Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/fbGdfx7r-lFLgHGjuXTjFVchh_A.roa
File: fbGdfx7r-lFLgHGjuXTjFVchh_A.roa (raw, json)
Hash identifier: JQ/wQNX1pnAx/02IKY9PJ+Y4aL1AuC0no8S+CT9dxZo=
Subject key identifier: 7D:B1:9D:7F:1E:EB:FA:51:4B:80:71:A3:B9:74:E3:15:57:21:87:F0
Certificate issuer: /CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Certificate serial: 0B1E10
Authority key identifier: 74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/fbGdfx7r-lFLgHGjuXTjFVchh_A.roa
Signing time: Sat 01 Jan 2022 01:01:28 +0000
ROA not before: Sat 01 Jan 2022 01:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 146.19.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728592 (0xb1e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Validity
Not Before: Jan 1 01:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7db19d7f1eebfa514b8071a3b974e315572187f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:5b:8a:b3:fc:de:29:15:64:38:a6:6a:10:
04:ad:fe:41:cc:44:60:a2:15:e9:e5:08:37:44:4f:
08:54:45:84:7f:c0:4e:9a:f2:a0:0d:11:2b:59:9c:
a1:7b:95:14:fc:45:d8:28:fd:30:0e:30:62:67:63:
41:58:7e:ef:ff:29:6c:9d:e8:f3:54:2e:30:c4:c3:
e1:82:0c:0f:b0:e9:1c:80:b9:c0:9c:e9:fb:f9:34:
a7:7c:43:e8:7f:05:65:ab:ce:3d:0b:4d:4a:70:3f:
3e:4e:a1:c0:80:cb:4d:ce:d4:8e:8c:bf:47:a0:fb:
ce:2c:ef:16:dc:0c:a6:7b:c2:29:5e:ad:0f:d9:1e:
9d:1d:63:94:5f:3d:58:73:f5:e0:a8:5d:fa:ba:a3:
96:1e:00:e5:76:68:4c:29:95:31:46:87:f8:4a:ec:
bf:62:84:8c:7d:ce:7e:52:49:54:6b:88:bb:86:d5:
f3:32:5a:b7:d6:48:1b:53:0d:1a:01:9f:8f:db:8d:
ff:a0:ee:c8:30:75:82:75:5b:88:11:ba:e0:8f:52:
0f:bd:df:29:dc:ca:7a:b1:ef:f1:7e:c5:97:a0:60:
1d:53:a8:78:0e:5d:b1:28:e8:67:eb:d3:13:aa:96:
96:4b:f0:6c:a5:16:0e:bc:87:ee:05:73:3b:1e:bf:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:9D:7F:1E:EB:FA:51:4B:80:71:A3:B9:74:E3:15:57:21:87:F0
X509v3 Authority Key Identifier:
keyid:74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/fbGdfx7r-lFLgHGjuXTjFVchh_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/dPxkoG7mriXC0j1iVe0lQr9R2K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.233.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0c:27:3d:74:7f:78:03:8a:d4:54:65:34:44:9b:93:3d:8a:
b0:0b:91:bd:64:d8:70:13:39:ad:ec:e1:32:f4:4f:5d:5e:32:
56:05:b0:8f:7a:3d:89:c0:89:cd:99:f6:a7:74:0c:7f:07:04:
61:aa:a1:f0:29:87:b0:aa:5e:5d:e7:4c:b6:d3:8d:3c:5b:37:
13:88:bd:c4:72:7f:c8:2d:ce:bb:3a:c4:69:f2:9a:78:5b:6b:
e2:b9:cc:45:45:bc:07:70:3c:ea:fd:a9:cc:24:66:65:cc:52:
77:f8:3d:69:cd:7d:48:73:33:b9:12:fa:43:ba:5d:ac:54:55:
fa:38:50:22:83:3a:ec:27:79:c2:ea:69:6d:f1:0a:90:1a:95:
50:c9:b2:8c:82:3a:31:0c:11:a8:01:be:dc:a0:51:ef:cf:b9:
03:ad:35:61:63:49:a9:bd:ce:12:29:ef:ab:ea:20:39:c9:3b:
90:99:5f:cd:91:c0:c3:35:c2:df:ce:4c:72:fe:b9:13:21:a8:
af:3a:55:66:9b:39:1e:52:aa:43:9f:c7:b5:eb:10:58:7c:b9:
89:46:4b:1c:71:4d:a0:7c:28:9f:f9:f9:15:2b:68:5a:2a:d7:
58:9d:98:f3:62:cf:98:b0:00:61:6f:dc:5a:cc:60:22:0b:bd:
bd:53:0b:8c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDCx4QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
ZmM2NGEwNmVlNmFlMjVjMmQyM2Q2MjU1ZWQyNTQyYmY1MWQ4YWUwHhcNMjIwMTAx
MDEwMTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZGIxOWQ3ZjFlZWJm
YTUxNGI4MDcxYTNiOTc0ZTMxNTU3MjE4N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtklbirP83ikVZDimahAErf5BzERgohXp5Qg3RE8IVEWEf8BO
mvKgDRErWZyhe5UU/EXYKP0wDjBiZ2NBWH7v/ylsnejzVC4wxMPhggwPsOkcgLnA
nOn7+TSnfEPofwVlq849C01KcD8+TqHAgMtNztSOjL9HoPvOLO8W3Ayme8IpXq0P
2R6dHWOUXz1Yc/XgqF36uqOWHgDldmhMKZUxRof4Suy/YoSMfc5+UklUa4i7htXz
Mlq31kgbUw0aAZ+P243/oO7IMHWCdVuIEbrgj1IPvd8p3Mp6se/xfsWXoGAdU6h4
Dl2xKOhn69MTqpaWS/BspRYOvIfuBXM7Hr8sBQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFH2xnX8e6/pRS4Bxo7l04xVXIYfwMB8GA1UdIwQYMBaAFHT8ZKBu5q4lwtI9
YlXtJUK/UdiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZFB4a29HN21yaVhDMGoxaVZlMGxRcjlSMks0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81MC83ZjU1ZmQtZGY5Ny00NTY0LTlhNGEtZjUxMzhkNWQ3NTNmLzEv
ZmJHZGZ4N3ItbEZMZ0hHanVYVGpGVmNoaF9BLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83
ZjU1ZmQtZGY5Ny00NTY0LTlhNGEtZjUxMzhkNWQ3NTNmLzEvZFB4a29HN21yaVhD
MGoxaVZlMGxRcjlSMks0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPpMA0GCSqGSIb3DQEBCwUAA4IB
AQBXDCc9dH94A4rUVGU0RJuTPYqwC5G9ZNhwEzmt7OEy9E9dXjJWBbCPej2JwInN
mfandAx/BwRhqqHwKYewql5d50y20408WzcTiL3Ecn/ILc67OsRp8pp4W2viucxF
RbwHcDzq/anMJGZlzFJ3+D1pzX1IczO5EvpDul2sVFX6OFAigzrsJ3nC6mlt8QqQ
GpVQybKMgjoxDBGoAb7coFHvz7kDrTVhY0mpvc4SKe+r6iA5yTuQmV/NkcDDNcLf
zkxy/rkTIaivOlVmmzkeUqpDn8e16xBYfLmJRksccU2gfCif+fkVK2haKtdYnZjz
Ys+YsABhb9xazGAiC729UwuM
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:57 2025 by rpki-client