Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/mn8pzrCx79EwkVod7kQBqDOgbTY.roa
File: mn8pzrCx79EwkVod7kQBqDOgbTY.roa (raw, json)
Hash identifier: IpLYGqA+j1OKpjSeYjy3zCPVGcn96C4/pHZFgpX8Djg=
Subject key identifier: 9A:7F:29:CE:B0:B1:EF:D1:30:91:5A:1D:EE:44:01:A8:33:A0:6D:36
Certificate issuer: /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial: 9C37EF
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/mn8pzrCx79EwkVod7kQBqDOgbTY.roa
Signing time: Tue 24 May 2022 05:08:16 +0000
ROA not before: Tue 24 May 2022 05:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10237935 (0x9c37ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Validity
Not Before: May 24 05:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a7f29ceb0b1efd130915a1dee4401a833a06d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:b6:38:f2:23:47:43:6f:78:b0:a9:41:d2:
93:d1:65:ed:0e:5a:f8:01:c8:ce:ef:87:f5:13:d3:
a9:6e:08:56:1f:0b:37:6c:45:e7:75:5f:e3:10:15:
fd:0a:f4:78:be:2e:c7:05:90:56:5d:3d:41:7b:9d:
dd:9b:05:bb:a6:08:cb:a1:bc:dc:a9:9b:4c:f0:94:
63:3f:5b:08:cf:30:26:ba:a4:1a:5c:e6:6d:3c:d4:
fa:e8:08:03:35:28:b6:6b:2f:fd:ac:c0:2d:c8:08:
8f:a1:10:3f:42:b5:d1:b5:8b:63:11:85:46:3c:aa:
2f:50:a1:d2:a4:a8:fb:4a:d2:4a:c2:b6:7a:47:0e:
8b:a9:09:b5:0b:85:8f:55:c6:92:27:55:c5:5a:bc:
6b:a5:8e:d2:4b:cb:53:b5:8a:cb:ed:40:6f:10:63:
90:94:3b:60:fe:92:17:19:27:a7:94:69:a4:ed:38:
0c:05:6b:fd:5a:34:af:d2:b0:51:20:93:d3:3a:64:
bf:b3:c0:d9:a2:dc:69:9e:c6:d2:b7:ba:17:bc:d9:
9f:b1:73:c4:e1:5d:f7:4c:b8:80:4a:53:ce:82:0b:
90:c3:9d:39:b1:59:6d:e7:3b:5a:f2:e3:88:50:3d:
7d:e6:58:b3:5a:6c:91:80:9a:f3:5d:a4:a1:ec:54:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:29:CE:B0:B1:EF:D1:30:91:5A:1D:EE:44:01:A8:33:A0:6D:36
X509v3 Authority Key Identifier:
keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/mn8pzrCx79EwkVod7kQBqDOgbTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
20:39:68:34:94:8a:af:14:05:ec:90:da:b0:d9:65:28:66:b4:
7c:6f:8f:65:e7:b4:f4:99:ea:8a:5c:42:26:b1:78:5c:77:cf:
6e:85:2f:8b:a4:ba:d3:a2:b6:d0:2b:80:fa:83:38:d6:23:6f:
ea:33:99:85:ca:4b:22:6b:8e:c0:9f:f0:3f:91:f6:92:74:38:
55:e7:fd:33:07:09:f9:ff:e2:cf:41:b5:13:3b:57:2a:e6:5a:
d1:dc:70:36:6e:47:8d:92:d8:a9:a9:a2:22:98:83:1c:73:29:
e0:1e:de:ed:6e:d1:8d:1e:e4:75:61:01:4d:f3:3d:af:0c:9d:
23:89:a8:fd:17:90:88:58:a1:be:ee:42:ff:51:ea:64:b4:aa:
a1:47:d1:e1:2c:b7:1a:9f:a5:2c:a7:36:1c:38:6c:10:ca:ae:
76:03:b2:77:a1:38:11:7d:7b:2f:c0:39:69:ec:e3:91:5d:d7:
20:a3:df:eb:65:d9:f4:67:76:68:d8:57:77:ea:88:d9:cd:ad:
95:44:c9:3b:9e:0c:9a:4f:3d:2e:22:dd:52:7c:49:15:b6:38:
5d:01:01:2e:93:44:7a:cc:c3:70:a8:69:c1:e9:37:77:23:6d:
b5:e8:77:83:3f:53:46:57:2f:f3:76:ba:f6:83:9e:a6:62:13:
c8:1e:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:18 2025 by rpki-client