Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/PQ2JH5cgZBEA8q6Xmpu35XT5Lks.roa
File: PQ2JH5cgZBEA8q6Xmpu35XT5Lks.roa (raw, json)
Hash identifier: 6GoluJ/MaTuWaw7Fsbz4hA3fjON4tSi/l1XCbGiybAQ=
Subject key identifier: 3D:0D:89:1F:97:20:64:11:00:F2:AE:97:9A:9B:B7:E5:74:F9:2E:4B
Certificate issuer: /CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Certificate serial: 019E4881
Authority key identifier: C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/PQ2JH5cgZBEA8q6Xmpu35XT5Lks.roa
Signing time: Tue 17 May 2022 15:38:34 +0000
ROA not before: Tue 17 May 2022 15:38:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27150465 (0x19e4881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Validity
Not Before: May 17 15:38:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0d891f9720641100f2ae979a9bb7e574f92e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:99:f2:22:17:b2:8b:82:54:f5:e7:81:93:
c4:32:4f:91:b1:c7:01:7d:4d:63:b1:af:6d:e1:f8:
63:7b:58:7c:32:58:88:db:7f:1f:a2:8e:cc:d9:3b:
8c:c5:e8:7b:95:96:0c:58:41:3a:8e:8e:d2:4d:ea:
34:90:5f:ff:32:31:d7:36:4b:34:4f:b6:f8:f8:1c:
ec:df:ae:c0:a8:f2:65:a1:e0:3a:34:12:f6:2a:66:
d7:28:3d:9a:a0:6b:c0:14:53:9d:b1:60:83:ea:61:
89:5c:62:bd:a5:f3:8d:b0:70:d7:b0:19:ba:9e:b8:
09:ba:aa:6b:a2:87:9b:84:84:b6:bb:f8:a2:f7:20:
34:bc:53:f9:9c:85:19:37:b0:d6:a8:73:f5:70:18:
ad:35:4c:3d:13:93:08:e8:56:26:9c:56:1c:7a:0c:
32:d1:db:18:8f:7e:a4:e9:ec:d9:c8:86:67:b6:e0:
b0:09:39:0c:c4:0c:74:f4:15:84:44:ce:ca:16:19:
22:d9:e7:1f:00:5f:83:a2:ce:4b:63:cb:4c:61:79:
00:86:61:70:b1:ba:b7:ca:92:0c:b4:f7:40:64:92:
42:51:49:32:63:33:3c:20:dc:a5:8c:28:90:a1:3b:
43:e4:6d:a7:39:5d:29:ac:59:d3:5d:34:e7:6d:86:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:89:1F:97:20:64:11:00:F2:AE:97:9A:9B:B7:E5:74:F9:2E:4B
X509v3 Authority Key Identifier:
keyid:C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/PQ2JH5cgZBEA8q6Xmpu35XT5Lks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d0:91:55:ca:98:8f:54:36:ea:38:3d:6e:cd:41:f3:47:fa:
d4:4a:57:7e:24:eb:35:86:34:00:4d:90:ba:4e:4d:c8:69:6e:
b1:4f:4b:a5:c7:c8:4c:3d:a5:6f:e7:ac:23:69:91:1c:c2:32:
13:6e:68:14:c6:a5:11:a6:80:17:9b:9c:c0:66:85:8a:0d:cb:
dc:a5:18:e4:43:ef:f0:b6:c8:e3:89:d9:5e:35:1a:90:5a:cc:
5e:db:b0:0e:b3:75:aa:c6:36:c5:f1:60:61:29:c1:69:16:3c:
c2:46:39:c3:9f:d4:10:4b:bc:df:62:3c:05:54:34:99:22:ce:
61:8e:64:26:e0:49:9c:ac:28:c6:59:b2:b8:ed:13:13:53:98:
85:f7:77:bd:43:dc:c3:29:49:42:aa:d2:8e:a9:65:7f:1c:35:
30:ad:7b:e8:f3:31:db:0a:3f:10:f9:ac:5a:f3:99:60:92:ad:
4c:40:95:aa:9b:70:61:93:e5:57:9c:c1:d0:6d:9f:f1:1e:73:
27:15:b9:d8:bf:cb:f9:fd:85:c5:ae:9b:a4:4b:eb:e1:66:93:
07:ae:de:ae:02:93:a8:ae:d5:0d:2e:6c:c5:4c:01:20:24:0b:
f1:01:74:8b:82:be:d8:a3:39:9c:b2:d6:a4:a5:ee:85:0d:7f:
9e:f9:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:27 2025 by rpki-client