Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/I6q_Ggm5w28a8sB8Fgxs7ZGgvBw.roa
File: I6q_Ggm5w28a8sB8Fgxs7ZGgvBw.roa (raw, json)
Hash identifier: ChkHFlIUSVJUpWL6vnpuMePGaosmrWBMgI3wDXpY1/Q=
Subject key identifier: 23:AA:BF:1A:09:B9:C3:6F:1A:F2:C0:7C:16:0C:6C:ED:91:A0:BC:1C
Certificate issuer: /CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Certificate serial: 6847E2
Authority key identifier: A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/I6q_Ggm5w28a8sB8Fgxs7ZGgvBw.roa
Signing time: Tue 01 Feb 2022 16:32:33 +0000
ROA not before: Tue 01 Feb 2022 16:32:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6834146 (0x6847e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Validity
Not Before: Feb 1 16:32:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23aabf1a09b9c36f1af2c07c160c6ced91a0bc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:3b:49:c7:1f:56:6e:db:68:28:fb:11:6c:
7a:40:a7:47:ab:0c:e8:4d:41:20:c4:ed:e9:1d:c5:
e1:0a:d6:50:e0:1a:91:1a:f4:fe:83:6a:63:6c:a8:
f6:a2:bb:e3:2d:5b:ea:c7:94:7f:7a:7b:05:81:6f:
e9:ff:fa:c0:75:c3:15:13:54:3e:4f:e0:7b:90:fd:
70:e0:01:4a:a8:b8:37:a7:bf:37:59:73:5c:8a:47:
7c:c7:4a:0e:98:e0:2f:4d:56:25:4c:ff:fa:e6:bc:
23:2a:14:09:df:f3:80:9e:26:a3:d4:d3:a1:bd:2c:
b6:49:c1:07:33:ba:83:0c:9f:8b:8b:a7:01:c1:8e:
15:61:c1:a8:2f:11:78:ee:a3:2e:9b:be:01:a5:ff:
be:be:7a:99:2b:d3:7e:fe:6f:b8:b1:04:de:27:19:
7e:7e:d5:f2:e3:c2:e8:c5:e6:c5:3b:af:bf:71:d2:
33:59:d2:c3:98:d1:c3:a1:4f:01:61:d4:38:56:9c:
8a:56:b2:7d:16:51:cd:0f:89:9c:48:1e:e7:05:41:
0f:02:63:78:3f:73:62:fd:a9:a8:c3:25:79:a2:15:
2a:56:c1:38:47:38:ba:69:12:81:7c:0a:cc:ed:ef:
3e:b8:fc:a9:38:02:72:88:fb:6b:92:f3:41:84:6b:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:BF:1A:09:B9:C3:6F:1A:F2:C0:7C:16:0C:6C:ED:91:A0:BC:1C
X509v3 Authority Key Identifier:
keyid:A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/I6q_Ggm5w28a8sB8Fgxs7ZGgvBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/oVuIMc2vGUQOXWUvFO_DqT77j-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9f:ca:58:35:8c:04:52:d8:5a:29:a9:31:bc:6a:ef:f9:b6:
16:3e:f4:f1:4a:73:b8:dc:4a:f5:42:19:85:ff:3d:33:34:96:
02:bb:fa:5e:19:19:cc:e6:ef:c2:98:7a:70:a1:ca:d2:98:c4:
de:95:32:77:59:d9:b4:da:ed:b0:20:ea:7c:e2:96:ca:d8:d8:
e9:86:15:a6:09:d1:e3:bb:de:82:ff:51:32:ca:1b:6a:ea:60:
41:9e:6e:3c:27:b1:ed:1b:86:bd:2c:c8:16:62:30:e0:a3:19:
c4:b4:ef:e1:f0:f1:07:40:5d:a7:7b:5e:ba:f2:c1:f4:2e:bd:
a6:5a:51:8c:97:6b:16:52:32:75:a6:ff:09:92:2a:5f:5b:df:
0e:cb:58:3d:3c:07:f9:3b:1b:94:7c:3f:34:14:c3:58:3c:97:
04:d8:9d:75:24:38:54:da:82:eb:dd:bc:3d:47:10:44:c7:51:
25:94:b0:8b:40:26:f2:4b:28:66:fe:b7:2c:fb:07:c8:2d:ab:
07:d7:12:01:50:55:78:64:f0:56:67:de:61:24:c9:f9:a9:df:
8f:41:76:9a:d9:a1:12:bf:54:85:94:e6:e0:4c:d5:48:44:b2:
11:4b:18:a1:f9:b5:70:56:d6:6a:7b:2f:d7:40:1b:d0:92:f6:
de:e9:8f:3c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDaEfiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEx
NWI4ODMxY2RhZjE5NDQwZTVkNjUyZjE0ZWZjM2E5M2VmYjhmZWEwHhcNMjIwMjAx
MTYzMjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyM2FhYmYxYTA5Yjlj
MzZmMWFmMmMwN2MxNjBjNmNlZDkxYTBiYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3YM7SccfVm7baCj7EWx6QKdHqwzoTUEgxO3pHcXhCtZQ4BqR
GvT+g2pjbKj2orvjLVvqx5R/ensFgW/p//rAdcMVE1Q+T+B7kP1w4AFKqLg3p783
WXNcikd8x0oOmOAvTVYlTP/65rwjKhQJ3/OAniaj1NOhvSy2ScEHM7qDDJ+Li6cB
wY4VYcGoLxF47qMum74Bpf++vnqZK9N+/m+4sQTeJxl+ftXy48LoxebFO6+/cdIz
WdLDmNHDoU8BYdQ4VpyKVrJ9FlHND4mcSB7nBUEPAmN4P3Ni/amowyV5ohUqVsE4
Rzi6aRKBfArM7e8+uPypOAJyiPtrkvNBhGs52QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCOqvxoJucNvGvLAfBYMbO2RoLwcMB8GA1UdIwQYMBaAFKFbiDHNrxlEDl1l
LxTvw6k++4/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
b1Z1SU1jMnZHVVFPWFdVdkZPX0RxVDc3ai1vLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84OS9mZjU5MzYtYmQ2NS00NTAwLTg2MGEtYjYwZTNmM2VlOThjLzEv
STZxX0dnbTV3MjhhOHNCOEZneHM3WkdndkJ3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9m
ZjU5MzYtYmQ2NS00NTAwLTg2MGEtYjYwZTNmM2VlOThjLzEvb1Z1SU1jMnZHVVFP
WFdVdkZPX0RxVDc3ai1vLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMxMA0GCSqGSIb3DQEBCwUAA4IB
AQAmn8pYNYwEUthaKakxvGrv+bYWPvTxSnO43Er1QhmF/z0zNJYCu/peGRnM5u/C
mHpwocrSmMTelTJ3Wdm02u2wIOp84pbK2NjphhWmCdHju96C/1Eyyhtq6mBBnm48
J7HtG4a9LMgWYjDgoxnEtO/h8PEHQF2ne1668sH0Lr2mWlGMl2sWUjJ1pv8Jkipf
W98Oy1g9PAf5OxuUfD80FMNYPJcE2J11JDhU2oLr3bw9RxBEx1EllLCLQCbySyhm
/rcs+wfILasH1xIBUFV4ZPBWZ95hJMn5qd+PQXaa2aESv1SFlObgTNVIRLIRSxih
+bVwVtZqey/XQBvQkvbe6Y88
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:50:15 2025 by rpki-client