Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa
File: t5cX4p-wbZJiIP9fJh22ALHg3Io.roa (raw, json)
Hash identifier: IeRDANZMQFjRkI02ivsyrxTTaAZ6fc6g6i/UdM3h56Q=
Subject key identifier: B7:97:17:E2:9F:B0:6D:92:62:20:FF:5F:26:1D:B6:00:B1:E0:DC:8A
Certificate issuer: /CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Certificate serial: 7C75D5
Authority key identifier: 6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa
Signing time: Sat 01 Jan 2022 02:54:32 +0000
ROA not before: Sat 01 Jan 2022 02:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8156629 (0x7c75d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Validity
Not Before: Jan 1 02:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79717e29fb06d926220ff5f261db600b1e0dc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:3f:49:28:8b:50:6e:0b:a8:74:a5:cf:c3:
a8:7e:fe:1f:f6:e5:51:30:c9:74:ff:57:04:a8:d6:
df:c5:31:1c:a0:68:c8:9e:a8:88:f8:2d:de:57:cb:
d5:95:55:45:50:74:93:e0:3b:ca:4a:3c:ff:49:22:
8b:b3:8f:99:b7:a5:fe:39:2b:41:5a:e3:97:a2:3f:
26:84:ea:e5:e0:20:11:6c:0d:74:2a:8e:9f:8f:c9:
89:78:3e:cb:84:d0:5f:bc:9f:a9:01:54:37:a3:23:
9d:d9:31:e0:fb:50:59:24:dc:18:ce:b8:c1:e7:b8:
91:e0:3a:87:08:bb:ee:d5:3c:59:85:50:a6:c0:58:
a0:61:4e:d8:f7:8f:00:a0:6d:9a:bd:1f:da:4e:dc:
c5:20:4c:6c:ab:f7:79:a7:d0:e4:4c:f1:e7:f0:6e:
0c:4e:20:da:7c:0e:c2:5a:5e:b6:ac:a7:c8:ce:35:
54:47:aa:fb:bc:31:ad:8e:63:96:92:4d:b1:62:9d:
11:32:21:5d:2f:27:2e:ed:e5:af:11:43:45:0c:b8:
3a:26:e1:e1:9f:ae:d5:14:44:5f:4c:2d:09:5d:65:
ff:b3:1d:8c:b7:04:22:30:b6:05:30:2a:95:b2:04:
6e:87:33:4a:a7:c3:a3:37:67:76:32:de:0d:30:f1:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:17:E2:9F:B0:6D:92:62:20:FF:5F:26:1D:B6:00:B1:E0:DC:8A
X509v3 Authority Key Identifier:
keyid:6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/b2JNCoXM2eltKNdslRZVtrBXgtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4d:46:b7:91:5a:99:9e:86:82:f8:93:49:08:2a:0a:f3:ee:
1a:0b:0d:a4:58:9e:35:eb:69:bf:af:6a:bf:48:d6:1d:38:b3:
8e:81:8a:df:65:8c:c4:70:9f:24:86:52:37:89:53:a9:96:1d:
66:93:73:ea:38:48:75:9c:65:17:b4:f8:1d:d9:85:87:3c:ce:
b4:84:6f:f4:17:44:e2:ec:b7:66:e1:b1:6e:0c:e1:08:9f:b3:
5a:cc:f1:28:6b:85:cb:10:bc:d9:95:b8:86:19:35:7a:32:85:
a8:cf:60:75:a6:0f:4f:f2:6b:01:8b:13:41:07:4d:22:8e:40:
9a:b3:af:0d:51:8a:09:5e:3b:a5:e1:5b:50:a4:cc:89:f0:b2:
36:a6:f5:09:d4:c9:e3:3b:64:84:7f:31:08:80:9b:e9:fb:4d:
9c:d8:9d:bc:83:86:f6:ad:95:7a:1d:90:e8:31:30:8b:76:ce:
28:96:45:4f:9a:9e:d7:88:6d:9b:b4:9f:c8:74:e5:2c:69:fb:
49:bd:ae:36:75:fa:44:78:e3:65:a0:b9:d9:3a:ac:47:59:76:
50:32:67:eb:bc:52:b7:d2:ce:8c:11:75:1c:d9:6a:99:bf:23:
31:c9:2d:d1:a3:f4:a4:81:56:1d:2e:b1:e7:a7:8b:46:1e:7c:
3d:88:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:55 2025 by rpki-client