Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/N8SbNXTPYyoZGRlXulkc9T8mr90.roa
File: N8SbNXTPYyoZGRlXulkc9T8mr90.roa (raw, json)
Hash identifier: C4QG0FL8T1No4OWo2l1VuOGDK2H95GSCehG0WBgXHXI=
Subject key identifier: 37:C4:9B:35:74:CF:63:2A:19:19:19:57:BA:59:1C:F5:3F:26:AF:DD
Certificate issuer: /CN=846a1ba02e439066ef579010ea308054ac8bf9df
Certificate serial: 68941E
Authority key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/N8SbNXTPYyoZGRlXulkc9T8mr90.roa
Signing time: Sat 01 Jan 2022 00:50:25 +0000
ROA not before: Sat 01 Jan 2022 00:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6853662 (0x68941e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846a1ba02e439066ef579010ea308054ac8bf9df
Validity
Not Before: Jan 1 00:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37c49b3574cf632a19191957ba591cf53f26afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:2a:2f:52:7b:2c:54:9d:df:46:15:9d:fb:
a3:ce:1b:3c:bd:03:30:87:e9:32:d2:dd:57:69:68:
e7:91:27:28:bf:18:02:24:5a:c9:16:fa:2a:29:91:
27:93:9e:1f:68:06:f4:9d:0a:54:c1:b2:97:00:e5:
7b:22:f1:9b:f5:96:28:0e:3b:a1:94:bd:3c:78:4f:
b7:d6:76:d9:b6:b7:a3:2b:a2:19:77:ae:5a:70:69:
85:e6:57:0b:4b:86:03:a6:b3:69:52:00:98:8a:26:
fd:25:53:8d:72:24:af:04:fe:e8:9c:57:53:18:59:
35:f0:e2:d9:51:e0:c7:7f:be:dc:96:7f:37:3e:8f:
a7:8b:2b:43:3e:7a:4e:01:ac:0f:70:74:7f:09:a4:
e6:50:bf:19:50:98:fb:e4:b3:ea:93:f8:be:48:db:
d7:cb:97:e5:bd:4d:db:ae:92:62:d8:e3:11:b7:41:
87:d6:3a:8a:57:24:3e:d1:56:2a:e9:e5:65:5e:6f:
7f:39:2b:05:ca:26:bd:ab:7e:89:62:b9:96:c0:a1:
53:91:b7:4a:b2:d5:11:78:06:9b:29:56:9f:84:b8:
46:1b:d2:08:15:12:1a:e2:d7:19:17:49:a1:f9:bb:
85:82:c2:8d:d0:26:49:cf:16:00:9e:f6:96:c9:03:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:9B:35:74:CF:63:2A:19:19:19:57:BA:59:1C:F5:3F:26:AF:DD
X509v3 Authority Key Identifier:
keyid:84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/N8SbNXTPYyoZGRlXulkc9T8mr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:14:e2:e5:ef:53:b4:f2:54:05:58:76:d3:01:c1:bc:18:cd:
8f:78:6b:1f:7e:da:8a:9a:bc:6e:e5:ac:32:71:74:52:c3:b0:
db:11:0c:14:de:49:b8:f0:8c:cc:62:46:c3:5c:5b:64:44:f0:
21:ba:29:b5:96:7a:37:24:85:1d:c3:c0:e0:67:12:cc:8b:ad:
1e:b6:3e:cb:34:7f:df:c9:7f:10:9e:76:87:8c:b8:74:ca:7a:
91:f1:d8:73:80:e6:45:60:89:8b:a0:4d:75:12:e6:01:e6:52:
56:d4:b8:ac:28:91:70:0f:cd:97:3d:ab:5c:02:39:41:e2:76:
15:ff:fb:13:73:8c:c4:4d:20:7e:60:ea:72:d9:d6:95:29:94:
28:16:c6:09:fa:49:a5:c0:09:56:33:7a:c1:b4:5f:53:72:1a:
62:93:d5:75:07:4f:b1:5f:bf:47:9a:e6:85:b5:72:55:24:93:
f8:8f:bf:26:07:02:13:e4:35:15:85:d0:c5:85:95:f6:69:09:
d1:3c:1d:42:b2:3c:ac:04:5c:d0:b3:6f:75:67:53:d4:a8:be:
6e:1f:4b:08:f6:12:a7:cc:2c:74:e6:f8:2f:23:8e:d4:c7:94:
40:42:5d:d2:76:2b:26:11:d4:0c:96:5b:48:cc:fd:04:a8:7a:
34:d4:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:40 2025 by rpki-client