Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/POa1_1lG2fZrcfZRxbGnmzL6mIU.roa
File: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (raw, json)
Hash identifier: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=
Subject key identifier: 3C:E6:B5:FF:59:46:D9:F6:6B:71:F6:51:C5:B1:A7:9B:32:FA:98:85
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 01942444841E6F7877AF3FB828487EB8BD1C
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/POa1_1lG2fZrcfZRxbGnmzL6mIU.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:1e:6f:78:77:af:3f:b8:28:48:7e:b8:bd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ce6b5ff5946d9f66b71f651c5b1a79b32fa9885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:11:8b:ff:cf:3e:da:b5:ac:98:72:8a:9d:
0c:a8:3e:3f:c1:fa:5f:25:20:ba:f9:69:3c:ef:e3:
95:34:22:c8:df:8d:2f:9d:52:82:3a:a6:65:82:44:
be:53:14:17:8f:ac:cc:2f:15:7f:a2:82:c2:bf:45:
44:d3:f0:2b:bb:83:05:4e:1c:24:a4:a9:80:27:4b:
7e:ee:02:60:8f:51:a7:c7:a8:bc:fc:40:4a:bc:bf:
ca:9e:0d:4d:01:db:9b:9d:eb:0e:57:af:67:ac:c0:
8b:f8:b3:2a:81:b6:b7:5c:af:27:5e:93:b2:1d:50:
18:f5:94:ab:1d:39:8a:76:66:48:e5:9a:e1:b8:af:
d6:18:6e:d1:05:6b:ee:91:0f:fe:4d:9a:3a:20:0a:
2d:e1:2c:68:a7:40:be:f2:ae:03:db:cb:94:43:11:
cf:03:49:14:54:4e:ad:6e:1f:45:36:19:a8:7b:5c:
3f:65:bb:97:79:b6:66:e2:73:48:dc:9c:1e:32:f4:
c3:cf:f5:8b:07:03:dd:51:4d:4a:20:4a:c7:ca:8f:
b3:0a:48:63:4b:ad:96:4a:7d:1c:56:24:e6:2b:f3:
d2:93:e4:23:8a:1a:41:5f:07:93:6c:70:15:87:61:
01:a0:b1:4f:10:e9:d2:3a:fd:01:0d:7a:30:f0:db:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:B5:FF:59:46:D9:F6:6B:71:F6:51:C5:B1:A7:9B:32:FA:98:85
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/POa1_1lG2fZrcfZRxbGnmzL6mIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.78.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6c:c8:66:50:fa:f6:f4:4a:c0:bb:1c:58:77:4c:ee:82:bb:
b2:20:91:92:b3:9a:12:9f:cb:82:a4:81:71:61:4b:15:61:95:
65:19:54:a8:2f:b7:97:c2:4e:67:a7:d0:f5:af:62:f7:57:fe:
af:e3:fa:17:d9:7b:3f:b5:cb:4a:20:20:c6:b0:a8:ea:59:1a:
12:7d:dd:da:f0:7b:52:b5:a9:55:bc:b2:88:72:9d:a9:78:53:
9b:60:f8:53:1c:99:77:7b:52:b8:2a:7a:4b:55:ea:0d:6b:93:
97:10:3c:8e:e6:13:e6:c4:d1:d1:ce:37:76:33:13:fe:7f:4d:
ec:ad:9e:12:ed:44:ad:36:98:89:e6:24:a4:81:13:92:f9:8c:
b5:f7:6d:be:e6:7d:df:77:d0:f8:ab:15:a7:3c:a2:c3:40:42:
9d:ae:af:0d:ef:f3:5d:4a:0a:ea:6d:e9:e4:c5:17:ab:fd:8c:
45:76:32:45:7c:31:5e:57:99:d1:38:7d:a3:c4:9a:52:03:b6:
08:d2:27:a1:0c:72:be:81:54:6f:17:14:0d:92:0c:73:49:1b:
05:ce:03:88:95:b7:31:b5:40:ee:9e:5e:e0:a5:c2:ff:6f:a3:
1b:2a:96:a7:b1:48:54:d1:1c:c1:7d:73:79:ff:17:31:92:c3:
cb:64:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:39:55 2025 by rpki-client