Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/y9v1HIq9s2V7SgunNBJfbLdcVu4.roa
File: y9v1HIq9s2V7SgunNBJfbLdcVu4.roa (raw, json)
Hash identifier: JEZjVJCy3QUgxF2Ov8ZYlkQV8GdVvDlibzyKvMq8S3g=
Subject key identifier: CB:DB:F5:1C:8A:BD:B3:65:7B:4A:0B:A7:34:12:5F:6C:B7:5C:56:EE
Certificate issuer: /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial: 01856ECB95615B00FF067DD140887F05964D
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/y9v1HIq9s2V7SgunNBJfbLdcVu4.roa
Signing time: Sun 01 Jan 2023 19:25:13 +0000
ROA not before: Sun 01 Jan 2023 19:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:95:61:5b:00:ff:06:7d:d1:40:88:7f:05:96:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Validity
Not Before: Jan 1 19:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbdbf51c8abdb3657b4a0ba734125f6cb75c56ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:b6:07:52:d6:5b:2a:93:f8:75:64:f2:73:
37:3e:80:5a:8b:31:43:f1:10:9b:5f:66:d1:0d:de:
32:18:a4:a8:69:af:b0:4c:6b:c4:2d:d0:5c:3a:47:
17:a5:a1:ec:80:e2:e0:5a:aa:9c:98:46:47:01:44:
b3:6d:3b:af:13:8e:3a:ff:c2:71:96:f9:02:df:32:
04:73:d9:db:50:b4:43:c3:af:60:0b:d2:3a:8b:59:
60:e7:45:a0:d2:ed:7d:5c:a1:26:ca:97:2a:34:72:
8e:d2:c6:1e:07:f4:a9:ba:16:c8:63:1c:36:07:dc:
e2:49:a2:2f:80:8c:cd:db:65:60:d8:c1:09:a5:58:
68:1b:e8:c1:6f:c0:d2:32:e3:f7:a8:40:7d:d7:04:
ff:10:d5:2a:73:9e:8e:93:71:8e:1f:cb:de:f0:61:
38:96:c7:6d:a6:f9:29:7c:ca:31:03:3e:8b:90:49:
1c:bf:a0:24:fe:1f:56:f4:27:42:5b:c3:67:d1:ce:
5e:e0:a5:83:39:32:76:78:e2:e7:61:c1:ea:96:72:
7c:6f:cb:52:62:ff:0a:68:f1:b3:25:89:e3:43:1d:
81:98:e0:f0:71:41:c4:da:40:f4:5d:27:70:cd:78:
e2:4d:2f:a4:f3:d4:93:3e:c5:41:ac:38:21:9e:a2:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:F5:1C:8A:BD:B3:65:7B:4A:0B:A7:34:12:5F:6C:B7:5C:56:EE
X509v3 Authority Key Identifier:
keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/y9v1HIq9s2V7SgunNBJfbLdcVu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4f:7b:23:a2:1c:8c:12:e9:a9:e4:49:06:86:18:69:d0:46:
00:98:07:64:f2:99:47:b0:8b:06:b3:8d:51:3e:36:7a:9c:0d:
7c:46:e9:73:df:0d:14:64:c9:50:fd:5f:30:fb:2f:7a:04:65:
cb:55:94:6c:a4:28:6d:b4:e9:bc:8b:98:f6:4a:36:da:98:a3:
01:2f:5e:7f:56:04:93:c9:4d:40:83:cc:d9:78:63:d1:1c:03:
69:60:dd:45:25:54:3f:9a:22:78:b4:c7:f7:8f:df:d7:58:2f:
8e:ce:6e:aa:e9:6a:3f:76:d8:c2:61:58:72:5a:f9:2a:91:fc:
5c:58:02:65:56:05:7a:5c:6b:58:4c:84:2e:8b:93:d3:7e:37:
cf:71:ff:98:91:d9:9f:bc:63:ca:77:54:4f:90:92:b3:df:7c:
de:6c:a8:70:db:a8:48:a1:29:7b:bf:d5:c4:f8:21:13:33:5c:
dd:f2:40:7c:dc:af:96:6e:cc:c6:f0:88:fe:8b:dd:63:78:89:
6c:6d:01:c5:a6:c9:7b:30:d1:e3:81:de:e9:e3:63:0a:17:f7:
8f:18:f5:75:93:29:6c:32:6d:2b:6b:73:fb:80:ab:86:fd:c3:
88:cc:60:fe:fe:3b:52:22:e8:3b:23:04:0c:2b:a2:79:31:85:
62:fa:60:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy5VhWwD/Bn3RQIh/BZZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWRmY2ZiMzM1YzlkNzY4ODhkODFiNzNlY2Q4YTQwYmFm
ZWNmZmMwHhcNMjMwMTAxMTkyNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRiZjUxYzhhYmRiMzY1N2I0YTBiYTczNDEyNWY2Y2I3NWM1NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA22B1LWWyqT+HVk8nM3PoBaizFD
8RCbX2bRDd4yGKSoaa+wTGvELdBcOkcXpaHsgOLgWqqcmEZHAUSzbTuvE446/8Jx
lvkC3zIEc9nbULRDw69gC9I6i1lg50Wg0u19XKEmypcqNHKO0sYeB/SpuhbIYxw2
B9ziSaIvgIzN22Vg2MEJpVhoG+jBb8DSMuP3qEB91wT/ENUqc56Ok3GOH8ve8GE4
lsdtpvkpfMoxAz6LkEkcv6Ak/h9W9CdCW8Nn0c5e4KWDOTJ2eOLnYcHqlnJ8b8tS
Yv8KaPGzJYnjQx2BmODwcUHE2kD0XSdwzXjiTS+k89STPsVBrDghnqJ0qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvb9RyKvbNle0oLpzQSX2y3XFbuMB8GA1UdIwQY
MBaAFALt/PszXJ12iI2Btz7NikC6/s/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQt
YjE0YjdjZjcwZDJmLzEveTl2MUhJcTlzMlY3U2d1bk5CSmZiTGRjVnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQtYjE0YjdjZjcwZDJm
LzEvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPMMA0G
CSqGSIb3DQEBCwUAA4IBAQBCT3sjohyMEump5EkGhhhp0EYAmAdk8plHsIsGs41R
PjZ6nA18Rulz3w0UZMlQ/V8w+y96BGXLVZRspChttOm8i5j2SjbamKMBL15/VgST
yU1Ag8zZeGPRHANpYN1FJVQ/miJ4tMf3j9/XWC+Ozm6q6Wo/dtjCYVhyWvkqkfxc
WAJlVgV6XGtYTIQui5PTfjfPcf+YkdmfvGPKd1RPkJKz33zebKhw26hIoSl7v9XE
+CETM1zd8kB83K+WbszG8Ij+i91jeIlsbQHFpsl7MNHjgd7p42MKF/ePGPV1kyls
Mm0ra3P7gKuG/cOIzGD+/jtSIug7IwQMK6J5MYVi+mCo
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:02 2025 by rpki-client