Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/wv4CfHR34R9RMYG_xLBPpd_AvFQ.roa
File: wv4CfHR34R9RMYG_xLBPpd_AvFQ.roa (raw, json)
Hash identifier: X4u+7JKBh889vCxrUkRs2RDgYoRFNEhVGfsD8KNDk8E=
Subject key identifier: C2:FE:02:7C:74:77:E1:1F:51:31:81:BF:C4:B0:4F:A5:DF:C0:BC:54
Certificate issuer: /CN=0e0685868328ed6b59fdb800855b758d7e825612
Certificate serial: 0185710C1A5421D9BCC2E1A7BD577FB30D4E
Authority key identifier: 0E:06:85:86:83:28:ED:6B:59:FD:B8:00:85:5B:75:8D:7E:82:56:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/wv4CfHR34R9RMYG_xLBPpd_AvFQ.roa
Signing time: Mon 02 Jan 2023 05:54:56 +0000
ROA not before: Mon 02 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 146.19.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1a:54:21:d9:bc:c2:e1:a7:bd:57:7f:b3:0d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0685868328ed6b59fdb800855b758d7e825612
Validity
Not Before: Jan 2 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2fe027c7477e11f513181bfc4b04fa5dfc0bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:c8:f4:eb:d4:9b:2e:09:9e:14:42:25:32:
1c:d3:16:54:6d:af:74:d6:02:68:ff:cd:dc:50:f5:
51:3a:2a:e2:17:d2:7f:82:6d:d7:a1:5f:89:6c:dc:
84:a0:81:cd:88:e7:b0:eb:cb:2c:75:17:34:a3:9d:
b1:11:03:e7:3c:02:80:19:66:08:38:91:12:fd:c3:
a4:5b:c2:ac:67:16:b6:0d:4f:02:db:b5:3a:74:c0:
01:d8:a4:8e:fb:a4:5b:aa:f7:40:8f:65:e0:c6:02:
86:9a:3c:3b:25:02:c1:1d:28:be:1a:a4:0f:c4:f5:
89:e6:62:8e:7a:4f:df:04:3d:0e:3e:08:fb:10:24:
8c:4f:c3:cc:9b:fc:24:eb:41:87:8b:81:75:d7:fc:
0c:71:19:fe:9d:d2:d8:43:c4:f5:53:b6:22:5a:8c:
1b:e4:ad:5f:4c:24:0f:96:37:a9:c1:f0:e4:20:df:
e7:86:7d:5c:5f:77:b6:ea:d3:00:15:d2:17:08:b1:
17:8e:8d:6b:3a:f6:1c:5e:eb:ab:4d:e2:32:d3:c2:
bf:ea:98:c5:f4:37:0d:af:15:0d:6b:c4:0a:30:95:
ca:3e:ed:3a:4a:00:0c:73:89:64:23:b9:9a:3d:55:
4a:17:c1:28:50:17:e1:ec:e9:5e:ca:1e:d2:8c:e5:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:02:7C:74:77:E1:1F:51:31:81:BF:C4:B0:4F:A5:DF:C0:BC:54
X509v3 Authority Key Identifier:
keyid:0E:06:85:86:83:28:ED:6B:59:FD:B8:00:85:5B:75:8D:7E:82:56:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/wv4CfHR34R9RMYG_xLBPpd_AvFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.118.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c4:74:7c:f6:86:4d:58:16:e8:38:ac:dc:28:78:a3:44:10:
b3:cd:b6:8d:d6:ab:0a:c4:e6:5b:85:c0:c9:02:29:cf:19:0b:
a0:4d:75:77:ea:c0:c3:37:17:00:49:d9:71:41:19:61:7b:84:
82:b0:e0:38:d2:b0:b1:da:8a:00:7d:a7:e6:93:bb:07:2f:d0:
92:42:6c:4b:91:04:31:1c:55:49:54:e8:e7:f4:df:fb:99:8d:
e8:ed:75:9c:a0:a4:99:56:fc:6e:30:23:68:a8:60:82:e5:9a:
f4:f9:eb:e3:e6:95:3b:a9:cb:7f:1f:33:3a:e1:b0:e2:50:35:
ea:3b:4c:00:9b:ad:5d:59:ac:15:3b:ae:fa:33:f1:d7:4d:21:
14:05:75:0b:c4:67:09:3b:37:18:5d:68:87:af:65:bd:fa:83:
f5:7b:64:24:01:18:27:83:f8:5f:4d:6c:0a:3d:54:f7:2a:c6:
2e:61:26:44:68:b8:f3:48:16:7a:08:81:3a:ce:ce:94:7d:6c:
9a:9c:6b:a8:40:a8:d1:9b:1a:fc:06:fc:eb:36:fd:5a:0d:d4:
ba:60:30:16:f8:bc:d7:fa:57:e4:63:0e:67:83:15:d4:bf:ff:
e8:b3:d3:0e:f1:a3:89:dd:ee:b2:5c:8b:23:e3:86:51:47:bc:
1f:0e:77:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDBpUIdm8wuGnvVd/sw1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDY4NTg2ODMyOGVkNmI1OWZkYjgwMDg1NWI3NThkN2U4
MjU2MTIwHhcNMjMwMTAyMDU1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmZlMDI3Yzc0NzdlMTFmNTEzMTgxYmZjNGIwNGZhNWRmYzBiYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VLI9OvUmy4JnhRCJTIc0xZUba90
1gJo/83cUPVROiriF9J/gm3XoV+JbNyEoIHNiOew68ssdRc0o52xEQPnPAKAGWYI
OJES/cOkW8KsZxa2DU8C27U6dMAB2KSO+6RbqvdAj2XgxgKGmjw7JQLBHSi+GqQP
xPWJ5mKOek/fBD0OPgj7ECSMT8PMm/wk60GHi4F11/wMcRn+ndLYQ8T1U7YiWowb
5K1fTCQPljepwfDkIN/nhn1cX3e26tMAFdIXCLEXjo1rOvYcXuurTeIy08K/6pjF
9DcNrxUNa8QKMJXKPu06SgAMc4lkI7maPVVKF8EoUBfh7Oleyh7SjOVAtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFML+Anx0d+EfUTGBv8SwT6XfwLxUMB8GA1UdIwQY
MBaAFA4GhYaDKO1rWf24AIVbdY1+glYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdhRmhvTW83V3RaX2JnQWhWdDFqWDZDVmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iY2NmNzUtYzlkZC00Y2RkLTljMTIt
YjY2MTY0YzdjOWMwLzEvd3Y0Q2ZIUjM0UjlSTVlHX3hMQlBwZF9BdkZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iY2NmNzUtYzlkZC00Y2RkLTljMTItYjY2MTY0YzdjOWMw
LzEvRGdhRmhvTW83V3RaX2JnQWhWdDFqWDZDVmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN2MA0G
CSqGSIb3DQEBCwUAA4IBAQCGxHR89oZNWBboOKzcKHijRBCzzbaN1qsKxOZbhcDJ
AinPGQugTXV36sDDNxcASdlxQRlhe4SCsOA40rCx2ooAfafmk7sHL9CSQmxLkQQx
HFVJVOjn9N/7mY3o7XWcoKSZVvxuMCNoqGCC5Zr0+evj5pU7qct/HzM64bDiUDXq
O0wAm61dWawVO676M/HXTSEUBXULxGcJOzcYXWiHr2W9+oP1e2QkARgng/hfTWwK
PVT3KsYuYSZEaLjzSBZ6CIE6zs6UfWyanGuoQKjRmxr8BvzrNv1aDdS6YDAW+LzX
+lfkYw5ngxXUv//os9MO8aOJ3e6yXIsj44ZRR7wfDneQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:53 2025 by rpki-client