Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/WQae6nNj19AMr-M-FsCfjd0xEIw.roa
File: WQae6nNj19AMr-M-FsCfjd0xEIw.roa (raw, json)
Hash identifier: SNN/lr64vnqcWovVecZTW3Tvdmeg1dQ7qnfNcppHpD8=
Subject key identifier: 59:06:9E:EA:73:63:D7:D0:0C:AF:E3:3E:16:C0:9F:8D:DD:31:10:8C
Certificate issuer: /CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
Certificate serial: 01875748CF601C13EC2B98D2A1CAE0A2989B
Authority key identifier: F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/WQae6nNj19AMr-M-FsCfjd0xEIw.roa
Signing time: Thu 06 Apr 2023 15:56:42 +0000
ROA not before: Thu 06 Apr 2023 15:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:48:cf:60:1c:13:ec:2b:98:d2:a1:ca:e0:a2:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
Validity
Not Before: Apr 6 15:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59069eea7363d7d00cafe33e16c09f8ddd31108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:84:f4:70:9f:b4:1e:ff:d5:91:f1:4a:24:
e2:0f:fe:32:d7:87:0e:a2:a2:62:87:c1:59:ad:47:
de:88:1d:b9:bf:9b:9b:80:c7:cb:16:e1:f8:8b:85:
6d:7a:7f:f2:4d:cc:30:be:6b:e0:15:84:c3:b4:68:
70:a1:9f:cc:3d:68:ea:5f:7f:0f:d8:f2:c7:8f:80:
63:be:af:aa:26:0e:d8:c3:50:49:f0:63:a5:7e:92:
8a:db:77:7c:37:90:45:51:a5:13:c6:67:ad:ae:ca:
70:45:17:56:a4:95:26:93:99:d5:9d:eb:bb:66:14:
90:73:66:61:e9:7f:31:1b:65:54:93:77:74:af:b8:
4a:7a:a0:1e:6f:57:94:c0:3e:d2:3d:31:45:39:b9:
ce:7e:a0:38:12:dc:3f:ae:31:bf:7a:c2:19:23:aa:
29:a9:2e:8e:38:a0:e7:2b:36:64:d4:c0:c3:86:ab:
94:84:62:1a:61:a3:31:7d:0e:d7:d5:e3:eb:a4:db:
1b:b0:e7:50:cc:0d:63:f1:c1:af:d7:e1:95:73:6f:
f3:c6:63:9a:98:38:8b:70:34:03:2f:39:6d:ea:18:
c9:44:13:a2:d5:2e:6e:7e:43:21:c5:84:e3:7c:18:
1d:b4:43:fa:c2:ec:93:60:df:c9:82:1b:f9:ff:f8:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:9E:EA:73:63:D7:D0:0C:AF:E3:3E:16:C0:9F:8D:DD:31:10:8C
X509v3 Authority Key Identifier:
keyid:F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/WQae6nNj19AMr-M-FsCfjd0xEIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
29:69:5e:42:24:e3:1c:09:01:da:dd:f6:32:c5:6c:1b:8e:11:
db:5b:ac:c0:0b:1a:99:b5:c6:42:7e:ae:31:7b:2a:ee:37:32:
7d:23:6d:63:85:4e:91:91:43:52:90:8e:a7:d8:82:1d:dc:73:
4a:36:f1:35:d3:bc:95:df:8e:80:5c:38:e1:7d:4b:fd:f2:76:
ca:7f:c5:d7:c0:64:31:80:e7:81:d5:dc:b3:c5:a7:58:ae:b3:
2a:0a:b4:45:b7:88:bd:21:7d:db:58:70:52:ce:c1:68:b5:58:
c2:cc:7e:4b:3e:94:03:1d:12:90:25:9d:02:90:00:d1:08:96:
e5:0b:a0:0d:8b:2c:b2:b8:38:b3:69:ac:22:5c:e0:ac:09:8e:
9d:78:7b:bd:81:81:0d:ca:f6:45:b1:a5:74:23:2d:b3:9e:30:
1c:59:a2:00:a0:c8:ed:57:4e:4c:95:6e:fa:f8:7c:45:75:b4:
ad:69:12:79:b0:af:07:e9:4f:45:d5:0b:2f:ea:f5:6b:a9:32:
45:5d:3b:e7:33:b1:98:8c:43:2a:02:10:05:a0:60:8c:0b:2e:
4f:85:52:bf:35:9e:fa:b6:fb:c3:36:03:68:71:ce:00:ea:b9:
50:56:97:e8:55:36:24:61:96:70:31:b0:b5:fb:21:d6:6c:8d:
81:61:e2:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdXSM9gHBPsK5jSocrgopibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjVhMTdlMTIwNTVkNTRhMjJhNWNlMjU4NmVmZGVjZDBk
YmVhZTcwHhcNMjMwNDA2MTU1NjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTA2OWVlYTczNjNkN2QwMGNhZmUzM2UxNmMwOWY4ZGRkMzExMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/2E9HCftB7/1ZHxSiTiD/4y14cO
oqJih8FZrUfeiB25v5ubgMfLFuH4i4Vten/yTcwwvmvgFYTDtGhwoZ/MPWjqX38P
2PLHj4Bjvq+qJg7Yw1BJ8GOlfpKK23d8N5BFUaUTxmetrspwRRdWpJUmk5nVneu7
ZhSQc2Zh6X8xG2VUk3d0r7hKeqAeb1eUwD7SPTFFObnOfqA4Etw/rjG/esIZI6op
qS6OOKDnKzZk1MDDhquUhGIaYaMxfQ7X1ePrpNsbsOdQzA1j8cGv1+GVc2/zxmOa
mDiLcDQDLzlt6hjJRBOi1S5ufkMhxYTjfBgdtEP6wuyTYN/Jghv5//ik6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkGnupzY9fQDK/jPhbAn43dMRCMMB8GA1UdIwQY
MBaAFPO1oX4SBV1Uoipc4lhu/ezQ2+rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdXaGZoSUZYVlNpS2x6aVdHNzk3TkRiNnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iMzA1NTQtMGY0Yy00NDNkLTg2Mzkt
MzI4ZWI1ZDU5ZTQ1LzEvV1FhZTZuTmoxOUFNci1NLUZzQ2ZqZDB4RUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iMzA1NTQtMGY0Yy00NDNkLTg2MzktMzI4ZWI1ZDU5ZTQ1
LzEvODdXaGZoSUZYVlNpS2x6aVdHNzk3TkRiNnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN6MA0G
CSqGSIb3DQEBCwUAA4IBAQApaV5CJOMcCQHa3fYyxWwbjhHbW6zACxqZtcZCfq4x
eyruNzJ9I21jhU6RkUNSkI6n2IId3HNKNvE107yV346AXDjhfUv98nbKf8XXwGQx
gOeB1dyzxadYrrMqCrRFt4i9IX3bWHBSzsFotVjCzH5LPpQDHRKQJZ0CkADRCJbl
C6ANiyyyuDizaawiXOCsCY6deHu9gYENyvZFsaV0Iy2znjAcWaIAoMjtV05MlW76
+HxFdbStaRJ5sK8H6U9F1Qsv6vVrqTJFXTvnM7GYjEMqAhAFoGCMCy5PhVK/NZ76
tvvDNgNocc4A6rlQVpfoVTYkYZZwMbC1+yHWbI2BYeLp
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:54:04 2025 by rpki-client