Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/XXaq6JlXWcBbO7ZpXlvxwaM0xZc.roa
File: XXaq6JlXWcBbO7ZpXlvxwaM0xZc.roa (raw, json)
Hash identifier: SYcRtkltLLq5fnaYblQX4B+A8zRKTLb1BU14+c2e8kE=
Subject key identifier: 5D:76:AA:E8:99:57:59:C0:5B:3B:B6:69:5E:5B:F1:C1:A3:34:C5:97
Certificate issuer: /CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
Certificate serial: 0185728C7BC614947172EA97AE05AEDDCFC1
Authority key identifier: F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/XXaq6JlXWcBbO7ZpXlvxwaM0xZc.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 146.19.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7b:c6:14:94:71:72:ea:97:ae:05:ae:dd:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d76aae8995759c05b3bb6695e5bf1c1a334c597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:a5:84:03:27:f8:ac:5a:f2:bb:af:e9:02:
39:25:c9:cf:e5:16:08:b4:78:f6:3f:35:07:c4:7d:
12:8e:e8:ae:32:00:85:15:dc:07:94:0c:47:b0:a9:
eb:39:c3:a1:83:5a:f5:a3:82:a7:26:f2:6b:e5:aa:
10:64:0c:ba:28:ca:99:ec:7e:62:20:8c:10:a6:19:
73:2c:a3:23:5b:bc:e3:c7:8d:7d:41:43:4c:e8:b4:
b7:22:b8:40:5c:63:fc:d0:9a:75:e5:17:40:3a:df:
9b:f4:be:e0:bc:f6:94:92:97:d1:cf:7a:e1:cb:a3:
5f:a8:19:31:b7:a9:15:f3:70:58:28:5e:dd:ce:1b:
38:21:65:62:55:ab:c1:c6:6d:fe:d5:ed:9d:f6:63:
3a:12:14:af:89:76:b8:3e:52:9c:e9:92:6a:ef:a2:
7a:18:dc:af:26:c1:b4:6d:9e:93:eb:1e:e0:40:ee:
a5:3e:b8:90:2e:32:c3:e8:0e:7b:35:81:12:d1:c3:
1f:ce:4f:3b:12:6f:6f:40:07:e7:8f:e4:35:7f:b9:
ae:b9:39:92:1d:74:a3:d8:00:fd:70:65:73:68:82:
d5:e5:94:18:be:64:c1:4d:fc:fe:67:96:fa:ff:30:
4d:f7:c6:b9:00:9e:0d:6c:82:4e:64:22:a6:09:fc:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:AA:E8:99:57:59:C0:5B:3B:B6:69:5E:5B:F1:C1:A3:34:C5:97
X509v3 Authority Key Identifier:
keyid:F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/XXaq6JlXWcBbO7ZpXlvxwaM0xZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:af:0e:e0:15:f7:f4:b3:b8:58:02:90:55:6d:04:c0:26:34:
fd:07:80:4f:31:24:51:d3:38:50:49:ed:de:62:28:03:f8:97:
2b:b9:5f:79:7d:ea:73:2a:44:6e:37:f3:51:64:29:3f:79:81:
0e:5e:20:07:10:d7:06:3b:4d:ce:05:b4:07:1e:2c:30:fd:29:
18:eb:97:af:c8:df:2a:1b:0c:30:15:41:73:40:19:01:1a:90:
9b:b7:44:d6:2b:5b:a8:bc:a7:84:2e:73:aa:61:ae:b6:fc:44:
26:9c:6e:af:cd:c6:e9:92:72:ee:37:fa:8e:72:6d:4e:c6:64:
9a:ac:67:28:5f:f9:cf:bd:b0:0c:ca:93:ec:b9:d2:af:f7:ec:
28:82:e9:2e:e6:ea:1b:9d:fe:e0:51:28:f2:17:51:0c:46:ee:
5b:4e:68:8a:ee:02:22:d4:17:52:e5:db:0e:1e:dc:1f:76:25:
14:4b:2f:f1:62:ea:51:05:df:50:0d:d6:02:e1:11:dd:5d:60:
3b:04:04:b6:1a:c2:cd:8a:08:d9:8e:25:0a:7c:04:15:66:12:
71:4b:2f:ad:1d:4d:0a:59:4f:d5:35:8f:e6:d3:f0:f5:b4:5c:
3b:52:e4:4f:57:02:76:1a:ab:20:52:a0:ab:4c:ee:52:b8:08:
dc:91:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:08 2025 by rpki-client