Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/xkTuMmsVfn-R0nYmxzIjK4HvU0c.roa
File: xkTuMmsVfn-R0nYmxzIjK4HvU0c.roa (raw, json)
Hash identifier: XHZSmXeZapXdtY546CKhC0qtzpIYJ6V20rKFLM7asjg=
Subject key identifier: C6:44:EE:32:6B:15:7E:7F:91:D2:76:26:C7:32:23:2B:81:EF:53:47
Certificate issuer: /CN=3538f0b7d8a7e2d313cca14714cb316a30d2e8d3
Certificate serial: 63B2B8
Authority key identifier: 35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTjwt9in4tMTzKFHFMsxajDS6NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/xkTuMmsVfn-R0nYmxzIjK4HvU0c.roa
Signing time: Sat 01 Jan 2022 03:55:16 +0000
ROA not before: Sat 01 Jan 2022 03:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60144
IP address blocks: 146.19.105.0/24 maxlen: 24
2a12:8f00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6533816 (0x63b2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3538f0b7d8a7e2d313cca14714cb316a30d2e8d3
Validity
Not Before: Jan 1 03:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c644ee326b157e7f91d27626c732232b81ef5347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:df:6b:a3:e6:2e:9c:7a:f1:ee:f9:43:da:
ff:15:da:eb:93:5f:70:55:36:fa:93:b3:62:0b:10:
d0:af:35:66:89:20:54:e0:dd:65:ed:2a:32:68:4b:
06:02:1e:59:81:eb:54:26:32:88:2b:f9:26:b1:b0:
6a:55:fe:4b:5d:e5:89:20:c3:ed:1a:95:11:e1:c5:
e4:88:f9:51:c9:4b:c7:0e:06:b8:d7:6f:3d:ec:93:
de:6b:d0:02:1a:66:6e:1f:af:4d:1e:70:ed:7f:ea:
4e:ae:dd:fe:df:8a:b9:d3:5f:f5:be:bf:8e:f9:ff:
6a:2b:b8:cb:8b:5d:64:72:6c:78:5f:9f:6b:24:b6:
9a:fa:8d:bb:43:da:c7:a9:7d:49:84:62:85:67:f5:
98:1b:3d:09:62:bd:6b:89:43:aa:a0:c5:0c:91:46:
3a:39:08:da:d7:2c:cb:6b:84:71:55:ce:14:75:5b:
ea:1a:05:0c:b4:bf:65:4c:9c:6a:27:e8:2b:cc:60:
c6:13:ff:f9:bf:74:55:ca:59:81:9c:e7:1b:7a:6a:
9b:c2:b7:e9:df:f2:f0:a6:06:fc:09:8b:6d:d5:f9:
a0:c3:d0:54:cd:a9:34:84:29:f4:1e:e1:a8:f3:b5:
e8:05:f1:6d:ad:c0:7d:c7:76:ff:10:93:bc:ec:72:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:EE:32:6B:15:7E:7F:91:D2:76:26:C7:32:23:2B:81:EF:53:47
X509v3 Authority Key Identifier:
keyid:35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTjwt9in4tMTzKFHFMsxajDS6NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/xkTuMmsVfn-R0nYmxzIjK4HvU0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.105.0/24
IPv6:
2a12:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
77:07:40:45:c9:d6:fa:20:a6:6f:0e:3a:f0:b3:15:df:07:91:
a5:cb:92:13:36:73:d0:a8:d1:63:28:95:c8:58:74:f1:cb:b0:
42:b0:4a:f4:76:6a:fe:7c:73:1d:a8:16:0b:f9:3c:27:98:fb:
48:11:c7:5f:fa:97:95:28:be:be:69:92:a0:f6:7d:73:ed:19:
e9:02:07:74:5b:59:01:1e:92:8e:b3:39:fa:08:cf:54:9f:74:
9f:d7:23:39:2d:53:3e:7f:c4:27:eb:3e:f7:e0:6b:ca:b5:25:
b6:13:5a:19:1c:01:3c:c0:6f:b9:f5:71:76:16:00:4a:3b:ee:
4f:dc:78:ce:5d:9d:82:7f:f6:76:98:b3:9c:98:6f:f2:ae:3b:
b3:38:26:c7:70:33:68:fe:76:95:16:57:b5:22:ee:1f:bf:41:
f6:76:90:18:be:59:1d:ef:d7:f9:3a:80:5b:7f:31:19:45:d7:
3e:53:e4:04:78:f3:36:4b:41:c6:e8:84:1f:3e:da:5e:94:22:
55:ff:9a:b7:b2:74:85:1a:3d:fe:52:32:f2:68:f2:27:5b:b2:
54:61:a9:4f:c1:85:1e:66:c3:72:0f:79:c1:a4:5d:81:2c:07:
d2:1a:ad:8f:86:4d:89:07:95:c5:64:8a:4b:9d:b0:e7:66:63:
c7:0b:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:46 2025 by rpki-client