Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/GZPEs1afF7BiRa967HT3_l-Dp0w.roa
File: GZPEs1afF7BiRa967HT3_l-Dp0w.roa (raw, json)
Hash identifier: 2AfHV5aVS3YoohmIqd4SG9bO7hgYR6p4b2kuyiBGMRo=
Subject key identifier: 19:93:C4:B3:56:9F:17:B0:62:45:AF:7A:EC:74:F7:FE:5F:83:A7:4C
Certificate issuer: /CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Certificate serial: 0AF196
Authority key identifier: 50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/GZPEs1afF7BiRa967HT3_l-Dp0w.roa
Signing time: Tue 17 May 2022 06:35:29 +0000
ROA not before: Tue 17 May 2022 06:35:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 146.19.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717206 (0xaf196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Validity
Not Before: May 17 06:35:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1993c4b3569f17b06245af7aec74f7fe5f83a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:2a:9e:a0:5e:e9:77:91:05:52:a9:b0:51:
c8:9d:9d:7e:0b:06:09:80:d8:a8:ad:0a:6c:df:36:
b8:36:8f:04:36:19:34:88:74:0d:b0:f9:7e:af:e5:
6d:38:c4:de:7c:a2:3b:fb:6e:2d:d6:43:38:1f:1c:
f0:15:8a:5b:99:4e:10:dc:4a:16:b4:8b:1f:6e:b6:
5e:77:eb:c0:5e:da:e2:e0:aa:f4:d3:ea:02:04:67:
e5:31:8c:eb:b0:b0:cb:48:97:71:df:f2:5d:c2:00:
28:a2:de:df:02:09:d2:c6:3c:87:ae:d1:c6:6b:7f:
e9:1c:2f:f1:d1:12:71:61:67:35:f8:04:92:aa:9d:
e1:04:bb:9e:a6:5d:77:13:b9:5e:87:0f:a7:85:61:
08:3f:ce:4b:05:dd:80:70:0a:26:41:d5:ca:ca:85:
2a:a0:e0:6e:29:08:55:f9:ec:c1:5b:d2:75:b5:48:
f5:db:73:36:ec:e9:4c:e0:70:fe:45:a3:15:dd:0a:
80:34:92:d6:fd:ea:dd:07:83:29:b3:74:43:0a:7c:
37:53:27:45:9d:0c:30:08:95:bc:d2:ff:67:c7:41:
e7:5e:9c:0e:9d:b8:4d:d1:62:3f:cb:ba:10:48:3b:
6f:b7:5e:e1:96:3e:40:a0:b5:30:b0:54:ab:be:5c:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:C4:B3:56:9F:17:B0:62:45:AF:7A:EC:74:F7:FE:5F:83:A7:4C
X509v3 Authority Key Identifier:
keyid:50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/GZPEs1afF7BiRa967HT3_l-Dp0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.71.0/24
Signature Algorithm: sha256WithRSAEncryption
14:35:f8:e5:79:df:16:9b:d5:ee:93:da:aa:2b:24:f1:4b:3e:
40:57:00:5f:1b:b0:99:07:a6:41:3e:ca:49:65:65:bf:b9:3c:
f8:1c:44:a9:5b:56:9d:bf:0c:3f:ac:20:42:b2:3e:23:f3:25:
94:f8:0f:ad:fb:ed:ae:12:d9:bb:1b:01:2c:e0:97:6d:8b:28:
fe:b9:20:68:1d:65:40:a5:ad:f1:5b:b8:28:60:f6:8a:db:33:
be:f2:6b:75:4d:93:bf:9c:42:bf:9e:61:4f:8d:af:ed:19:a5:
80:ed:69:27:14:a4:d3:37:0a:1b:83:54:52:87:d9:65:4b:58:
79:07:42:3c:25:b6:e3:89:5a:b8:56:5d:1d:cc:53:1c:78:05:
21:ec:7a:27:80:63:ce:c6:37:9d:4c:6d:54:1d:54:26:13:2c:
1c:7f:10:50:d4:66:5d:ab:a1:73:01:c0:29:38:83:7b:1f:b5:
af:ca:8e:ac:d0:51:09:60:e9:c3:b0:d7:74:ca:64:1c:22:5a:
2a:e2:2d:19:bb:24:a8:cd:b3:4a:7d:7f:d9:92:27:15:ec:1a:
15:0b:c2:10:94:18:2b:8d:68:7c:89:ee:1a:36:a0:c4:27:2a:
3f:ea:8d:b8:cb:f0:bb:ac:7d:2d:6d:47:4c:50:86:e9:0d:4d:
dd:5d:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:48:03 2025 by rpki-client