Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/CqaOlN2HaToE8CYuU1RDp21rOrk.roa
File: CqaOlN2HaToE8CYuU1RDp21rOrk.roa (raw, json)
Hash identifier: PPiKZ6h/dc3kOWgXnPVy763yVoFyl1ofnpN4vd1CdX0=
Subject key identifier: 0A:A6:8E:94:DD:87:69:3A:04:F0:26:2E:53:54:43:A7:6D:6B:3A:B9
Certificate issuer: /CN=391727b50332ceaea6a94c839838592482bbd8ec
Certificate serial: 01878EACC80D83B37D1AD3DC4008960C44BE
Authority key identifier: 39:17:27:B5:03:32:CE:AE:A6:A9:4C:83:98:38:59:24:82:BB:D8:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORcntQMyzq6mqUyDmDhZJIK72Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/CqaOlN2HaToE8CYuU1RDp21rOrk.roa
Signing time: Mon 17 Apr 2023 10:05:00 +0000
ROA not before: Mon 17 Apr 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21245
IP address blocks: 146.19.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:ac:c8:0d:83:b3:7d:1a:d3:dc:40:08:96:0c:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391727b50332ceaea6a94c839838592482bbd8ec
Validity
Not Before: Apr 17 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa68e94dd87693a04f0262e535443a76d6b3ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:30:08:da:d8:d6:79:f4:8e:b9:c1:2d:05:
9b:a9:d2:df:fe:27:57:f8:94:3f:51:1a:2a:4a:36:
e9:71:4f:8c:ab:c2:57:6f:43:4f:59:9d:81:3a:7a:
f9:35:9d:eb:7a:ef:66:99:7a:30:45:a3:6d:7f:58:
b6:92:b5:ed:19:7c:8b:45:6b:dc:9d:07:e0:97:58:
22:4c:e1:21:79:c4:fe:2f:04:98:71:2e:7d:fe:91:
ec:d5:41:56:c0:06:d2:6c:2a:00:03:bd:39:cc:68:
aa:58:9c:b0:03:ec:fb:22:25:05:8a:b3:b5:94:7e:
6c:35:f6:65:0e:48:6c:2b:b2:cd:94:40:f8:39:c8:
f4:c2:07:5a:c1:42:f5:1d:8e:3c:66:98:54:58:fa:
ac:2f:99:88:aa:0f:b1:d4:45:cc:6c:54:94:67:a9:
02:fd:16:f3:17:c8:f5:70:2a:08:bc:5e:02:4f:53:
f9:46:f2:14:e6:b6:18:74:1e:c4:0e:a6:4e:00:e5:
7a:84:c7:41:cd:70:d3:6f:90:15:15:08:04:36:84:
44:44:23:39:81:8b:f3:7d:a3:2e:24:bf:9c:1c:c4:
cc:89:f6:ec:87:81:1c:c7:8f:50:a8:33:9b:ca:70:
54:82:d2:88:67:f3:9f:45:7e:7f:ee:75:0e:45:49:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:8E:94:DD:87:69:3A:04:F0:26:2E:53:54:43:A7:6D:6B:3A:B9
X509v3 Authority Key Identifier:
keyid:39:17:27:B5:03:32:CE:AE:A6:A9:4C:83:98:38:59:24:82:BB:D8:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORcntQMyzq6mqUyDmDhZJIK72Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/CqaOlN2HaToE8CYuU1RDp21rOrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/ORcntQMyzq6mqUyDmDhZJIK72Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c6:7a:39:95:93:0c:7e:60:9f:68:15:0a:79:0f:f1:f8:20:
7b:e6:f0:c0:8c:6b:34:93:3a:66:3c:48:d9:14:8a:9b:4c:e2:
6f:07:13:e5:63:e7:88:1a:9e:4c:aa:e4:62:c1:4a:e3:6c:f3:
68:83:7c:99:76:d9:43:e6:c2:14:bc:f0:4a:dd:16:e8:38:8a:
ba:dd:56:de:69:1c:fd:6f:ea:ab:19:37:db:f1:01:db:17:b2:
86:0a:a9:0d:71:5c:2b:64:b2:16:a9:df:a9:40:71:95:4e:11:
ce:5d:ea:73:fb:d6:34:63:6c:2e:fb:61:b4:2d:d4:c6:c3:e7:
d1:3b:13:8a:ad:51:b2:f5:4e:8d:ed:46:42:5c:b7:18:6c:d6:
25:0f:81:ec:43:1b:36:14:d4:5f:1d:37:f5:3c:52:7e:95:5f:
5b:66:1c:2b:fc:1a:01:2f:4a:18:bd:df:02:52:df:d4:d6:97:
a2:b2:91:4e:44:2b:a5:51:d2:e8:9a:d1:4c:ce:f8:db:85:28:
4a:88:9d:05:d7:b6:e9:32:0b:ca:8e:11:36:47:22:20:04:4e:
5c:44:0e:9c:68:11:41:95:82:8e:0d:3b:c6:45:1e:c6:1f:4c:
8a:ff:7e:31:9b:d5:3f:b1:51:3d:f1:b6:7e:1e:ea:5e:d4:28:
05:51:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:05:36 2025 by rpki-client