Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/2kuOVd8_dtfm47Fy3UnFRLHdIa8.roa
File: 2kuOVd8_dtfm47Fy3UnFRLHdIa8.roa (raw, json)
Hash identifier: qWs69odzKgow+BWB59KJAHoaljIoqRa893cmPuCNXp4=
Subject key identifier: DA:4B:8E:55:DF:3F:76:D7:E6:E3:B1:72:DD:49:C5:44:B1:DD:21:AF
Certificate issuer: /CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
Certificate serial: 65F00B
Authority key identifier: 74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/2kuOVd8_dtfm47Fy3UnFRLHdIa8.roa
Signing time: Sat 01 Jan 2022 02:51:45 +0000
ROA not before: Sat 01 Jan 2022 02:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6680587 (0x65f00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
Validity
Not Before: Jan 1 02:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da4b8e55df3f76d7e6e3b172dd49c544b1dd21af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:50:c3:f9:f2:45:10:0e:7b:81:06:74:0e:
3d:59:04:c3:5b:21:85:33:d9:24:2e:a2:e7:18:7c:
2b:1a:64:28:45:8f:cb:57:b7:49:cf:68:d8:a9:13:
43:78:12:9e:74:08:2f:c0:a9:5a:e2:ef:69:30:63:
de:71:1e:72:cf:6d:09:c7:7d:c9:e1:b6:0d:69:93:
b4:fa:a3:c5:b6:39:35:23:8d:d4:74:b3:01:57:56:
ae:6e:87:bc:8e:93:22:6d:3c:ab:2b:75:25:5c:ca:
82:6d:f8:eb:d1:8f:8d:19:42:30:ba:9b:55:89:dd:
4a:ac:23:60:4c:2b:ee:a8:b6:b6:aa:40:65:07:3e:
01:16:6e:38:8d:4e:89:5c:c1:c0:27:38:ed:39:e2:
a3:b9:ed:6c:7f:7f:e1:9d:23:f7:53:14:77:88:61:
79:22:88:36:fe:e6:60:7d:7d:09:59:37:b7:e4:71:
0c:6c:e6:91:ec:c9:bd:af:15:c1:04:ef:f7:a4:70:
a9:6f:73:51:ae:f7:31:eb:af:9b:02:2b:0c:a0:f0:
e0:87:13:bd:07:b8:2a:a8:41:b3:20:85:69:26:43:
ab:26:51:b3:05:28:50:5e:ba:30:85:66:f6:df:ff:
12:39:9d:b5:8f:9d:3c:7c:20:8c:97:92:aa:38:1f:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:8E:55:DF:3F:76:D7:E6:E3:B1:72:DD:49:C5:44:B1:DD:21:AF
X509v3 Authority Key Identifier:
keyid:74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/2kuOVd8_dtfm47Fy3UnFRLHdIa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.136.0/24
Signature Algorithm: sha256WithRSAEncryption
32:84:cd:95:82:f4:ec:ee:38:9e:99:17:b9:a9:08:65:02:60:
36:f0:de:d0:9b:78:f0:f2:ff:1e:7f:8c:7a:3b:82:20:56:8b:
e5:7e:9e:65:c8:f2:db:59:bb:de:0c:d8:29:05:a5:56:07:eb:
eb:35:19:32:a9:67:7b:72:90:35:88:9a:c1:c4:45:b9:c6:d2:
d5:e0:81:d1:28:15:2f:38:3c:ff:3a:93:98:0b:de:ca:3c:75:
73:31:bf:b6:bf:43:e6:5c:d3:84:d5:7e:b4:3b:83:7e:e5:06:
76:69:9a:8d:cd:80:32:4a:81:ee:88:fa:f9:2c:c5:11:7d:e4:
a8:90:a4:0e:a3:e8:75:f1:ac:0f:f2:df:97:b9:56:2c:ed:17:
e2:99:f1:dd:56:65:4c:0c:b4:c8:71:40:57:37:a4:f8:58:6a:
a7:96:21:cf:aa:92:86:f5:0b:ff:a4:ed:62:0b:84:10:5b:62:
50:74:67:35:ba:eb:15:95:c8:4f:94:0f:89:34:ff:ad:2c:16:
57:8c:37:c6:9c:89:c8:fb:b3:40:eb:f6:4d:e6:1e:dd:2d:e7:
64:40:2b:49:e1:ac:b0:be:50:6c:b1:80:23:e8:69:bc:32:2f:
2d:22:0d:2a:97:9e:9f:ac:3a:6a:6c:5b:7d:fe:6f:ed:20:65:
68:5f:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:40:49 2025 by rpki-client