7:ce:1f:ae:11:27:ad:aa:fa:df:
28:3f:f3:5a:b6:52:0f:40:4f:fe:4e:a6:f1:99:bb:
ad:3e:c9:84:0a:aa:bf:b4:e1:35:30:cd:ef:c8:fd:
c4:34:01:f4:fb:e2:c5:21:d0:cf:17:90:56:5e:f9:
10:3f:46:6c:33:bd:75:4d:5d:b7:a7:5b:91:86:f9:
6a:bd:19:a0:11:9b:03:01:8a:0c:ef:9c:c2:91:c7:
74:99:ed:33:06:fb:3b:6a:91:bc:e8:e6:cb:88:1a:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:09:D8:34:6C:77:1B:C7:ED:B1:6B:49:EC:35:2B:C9:F3:CC:74
X509v3 Authority Key Identifier:
keyid:AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/lCgJ2DRsdxvH7bFrSew1K8nzzHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/rvTmrSSvslNAjK2INDKRYnEr7HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.78.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7d:05:30:62:05:f3:cc:bc:55:a3:38:0c:bd:a0:a0:f4:08:
e8:07:19:fa:c8:d1:58:f6:e4:98:5f:40:19:b0:8f:c1:be:73:
ed:b9:5a:13:f7:c8:0b:ae:fa:5c:6d:db:b8:ad:19:c4:27:20:
28:22:60:7f:29:d5:97:1f:6e:a0:a2:b9:6b:0f:e8:23:8f:42:
c9:9b:6d:18:ea:fc:8d:e8:39:eb:b1:41:c5:5d:2f:e2:63:19:
df:73:98:70:f6:a3:d3:11:c6:58:b2:02:9b:8d:73:ed:04:65:
db:0b:fc:bf:10:84:54:3b:22:2b:2b:a1:8c:10:dc:e1:db:a1:
a8:ca:12:63:c0:73:e9:d2:f0:6d:b0:82:7e:9c:f0:08:9c:39:
ec:96:9d:02:8b:6e:d7:98:40:c2:0e:c5:da:fc:58:62:14:bc:
fd:08:54:f4:30:fa:f1:71:04:53:3d:65:54:6e:83:4a:3d:e1:
a3:53:ac:83:26:ae:4e:fe:9f:a8:1c:c1:6b:a6:cb:da:bd:1e:
37:3b:e4:57:0d:87:ed:15:ee:b2:48:e8:e8:cd:b4:fb:1e:a7:
a8:ab:8d:fe:b5:0f:5b:8d:fa:c9:dd:11:56:3e:4a:1c:aa:ef:
d6:e2:15:13:07:40:9d:aa:90:cb:71:da:b0:0e:9d:76:1e:03:
b8:e3:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:33:27 2025 by rpki-client