Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/SrAEsIAnow6sS4CWR7JCmr9AJdA.roa
File: SrAEsIAnow6sS4CWR7JCmr9AJdA.roa (raw, json)
Hash identifier: zODUxMRMaHGd7JzQRjCWcZaxU6LN7YoADdwSUEvRCIo=
Subject key identifier: 4A:B0:04:B0:80:27:A3:0E:AC:4B:80:96:47:B2:42:9A:BF:40:25:D0
Certificate issuer: /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial: 017085
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/SrAEsIAnow6sS4CWR7JCmr9AJdA.roa
Signing time: Mon 21 Mar 2022 17:47:15 +0000
ROA not before: Mon 21 Mar 2022 17:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94341 (0x17085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Validity
Not Before: Mar 21 17:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab004b08027a30eac4b809647b2429abf4025d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:cb:35:bc:65:e3:08:5d:a5:08:2c:5c:22:
b4:a8:fc:3f:09:92:8d:2a:0a:27:75:6b:ed:d5:01:
6e:8f:20:16:84:dd:94:3f:4e:db:80:a3:83:6f:52:
e5:74:fd:86:49:72:b6:9c:21:17:6c:fe:6c:1d:50:
6b:54:ef:23:e6:d4:a1:33:55:70:58:7f:61:7c:b8:
26:b3:14:25:88:ab:5c:af:7d:fa:58:4c:f7:7e:d2:
55:d5:c9:37:a3:df:7c:10:39:04:63:46:8c:de:ef:
43:20:31:2d:fc:bd:07:81:e7:15:3e:85:ca:3b:d5:
74:d9:ee:83:1d:4b:ca:b1:c2:ac:8c:8d:7d:79:b9:
16:fb:d0:63:3d:5d:fe:69:3e:dc:5f:4c:36:ad:8f:
ab:4f:32:72:c1:18:b0:6c:0f:94:ab:08:46:6b:19:
23:78:a6:18:74:ed:cc:a3:39:52:3b:2a:2e:b6:f4:
04:a9:bb:15:57:15:9c:43:a8:c5:5e:79:80:ce:b9:
42:67:e7:00:b0:9f:92:df:54:ae:ba:24:4e:fe:a0:
5c:3b:5b:50:bf:7e:c6:eb:3e:9b:ca:34:f2:87:fe:
13:81:94:df:9e:a2:a1:0e:54:16:f5:f9:e3:37:86:
42:43:0c:49:cb:49:74:a1:b2:4c:6c:b9:3c:44:8e:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:04:B0:80:27:A3:0E:AC:4B:80:96:47:B2:42:9A:BF:40:25:D0
X509v3 Authority Key Identifier:
keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/SrAEsIAnow6sS4CWR7JCmr9AJdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:61:21:55:36:c7:c4:4b:be:fc:0f:e4:b6:17:fa:a3:14:7d:
18:d6:59:24:e8:fb:73:37:14:bd:ec:e9:bf:1f:2d:93:9c:97:
75:71:ef:35:52:18:7f:c5:33:56:31:27:e4:3d:f5:4a:da:7d:
9f:42:1a:d7:48:ec:c5:48:7b:fc:73:6f:3b:33:f5:49:38:61:
14:1b:7b:f5:d8:04:3f:c7:3f:67:27:88:ff:46:d1:62:47:1a:
2b:49:ea:86:5e:77:ae:58:5f:ca:88:f3:18:bc:c8:be:3d:99:
69:ee:7a:3a:ad:6e:f0:84:90:c3:f9:ab:56:88:70:6e:e1:64:
21:14:fa:d5:3f:e9:b0:61:e4:58:9b:73:db:73:fe:b1:04:e1:
91:0d:bf:f2:12:c3:21:e4:65:83:80:a0:b6:bb:ae:22:34:bb:
47:bf:83:e6:da:41:67:66:ca:0d:d6:7d:4d:1e:52:45:c2:88:
bd:ca:9c:91:ba:8e:76:23:09:b5:80:de:69:4b:07:e3:1e:5c:
90:40:50:4a:60:4a:29:88:78:a3:59:56:5a:7d:02:8b:be:79:
6f:6a:97:72:96:e2:8d:94:99:14:86:a7:ce:b8:d1:24:34:fe:
b0:28:10:9d:31:1d:f8:ef:2f:27:95:07:16:04:e6:d8:d0:da:
0e:ed:85:68
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAXCFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0
MDA4ODBjYzQ5OWIyYmEyZjBkYjdkYTQ4ZWJiN2IzMGFhMmE3NjIwHhcNMjIwMzIx
MTc0NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YWIwMDRiMDgwMjdh
MzBlYWM0YjgwOTY0N2IyNDI5YWJmNDAyNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxTjLNbxl4whdpQgsXCK0qPw/CZKNKgondWvt1QFujyAWhN2U
P07bgKODb1LldP2GSXK2nCEXbP5sHVBrVO8j5tShM1VwWH9hfLgmsxQliKtcr336
WEz3ftJV1ck3o998EDkEY0aM3u9DIDEt/L0HgecVPoXKO9V02e6DHUvKscKsjI19
ebkW+9BjPV3+aT7cX0w2rY+rTzJywRiwbA+UqwhGaxkjeKYYdO3MozlSOyoutvQE
qbsVVxWcQ6jFXnmAzrlCZ+cAsJ+S31SuuiRO/qBcO1tQv37G6z6byjTyh/4TgZTf
nqKhDlQW9fnjN4ZCQwxJy0l0obJMbLk8RI4BDwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEqwBLCAJ6MOrEuAlkeyQpq/QCXQMB8GA1UdIwQYMBaAFIQAiAzEmbK6Lw23
2kjrt7MKoqdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aEFDSURNU1pzcm92RGJmYVNPdTNzd3FpcDJJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Mi9mYjQ0NTEtZDkzMS00MzBkLWI4NTgtN2EzNDQwNDMzZWZjLzEv
U3JBRXNJQW5vdzZzUzRDV1I3SkNtcjlBSmRBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9m
YjQ0NTEtZDkzMS00MzBkLWI4NTgtN2EzNDQwNDMzZWZjLzEvaEFDSURNU1pzcm92
RGJmYVNPdTNzd3FpcDJJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhM4MA0GCSqGSIb3DQEBCwUAA4IB
AQA7YSFVNsfES778D+S2F/qjFH0Y1lkk6PtzNxS97Om/Hy2TnJd1ce81Uhh/xTNW
MSfkPfVK2n2fQhrXSOzFSHv8c287M/VJOGEUG3v12AQ/xz9nJ4j/RtFiRxorSeqG
XneuWF/KiPMYvMi+PZlp7no6rW7whJDD+atWiHBu4WQhFPrVP+mwYeRYm3Pbc/6x
BOGRDb/yEsMh5GWDgKC2u64iNLtHv4Pm2kFnZsoN1n1NHlJFwoi9ypyRuo52Iwm1
gN5pSwfjHlyQQFBKYEopiHijWVZafQKLvnlvapdyluKNlJkUhqfOuNEkNP6wKBCd
MR347y8nlQcWBObY0NoO7YVo
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:38 2025 by rpki-client