Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/BRJQX_mO3Gqan3zeeXuyDgnyMpc.roa
File: BRJQX_mO3Gqan3zeeXuyDgnyMpc.roa (raw, json)
Hash identifier: NCDvpwP1GR4mjtC0tc3AGuT8uSPAKwIHD2Nx4+sdi/M=
Subject key identifier: 05:12:50:5F:F9:8E:DC:6A:9A:9F:7C:DE:79:7B:B2:0E:09:F2:32:97
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 01856C8133B22A1BA2AC152C8B4C60D1F3A3
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/BRJQX_mO3Gqan3zeeXuyDgnyMpc.roa
Signing time: Sun 01 Jan 2023 08:44:44 +0000
ROA not before: Sun 01 Jan 2023 08:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:33:b2:2a:1b:a2:ac:15:2c:8b:4c:60:d1:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Jan 1 08:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0512505ff98edc6a9a9f7cde797bb20e09f23297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:ef:87:e0:30:c0:76:5e:e8:b6:62:8b:b6:
1f:fc:97:15:90:16:da:05:b6:d7:ce:a9:14:df:31:
bd:02:a5:16:07:49:ee:9a:a3:25:92:57:dd:1f:4b:
e2:f9:92:e1:e1:01:f6:b1:37:2a:fc:ec:9a:05:41:
a4:8f:9c:4a:ea:dd:c0:f4:e8:56:8a:1e:f8:af:1c:
c0:c6:f2:cf:a6:cd:26:ac:a0:06:08:fd:d1:11:42:
05:a9:ae:2e:65:78:64:b5:e0:fb:0a:e9:ef:ea:12:
77:17:0c:dd:7f:e2:a1:8c:0b:27:0d:89:9b:36:13:
55:7c:2b:92:fa:c0:90:d4:ad:bb:9b:94:9f:3d:73:
13:d4:7c:23:42:82:c8:ea:4b:8c:01:f3:94:cc:c3:
ff:a4:ad:3c:36:e2:fa:40:ef:d2:a6:17:cf:e2:73:
ad:0b:5b:a9:c6:b4:fc:01:ac:9e:1b:69:1c:2a:da:
b2:57:c5:4c:bd:92:75:d4:08:72:f3:c8:f1:1e:98:
32:79:61:5d:02:87:79:50:4e:45:32:78:a2:ef:7e:
42:9a:c0:70:85:a3:7f:3b:16:7a:20:7f:5b:ad:41:
f1:17:0c:9a:6a:27:be:56:c6:5f:cf:49:33:fe:75:
aa:7f:eb:4d:e6:7a:bc:43:39:a0:43:40:ea:07:82:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:50:5F:F9:8E:DC:6A:9A:9F:7C:DE:79:7B:B2:0E:09:F2:32:97
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/BRJQX_mO3Gqan3zeeXuyDgnyMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ce:61:8b:28:c6:72:d1:87:58:36:93:a6:08:68:18:28:87:
c2:0d:f8:4d:9b:fb:90:79:7f:ce:19:9a:b0:5c:39:00:09:9b:
02:88:42:58:8d:8d:88:96:c0:af:05:78:fc:67:c1:e9:bc:7b:
bd:97:45:8f:1d:c4:c0:22:4c:a2:97:ec:94:7b:9e:a9:ba:ea:
b8:3b:b8:b7:2b:83:98:25:82:fd:96:c2:28:9c:4c:b9:91:f7:
75:fd:18:fb:55:9c:6c:1f:cd:84:31:db:a8:3d:d1:f4:2a:43:
f9:3a:b9:67:2f:eb:47:be:27:b3:19:1d:e2:60:72:5f:5c:c1:
be:b2:cf:51:a3:4c:19:02:55:b7:e2:6f:91:48:8e:d7:61:15:
9c:37:7d:4d:ca:5b:66:1a:c6:9a:c3:d2:57:04:91:01:12:f7:
8e:e7:77:b3:00:18:4a:b6:ec:3b:9c:b4:5b:01:d7:8f:c5:e7:
35:0c:18:2b:c0:6c:be:61:46:fc:f2:29:13:9b:d1:d3:9d:e1:
79:f0:2d:e5:37:3a:19:f8:c7:b0:2e:45:6c:29:7a:82:02:4d:
2e:eb:d6:91:fc:53:52:1f:ef:9c:a5:96:cb:52:98:0a:a0:70:
63:cf:52:8b:f9:66:e9:91:82:4a:f4:28:0f:51:ad:46:f2:21:
de:56:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:20 2025 by rpki-client