Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/GLIqflqKV2R-oEsNRVOLgy57Hac.roa
File: GLIqflqKV2R-oEsNRVOLgy57Hac.roa (raw, json)
Hash identifier: u3xrm9k5eVCz9BsKSwDBNeBAGNM6tijqdw4dROy8VNw=
Subject key identifier: 18:B2:2A:7E:5A:8A:57:64:7E:A0:4B:0D:45:53:8B:83:2E:7B:1D:A7
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 018820867608FADA697B0338B8E06F2BCD06
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/GLIqflqKV2R-oEsNRVOLgy57Hac.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:76:08:fa:da:69:7b:03:38:b8:e0:6f:2b:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b22a7e5a8a57647ea04b0d45538b832e7b1da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:ea:de:9f:db:e0:97:3d:4f:74:e9:96:b9:
45:eb:3c:17:c3:e8:67:6e:c2:e2:df:a7:7c:d2:1d:
31:65:bd:23:24:9d:c7:09:54:1e:a0:bf:79:8e:13:
6e:ab:2a:57:72:dc:03:83:1b:3b:1e:8c:26:11:a7:
e1:0c:eb:69:ad:02:cb:46:b0:c2:24:e4:be:49:56:
98:d8:f3:14:cf:cb:3b:49:7a:39:13:19:54:50:a6:
c1:51:4d:fc:df:0d:b4:8c:23:62:36:89:78:91:66:
74:0f:86:c3:85:9c:e8:b1:cb:f2:87:d0:c6:09:fe:
b3:52:db:4f:43:99:8e:07:7b:fe:85:9f:eb:df:d0:
f1:25:2e:45:06:a8:96:1c:90:5c:e8:e0:5b:88:fa:
1d:03:64:1c:74:f7:02:12:cb:01:e1:a0:5b:ad:3d:
1a:f2:1a:74:44:27:50:12:f6:09:cf:55:e9:ff:61:
c7:34:d4:cc:4f:a7:da:db:23:7e:02:8b:4f:81:d4:
12:ed:7d:3d:b8:fb:d6:51:af:8d:7f:7a:0c:5f:8e:
90:e5:f8:4e:dc:14:6c:6a:b0:03:14:9b:1f:5a:73:
fc:c8:6e:2d:28:4e:9d:65:e9:e5:70:3e:27:44:18:
f5:6e:82:3a:10:a2:e5:5d:08:ab:d4:98:47:df:24:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:2A:7E:5A:8A:57:64:7E:A0:4B:0D:45:53:8B:83:2E:7B:1D:A7
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/GLIqflqKV2R-oEsNRVOLgy57Hac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:48:ae:ed:3c:09:4e:58:4e:b6:42:69:0d:23:88:9e:b9:11:
8d:ad:fd:68:01:e1:5a:21:e2:1c:03:3d:2b:02:b1:2d:0d:e8:
35:e3:5d:8e:e1:9a:3b:12:e5:85:1c:32:06:81:49:a0:5a:2c:
a5:5b:42:74:83:60:1e:30:09:22:e1:a5:64:3a:16:c0:01:6b:
fe:cd:95:a3:04:4d:52:65:7f:62:10:f4:30:55:60:e8:d0:58:
de:75:55:5c:7e:1c:0d:f8:71:d4:ab:ee:23:5a:71:88:83:c5:
00:f7:5a:95:9c:51:9e:af:2c:0e:42:06:db:98:53:31:0e:aa:
4a:c4:b5:70:4a:e8:28:81:fa:c5:8e:14:5d:24:01:e2:ea:a4:
cd:8e:91:8a:12:42:3f:ac:18:85:fe:8f:95:ad:b8:74:cc:d4:
2a:9b:27:9e:55:ae:d6:7f:17:b0:b7:ef:e4:64:98:9b:02:76:
58:bb:3c:87:10:5e:b2:70:27:2a:07:1c:c2:7c:41:5c:56:31:
eb:3f:6d:6c:6f:23:2d:65:a1:4e:90:eb:ca:5c:b5:a8:71:f0:
ec:77:de:a9:9d:fe:e6:88:87:bc:da:79:0c:87:e4:72:bd:21:
6f:69:7d:ac:06:69:da:19:80:af:77:e5:d8:0d:c5:83:78:e7:
43:25:d6:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnYI+tppewM4uOBvK80GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYTg1NTg2Yjk5MWNmNzBlMGFmMTljMDNhNDM3NmUyN2Qw
MjZmNDMwHhcNMjMwNTE1MTc0NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGIyMmE3ZTVhOGE1NzY0N2VhMDRiMGQ0NTUzOGI4MzJlN2IxZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiybq3p/b4Jc9T3TplrlF6zwXw+hn
bsLi36d80h0xZb0jJJ3HCVQeoL95jhNuqypXctwDgxs7HowmEafhDOtprQLLRrDC
JOS+SVaY2PMUz8s7SXo5ExlUUKbBUU383w20jCNiNol4kWZ0D4bDhZzoscvyh9DG
Cf6zUttPQ5mOB3v+hZ/r39DxJS5FBqiWHJBc6OBbiPodA2QcdPcCEssB4aBbrT0a
8hp0RCdQEvYJz1Xp/2HHNNTMT6fa2yN+AotPgdQS7X09uPvWUa+Nf3oMX46Q5fhO
3BRsarADFJsfWnP8yG4tKE6dZenlcD4nRBj1boI6EKLlXQir1JhH3yQoowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBiyKn5aildkfqBLDUVTi4Muex2nMB8GA1UdIwQY
MBaAFOuoVYa5kc9w4K8ZwDpDduJ9Am9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZoVmhybVJ6M0RncnhuQU9rTjI0bjBDYjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xODIxMDQtNDU3MC00OGNlLWE5N2Qt
OTZlYjQ5ZDE5NTVjLzEvR0xJcWZscUtWMlItb0VzTlJWT0xneTU3SGFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xODIxMDQtNDU3MC00OGNlLWE5N2QtOTZlYjQ5ZDE5NTVj
LzEvNjZoVmhybVJ6M0RncnhuQU9rTjI0bjBDYjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOVMA0G
CSqGSIb3DQEBCwUAA4IBAQAKSK7tPAlOWE62QmkNI4ieuRGNrf1oAeFaIeIcAz0r
ArEtDeg1412O4Zo7EuWFHDIGgUmgWiylW0J0g2AeMAki4aVkOhbAAWv+zZWjBE1S
ZX9iEPQwVWDo0FjedVVcfhwN+HHUq+4jWnGIg8UA91qVnFGerywOQgbbmFMxDqpK
xLVwSugogfrFjhRdJAHi6qTNjpGKEkI/rBiF/o+Vrbh0zNQqmyeeVa7Wfxewt+/k
ZJibAnZYuzyHEF6ycCcqBxzCfEFcVjHrP21sbyMtZaFOkOvKXLWocfDsd96pnf7m
iIe82nkMh+RyvSFvaX2sBmnaGYCvd+XYDcWDeOdDJdb/
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:59 2025 by rpki-client