Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/tnHqOP5HdB5IhA_SJ7ypL2U5n3w.roa
File: tnHqOP5HdB5IhA_SJ7ypL2U5n3w.roa (raw, json)
Hash identifier: 4zQEWQPxLmV2NrJxazX/mcqpUYMDmJuoQxLoFD2l2pc=
Subject key identifier: B6:71:EA:38:FE:47:74:1E:48:84:0F:D2:27:BC:A9:2F:65:39:9F:7C
Certificate issuer: /CN=fd8e827d60cdefed87bc0e6883d6d38c8e4e98b3
Certificate serial: 01856FCBAE196DEB76931A40A3B205069D7C
Authority key identifier: FD:8E:82:7D:60:CD:EF:ED:87:BC:0E:68:83:D6:D3:8C:8E:4E:98:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y6CfWDN7-2HvA5og9bTjI5OmLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/tnHqOP5HdB5IhA_SJ7ypL2U5n3w.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 146.19.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ae:19:6d:eb:76:93:1a:40:a3:b2:05:06:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8e827d60cdefed87bc0e6883d6d38c8e4e98b3
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b671ea38fe47741e48840fd227bca92f65399f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:0d:13:ca:cc:d0:1c:ad:78:3c:7b:64:69:
d1:fa:c1:6b:94:90:91:c3:3b:98:e2:af:6e:c9:c4:
8a:56:a1:46:a3:f5:40:12:9c:e8:dd:db:c3:a8:6c:
8f:f9:03:2b:23:78:37:7d:6e:b4:b1:93:77:6a:34:
27:0a:5e:9a:b9:9e:27:35:fc:a1:2f:85:a5:b8:e9:
95:8b:15:a6:2d:a4:8d:0a:dc:26:9c:1b:6c:cd:6d:
e3:34:d4:36:75:1c:c6:91:d0:ee:68:88:94:8a:f7:
d9:a0:a5:dd:dd:39:64:b7:c4:ab:f7:7a:6d:39:d3:
c2:b1:cb:f3:25:21:b2:85:b0:c8:3f:09:8a:e3:d1:
cb:5a:76:85:bf:20:f9:c3:c9:56:0e:5e:29:ec:26:
3f:a8:28:3b:ec:d5:b4:df:e2:91:d2:87:49:17:84:
8c:7d:01:66:f9:d7:7d:b2:2a:74:15:be:ed:91:2a:
41:c5:4e:71:ad:f6:51:0c:96:88:34:15:25:80:22:
2d:50:f6:38:00:f7:14:39:c9:c4:89:a2:b2:19:ce:
e6:1e:34:42:9a:70:32:5d:b3:81:9f:ed:bb:e5:34:
f7:58:5a:46:50:9f:f0:05:34:2f:03:87:89:69:69:
bf:cd:1b:93:75:85:49:c8:65:83:94:c3:ec:c8:ab:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:EA:38:FE:47:74:1E:48:84:0F:D2:27:BC:A9:2F:65:39:9F:7C
X509v3 Authority Key Identifier:
keyid:FD:8E:82:7D:60:CD:EF:ED:87:BC:0E:68:83:D6:D3:8C:8E:4E:98:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y6CfWDN7-2HvA5og9bTjI5OmLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/tnHqOP5HdB5IhA_SJ7ypL2U5n3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/_Y6CfWDN7-2HvA5og9bTjI5OmLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:65:ab:52:b1:f3:79:12:e4:95:05:20:5e:30:be:f6:d2:c8:
12:33:7a:c5:f5:42:f5:25:2e:21:e9:c8:9c:8d:fa:e5:62:2c:
a0:9b:a2:a8:cc:d3:e5:19:19:d5:c2:a3:83:b3:2c:94:2f:08:
32:d4:5a:71:a8:9e:89:58:83:88:46:e0:e6:93:c1:06:df:bb:
4c:f6:78:46:60:31:2c:ce:9c:3d:3a:4b:16:4e:bf:79:52:e1:
0e:63:b8:36:ec:98:bd:35:e6:cd:8f:d7:56:80:e2:f3:64:2f:
38:4d:c8:43:2c:7c:8c:76:4c:21:9b:59:75:bc:f8:38:18:09:
3f:7a:10:f5:5e:0e:e1:46:69:dc:68:b4:bf:c7:52:f5:b9:fd:
5f:5c:5a:fa:83:b4:7f:6e:34:6c:6c:f9:4e:3b:ea:6b:51:ad:
e6:0c:c5:c7:d1:ce:10:34:de:78:54:bd:47:4a:6b:2b:9f:a6:
2f:f9:c0:72:9a:cc:e4:11:90:c9:cd:99:19:71:4f:ee:45:7c:
81:39:0b:e9:93:b4:3b:7e:22:8c:be:2e:90:d0:42:4f:9a:0e:
f6:97:24:e2:48:eb:6f:a8:da:6b:12:86:13:d4:4d:fb:5c:55:
9b:2b:97:a7:3c:2f:0c:2f:89:7b:fd:de:8b:a2:a1:a7:52:32:
47:86:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:37 2025 by rpki-client