Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/zVxv6tNvkraNic4Ja2Q3Pjd55fg.roa
File: zVxv6tNvkraNic4Ja2Q3Pjd55fg.roa (raw, json)
Hash identifier: ouoVV+t/SMMgL5rfmx7fGxCoXiEuu9cUplnbk1yFolc=
Subject key identifier: CD:5C:6F:EA:D3:6F:92:B6:8D:89:CE:09:6B:64:37:3E:37:79:E5:F8
Certificate issuer: /CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Certificate serial: 1E35D6
Authority key identifier: A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/zVxv6tNvkraNic4Ja2Q3Pjd55fg.roa
Signing time: Sat 01 Jan 2022 00:58:36 +0000
ROA not before: Sat 01 Jan 2022 00:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206485
IP address blocks: 146.19.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979862 (0x1e35d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Validity
Not Before: Jan 1 00:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd5c6fead36f92b68d89ce096b64373e3779e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:83:d8:51:23:7c:60:9c:de:25:2d:bc:29:
ae:43:d5:79:75:8e:79:bf:78:7b:1a:6f:72:1a:1e:
3d:58:70:3e:ec:b3:34:d3:89:0d:ce:10:25:ce:37:
12:a7:1d:d9:ea:14:47:9a:a4:ba:bf:99:4b:68:7e:
59:9f:f0:c8:e1:a7:38:dc:6c:c1:76:91:6f:21:ae:
22:12:6d:68:1b:ff:55:81:27:55:2d:2c:c2:65:fa:
98:af:dd:18:8b:c9:7c:4d:c2:eb:77:52:49:a1:5d:
b3:b6:65:50:69:60:7f:17:d2:a5:3d:8b:84:2d:61:
02:69:4f:e0:12:40:bb:c0:14:63:87:8b:72:97:19:
25:d6:e1:d9:c5:5f:18:21:36:89:5a:a5:e9:57:04:
50:d4:44:eb:96:1f:12:f4:c6:74:ed:47:f8:fb:05:
f9:e5:cb:e7:96:01:d6:2e:f9:c3:33:68:1a:da:f7:
62:52:f3:ea:28:c9:bd:c9:4c:d6:40:89:f3:6f:2f:
07:ab:f1:0c:c7:86:c9:bf:ef:de:20:8c:4d:63:79:
c3:d9:65:8f:27:08:67:eb:39:91:3e:25:88:c8:52:
dd:8b:76:72:41:08:28:b7:bf:ac:e0:f9:68:df:2f:
b4:73:82:bb:d8:78:5e:99:39:2d:d4:d0:1d:6c:85:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:6F:EA:D3:6F:92:B6:8D:89:CE:09:6B:64:37:3E:37:79:E5:F8
X509v3 Authority Key Identifier:
keyid:A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/zVxv6tNvkraNic4Ja2Q3Pjd55fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/oVuIMc2vGUQOXWUvFO_DqT77j-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:27:0f:ce:c2:3c:48:25:af:3a:3e:47:b0:fc:22:1d:c5:b8:
65:eb:9b:ce:a1:d2:48:b7:c8:2c:be:df:7c:9b:1b:3a:1a:ae:
a6:ff:85:15:9a:09:6f:1f:2f:a2:3a:51:79:3e:50:70:72:bd:
d5:48:c4:02:08:62:94:90:4b:12:7b:39:0d:50:5b:6e:e2:6b:
e9:72:a3:ce:20:a0:6b:a1:92:6f:b7:a7:cb:7c:55:79:4a:1d:
25:21:50:40:44:ac:6e:95:be:a7:43:c2:26:19:0a:4a:34:d8:
9d:de:e4:b6:2e:0e:37:2a:73:34:a7:16:ce:56:3b:7f:40:87:
f1:44:25:ee:e4:2c:03:a5:4a:13:c7:3d:65:73:31:71:1c:53:
6a:93:cb:05:e5:39:a3:e1:c8:25:bd:cf:c2:88:34:15:01:82:
dc:ad:d0:06:93:b2:0a:e3:e7:72:cb:b4:5a:71:55:b9:13:95:
11:31:d2:2d:2a:de:5e:de:e1:b1:43:fa:92:cf:81:e0:e5:4f:
ae:4a:1b:43:4b:7e:3a:05:7a:7c:a4:4f:d5:9a:9f:b8:0b:4b:
63:81:4f:1c:ca:b9:a9:f4:8f:02:eb:44:30:08:1d:d3:a0:3b:
ec:cf:cc:a1:cd:bf:ba:f3:44:9b:4b:c1:ee:ec:14:b4:63:ff:
74:c8:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:41 2025 by rpki-client