Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/tlhlZ11pNsH2-sB68Msj9jLH2zg.roa
File: tlhlZ11pNsH2-sB68Msj9jLH2zg.roa (raw, json)
Hash identifier: qyFfwYzWSmC72HgVkmvOJ7YgSVofdzf0RqpdcEgMGgc=
Subject key identifier: B6:58:65:67:5D:69:36:C1:F6:FA:C0:7A:F0:CB:23:F6:32:C7:DB:38
Certificate issuer: /CN=aef4e6ad24afb253408cad8834329162712bec75
Certificate serial: 0185E952C3B1978A266BEAF825C9D76A129F
Authority key identifier: AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/tlhlZ11pNsH2-sB68Msj9jLH2zg.roa
Signing time: Wed 25 Jan 2023 14:26:33 +0000
ROA not before: Wed 25 Jan 2023 14:26:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:52:c3:b1:97:8a:26:6b:ea:f8:25:c9:d7:6a:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef4e6ad24afb253408cad8834329162712bec75
Validity
Not Before: Jan 25 14:26:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b65865675d6936c1f6fac07af0cb23f632c7db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:37:87:5a:66:25:a5:12:4c:07:6f:0a:df:
05:67:16:48:2b:1a:47:3b:fe:79:b0:ec:a9:05:5e:
4a:b5:aa:3e:a7:2b:4b:26:b7:c6:02:3e:f8:a4:9a:
47:dc:70:b1:e7:24:42:45:af:36:8a:62:e0:f4:94:
60:8f:4a:c9:43:41:10:34:59:58:4e:d4:54:82:92:
cc:30:db:9b:55:c4:ef:c7:ea:f8:46:2f:eb:9a:c9:
92:40:77:79:4a:d1:ca:a6:bd:a4:4f:44:21:6e:42:
13:3d:f9:f2:55:90:72:65:b3:9a:fa:8f:cd:89:ab:
4d:e1:bb:e1:b9:aa:96:87:8b:3f:08:18:b9:98:0f:
16:c7:53:a7:59:81:bf:74:ec:fe:ac:92:0a:81:34:
0c:08:85:9b:4a:81:88:87:38:77:9e:b2:11:01:0d:
e6:fe:56:b1:2a:c8:97:af:7e:19:de:7c:2d:58:5a:
09:29:67:65:99:4c:77:1d:ba:a3:4c:6b:f9:be:0a:
4b:fe:ba:70:ab:7e:df:9d:f4:18:f1:f1:90:a4:ee:
29:e6:f0:af:21:c2:13:fb:b0:e4:57:6f:68:be:2f:
43:13:4b:b4:ef:ea:81:56:75:c2:08:03:e4:e8:e9:
a6:a4:cd:0e:4f:5f:ed:4f:42:e4:40:f2:0d:28:7f:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:65:67:5D:69:36:C1:F6:FA:C0:7A:F0:CB:23:F6:32:C7:DB:38
X509v3 Authority Key Identifier:
keyid:AE:F4:E6:AD:24:AF:B2:53:40:8C:AD:88:34:32:91:62:71:2B:EC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvTmrSSvslNAjK2INDKRYnEr7HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/tlhlZ11pNsH2-sB68Msj9jLH2zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b5e38-9083-4583-a582-48d4b648bb66/1/rvTmrSSvslNAjK2INDKRYnEr7HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.78.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9a:16:db:60:3b:36:79:59:cc:39:9d:12:8b:47:7f:f0:94:
02:29:1a:33:99:c5:ec:95:72:b6:b7:67:08:10:2b:73:98:9b:
3c:21:dc:70:89:c7:86:11:06:0a:b3:9b:74:92:b5:51:62:9c:
2d:df:4a:c5:7f:2a:ab:d1:ce:ec:7e:31:94:2a:e8:4e:65:0f:
ed:08:72:57:58:3f:5c:96:df:a1:43:ee:17:ec:e8:7a:a5:58:
39:88:ac:5b:89:77:9b:ee:1c:12:4a:5f:16:3e:5e:90:c7:19:
c1:88:47:24:2d:18:bb:53:1e:f9:58:fc:45:14:f8:59:3a:03:
29:02:70:7a:3c:50:54:00:14:16:ed:27:19:2c:af:7d:2f:ca:
b8:97:91:98:e8:11:f7:1b:e3:57:26:97:cb:59:d4:cc:4c:6d:
59:c1:f5:30:75:f3:28:43:ae:e6:43:f8:08:45:3d:2c:e6:dd:
a6:d7:ac:6a:63:99:f7:1d:27:5f:26:ce:f3:90:54:73:63:b5:
20:e9:6f:b5:13:02:f3:72:a6:91:97:20:18:96:2a:4c:b6:a6:
c2:fe:87:50:95:88:58:79:b1:4b:85:84:32:25:5f:61:e3:05:
ee:f5:05:35:cd:20:6f:a4:ed:8a:46:e5:c4:5c:a8:b1:8e:fa:
b8:2a:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:16 2025 by rpki-client