Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/2MJFSd2OQnSAAW2xbZXdGbeFYsQ.roa
File: 2MJFSd2OQnSAAW2xbZXdGbeFYsQ.roa (raw, json)
Hash identifier: NjVD9tX0VeyTLyhIvXOLAXwZXAE9CZs0HSVTYR7lQ10=
Subject key identifier: D8:C2:45:49:DD:8E:42:74:80:01:6D:B1:6D:95:DD:19:B7:85:62:C4
Certificate issuer: /CN=846a1ba02e439066ef579010ea308054ac8bf9df
Certificate serial: 686C12
Authority key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/2MJFSd2OQnSAAW2xbZXdGbeFYsQ.roa
Signing time: Sat 01 Jan 2022 00:50:25 +0000
ROA not before: Sat 01 Jan 2022 00:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6843410 (0x686c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846a1ba02e439066ef579010ea308054ac8bf9df
Validity
Not Before: Jan 1 00:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8c24549dd8e427480016db16d95dd19b78562c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:c4:18:fc:5f:a1:ad:90:de:fa:da:1a:39:
a9:14:10:9e:1d:c8:7f:96:4a:d1:2c:c9:3a:ee:78:
39:14:d8:c1:02:f8:79:79:d8:a1:16:c1:96:75:23:
18:59:54:c0:77:4b:b8:1b:ff:cd:59:c1:95:86:81:
4d:d8:d4:1d:9e:92:3d:9e:f3:b4:47:a2:0e:61:0d:
ec:e5:f3:c4:a6:31:b7:52:3e:33:eb:8f:99:59:33:
9b:b8:91:72:1a:1e:af:f6:44:22:d5:44:ad:00:a4:
51:0f:c9:09:d7:83:dd:f9:6a:d7:8a:3a:dd:d2:ea:
5b:9f:c2:4e:26:b5:e6:3f:f4:cf:0a:16:e8:6f:00:
89:34:64:e7:5f:67:10:15:9b:32:7e:5c:bb:ff:4b:
7f:41:a5:5f:3e:b8:1a:c2:6c:81:e9:a3:d4:60:2d:
9c:76:21:ea:e4:28:dc:66:1d:3c:b9:67:e3:d0:a0:
4d:6a:95:80:3f:bd:2f:f6:4e:a3:ae:b4:b2:ea:84:
c9:20:ff:fa:db:fd:58:1c:38:82:bc:23:61:3e:cf:
12:d6:8a:6a:83:5c:e7:4d:0e:6e:03:d5:72:1b:4e:
a4:0f:25:94:63:1a:f4:9b:bc:fe:9c:6d:6b:f4:44:
ca:d6:de:7f:02:5d:af:2f:d7:15:ba:1d:e7:e7:82:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:45:49:DD:8E:42:74:80:01:6D:B1:6D:95:DD:19:B7:85:62:C4
X509v3 Authority Key Identifier:
keyid:84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/2MJFSd2OQnSAAW2xbZXdGbeFYsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4b:f7:77:70:f4:2f:48:44:9e:ca:0b:0a:98:6d:b1:60:3d:
aa:a7:56:db:39:a9:df:83:3e:24:34:12:37:56:0d:b3:f6:ac:
18:4d:24:57:80:3c:0f:94:ec:9f:05:2b:07:49:62:1d:f4:ac:
f8:1a:c5:de:07:45:b2:3d:74:c6:fc:85:ef:18:9a:56:08:57:
f8:53:e6:c1:4b:be:8b:58:a6:5a:04:0a:b6:92:cd:e8:2d:10:
99:fb:c3:4f:69:56:46:5c:eb:53:d6:68:1e:23:d4:d6:47:34:
da:2e:03:46:c0:f8:27:a0:c5:8b:9b:2d:73:df:99:f5:e7:a9:
5a:70:2d:30:db:28:a8:67:81:ad:c4:26:66:4e:42:fc:de:c1:
97:46:7f:62:18:cf:da:cf:de:19:19:b7:42:b4:f1:47:52:ea:
6f:e1:1c:f7:16:00:61:ad:0f:17:bd:cb:b2:a1:0e:96:4b:11:
94:c8:3b:11:33:dd:d7:5b:1d:93:3f:e9:26:8e:cb:9f:a7:8d:
6b:99:99:67:32:68:2f:69:2a:07:39:3e:9e:8f:70:85:38:5d:
0c:ed:d9:c5:97:7f:e3:de:de:4d:ec:8f:71:e4:15:9a:a5:ed:
66:9d:21:14:95:6a:a4:f0:41:2f:de:03:a0:b5:65:22:59:01:
22:6a:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:53 2025 by rpki-client