Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/jUveVOCiDfhJemgVj0OHqZOQSr4.roa
File: jUveVOCiDfhJemgVj0OHqZOQSr4.roa (raw, json)
Hash identifier: HiXIRle+LgWsGgrjiUhtW1ecSJLCpWp2BM6EPkoqlOc=
Subject key identifier: 8D:4B:DE:54:E0:A2:0D:F8:49:7A:68:15:8F:43:87:A9:93:90:4A:BE
Certificate issuer: /CN=b682306dc0a6f35a11b7ae6be61f5b1274f4868c
Certificate serial: 0186CA4D5DD2D95CA56A84A67E20A8241CC8
Authority key identifier: B6:82:30:6D:C0:A6:F3:5A:11:B7:AE:6B:E6:1F:5B:12:74:F4:86:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toIwbcCm81oRt65r5h9bEnT0how.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/jUveVOCiDfhJemgVj0OHqZOQSr4.roa
Signing time: Fri 10 Mar 2023 06:55:13 +0000
ROA not before: Fri 10 Mar 2023 06:55:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 146.19.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:4d:5d:d2:d9:5c:a5:6a:84:a6:7e:20:a8:24:1c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b682306dc0a6f35a11b7ae6be61f5b1274f4868c
Validity
Not Before: Mar 10 06:55:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d4bde54e0a20df8497a68158f4387a993904abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:99:0b:55:ba:66:20:06:23:89:d5:68:9c:
a3:eb:14:df:63:40:e4:1d:65:47:91:f1:7e:ab:8a:
d8:bc:8d:54:ef:6c:52:05:59:02:d2:e4:a3:6e:5b:
32:63:d7:12:cc:27:58:2d:c8:06:4e:8d:17:12:56:
a9:e9:f0:2f:34:f6:e4:43:0a:7d:39:a5:23:60:fe:
e5:1f:9c:23:09:70:f9:a6:4f:6b:77:07:86:53:63:
76:c8:c9:23:88:36:22:63:e2:dd:3a:fa:66:5b:ce:
fb:f5:92:aa:3c:4e:c3:24:c9:26:89:0e:87:d0:9e:
ea:b2:88:bc:0b:f1:48:a8:93:d9:bc:89:4a:8b:c0:
98:f3:f9:bf:cc:24:4b:d7:fa:b5:c0:7d:4b:f1:2e:
e6:de:f3:c7:71:49:d8:3f:87:5a:bb:7b:1d:3b:a5:
bf:f0:bb:08:48:fa:2b:a6:04:41:f0:7d:5b:34:c8:
21:30:b0:f0:ea:98:b4:1b:89:50:99:0b:ab:3d:f5:
9a:9f:e0:21:10:0d:e0:51:85:d2:a7:40:a1:31:66:
c0:7b:d1:ab:39:07:bc:2c:22:25:8f:88:d4:a5:56:
1f:8e:f8:60:5e:13:00:ad:13:39:3d:06:eb:ee:35:
f2:ed:9b:e4:5f:08:70:4f:22:da:b8:4e:33:9d:08:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:DE:54:E0:A2:0D:F8:49:7A:68:15:8F:43:87:A9:93:90:4A:BE
X509v3 Authority Key Identifier:
keyid:B6:82:30:6D:C0:A6:F3:5A:11:B7:AE:6B:E6:1F:5B:12:74:F4:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toIwbcCm81oRt65r5h9bEnT0how.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/jUveVOCiDfhJemgVj0OHqZOQSr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/febe62-507b-49b1-b52c-e43667c252bc/1/toIwbcCm81oRt65r5h9bEnT0how.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bf:ac:bb:21:f4:8e:a9:86:c2:ab:cb:5d:d1:6c:53:3a:68:
c9:2c:a2:47:23:78:9e:b5:ba:9d:be:d5:aa:3e:c6:cc:96:3d:
3f:c6:d5:15:23:89:f9:d5:50:85:f1:e9:fc:f1:0a:ab:1a:b4:
19:43:20:15:b9:e8:e1:cd:cd:9e:15:ae:c7:d1:87:ce:73:29:
45:48:91:81:44:77:fa:c3:2a:b7:a3:c0:91:16:b5:7a:82:f4:
3d:71:a8:fd:19:2f:3a:4e:1b:e7:f4:8c:de:1c:8b:5f:63:f1:
51:57:d7:4a:b3:11:2b:62:91:82:6c:59:b6:04:7f:1a:ed:b4:
3f:de:2a:64:9f:48:5f:a4:4e:f4:f3:d0:e7:d0:1a:69:0f:77:
8a:16:e1:33:20:81:8d:91:79:af:e9:2a:c9:3a:10:da:f9:94:
2e:3b:17:19:a1:ac:b6:09:c7:8e:7e:ca:a1:6a:f2:08:98:2f:
02:d1:86:1c:f8:35:bd:b4:6a:92:c8:20:3f:95:f1:82:26:a6:
28:e1:92:bf:4f:38:32:40:90:d9:e0:b4:50:ae:77:31:7b:ca:
36:5a:61:24:f3:bd:31:7f:5c:b1:91:23:77:1e:ca:1b:54:dc:
22:5a:7b:aa:e7:d1:db:a2:42:bb:58:4c:b0:97:fa:9f:42:46:
91:16:1b:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbKTV3S2VylaoSmfiCoJBzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODIzMDZkYzBhNmYzNWExMWI3YWU2YmU2MWY1YjEyNzRm
NDg2OGMwHhcNMjMwMzEwMDY1NTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDRiZGU1NGUwYTIwZGY4NDk3YTY4MTU4ZjQzODdhOTkzOTA0YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWKZC1W6ZiAGI4nVaJyj6xTfY0Dk
HWVHkfF+q4rYvI1U72xSBVkC0uSjblsyY9cSzCdYLcgGTo0XElap6fAvNPbkQwp9
OaUjYP7lH5wjCXD5pk9rdweGU2N2yMkjiDYiY+LdOvpmW8779ZKqPE7DJMkmiQ6H
0J7qsoi8C/FIqJPZvIlKi8CY8/m/zCRL1/q1wH1L8S7m3vPHcUnYP4dau3sdO6W/
8LsISPorpgRB8H1bNMghMLDw6pi0G4lQmQurPfWan+AhEA3gUYXSp0ChMWbAe9Gr
OQe8LCIlj4jUpVYfjvhgXhMArRM5PQbr7jXy7ZvkXwhwTyLauE4znQioTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1L3lTgog34SXpoFY9Dh6mTkEq+MB8GA1UdIwQY
MBaAFLaCMG3ApvNaEbeua+YfWxJ09IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9Jd2JjQ204MW9SdDY1cjVoOWJFblQwaG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mZWJlNjItNTA3Yi00OWIxLWI1MmMt
ZTQzNjY3YzI1MmJjLzEvalV2ZVZPQ2lEZmhKZW1nVmowT0hxWk9RU3I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mZWJlNjItNTA3Yi00OWIxLWI1MmMtZTQzNjY3YzI1MmJj
LzEvdG9Jd2JjQ204MW9SdDY1cjVoOWJFblQwaG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOLMA0G
CSqGSIb3DQEBCwUAA4IBAQA/v6y7IfSOqYbCq8td0WxTOmjJLKJHI3ietbqdvtWq
PsbMlj0/xtUVI4n51VCF8en88QqrGrQZQyAVuejhzc2eFa7H0YfOcylFSJGBRHf6
wyq3o8CRFrV6gvQ9caj9GS86Thvn9IzeHItfY/FRV9dKsxErYpGCbFm2BH8a7bQ/
3ipkn0hfpE7089Dn0BppD3eKFuEzIIGNkXmv6SrJOhDa+ZQuOxcZoay2CceOfsqh
avIImC8C0YYc+DW9tGqSyCA/lfGCJqYo4ZK/TzgyQJDZ4LRQrncxe8o2WmEk870x
f1yxkSN3HsobVNwiWnuq59HbokK7WEywl/qfQkaRFhvs
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:25 2025 by rpki-client