Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/baIKc1NiLAhniY5y7w9GoZ1PJb4.roa
File: baIKc1NiLAhniY5y7w9GoZ1PJb4.roa (raw, json)
Hash identifier: cK2L9peUts/2dbSCrPa+GJ2daZ6noG6kDSqGa7n3Tuc=
Subject key identifier: 6D:A2:0A:73:53:62:2C:08:67:89:8E:72:EF:0F:46:A1:9D:4F:25:BE
Certificate issuer: /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial: 018557A3F989114E4F9EB6DC01365AF666F6
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/baIKc1NiLAhniY5y7w9GoZ1PJb4.roa
Signing time: Wed 28 Dec 2022 07:30:42 +0000
ROA not before: Wed 28 Dec 2022 07:30:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210818
IP address blocks: 146.19.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:a3:f9:89:11:4e:4f:9e:b6:dc:01:36:5a:f6:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
Validity
Not Before: Dec 28 07:30:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6da20a7353622c0867898e72ef0f46a19d4f25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:d8:6e:c9:1d:2e:20:27:ce:f5:46:e3:a7:
a1:af:53:24:6b:c0:83:cb:5a:0d:6e:c4:ea:25:cb:
74:8b:84:b1:e9:01:59:6d:6e:2e:97:78:55:6e:7e:
35:4f:a8:02:14:86:67:78:7d:76:6f:c1:ed:e9:6b:
60:76:5e:6c:74:11:46:a4:ea:39:75:02:86:f3:cd:
b9:4a:c3:3e:f5:d2:7d:a5:57:74:53:65:dc:21:92:
db:ad:7b:1e:87:93:f3:8f:99:89:50:70:33:74:0d:
28:d2:30:30:41:4f:84:6b:cf:79:b5:77:7c:d8:01:
a1:b2:08:f4:78:be:fd:a1:ae:10:0c:f3:fd:6e:f7:
ba:dd:de:4e:59:1d:6d:79:a4:cf:06:1f:a3:43:3a:
90:29:20:8e:3f:6c:1b:68:1d:14:ac:34:f4:c1:b6:
66:f4:7b:20:ce:96:e2:f3:1c:92:08:70:f6:4a:43:
50:94:81:0c:71:55:6d:71:8c:8f:6e:5c:2a:99:ea:
a4:99:cc:ca:a4:6c:0e:d8:5d:63:a5:ef:ba:ea:4d:
9e:40:61:cc:c6:c2:17:5f:20:64:ee:c8:39:4b:6b:
1d:31:1e:d6:8f:a1:11:f3:4c:1d:f5:44:ec:7a:01:
61:d5:fa:b7:93:b1:44:23:a4:52:af:a1:35:f6:ad:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:0A:73:53:62:2C:08:67:89:8E:72:EF:0F:46:A1:9D:4F:25:BE
X509v3 Authority Key Identifier:
keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/baIKc1NiLAhniY5y7w9GoZ1PJb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
be:18:7f:be:4c:1e:6b:e7:f7:a6:d1:5d:eb:3d:86:0c:a2:02:
b4:45:a9:d8:17:6e:47:c8:41:66:76:13:c1:cd:91:94:d8:41:
6e:65:64:67:8e:0a:02:ad:2e:75:a8:8f:d8:22:13:90:f7:5e:
19:d6:6c:94:af:b4:7a:3d:76:00:d8:44:8d:43:83:95:65:1a:
9f:cf:3a:c4:2e:0d:ae:aa:05:a8:9a:71:12:eb:2d:94:fb:48:
ad:66:88:4e:81:5e:b2:9b:97:87:99:13:69:82:95:bc:f8:0f:
af:0a:c3:80:86:e8:16:8e:da:75:26:de:81:ba:88:89:fc:cb:
6c:44:47:da:80:93:39:99:18:e7:37:81:c7:ee:b8:a6:d9:f9:
9f:d0:20:c7:28:e8:bd:17:f8:c6:e1:ac:c1:bb:f9:ba:d5:de:
88:27:b2:71:34:69:58:7c:e1:5a:72:19:c1:e2:b0:4c:56:a9:
21:5d:63:92:9b:c4:6c:5c:ed:ed:de:f6:0e:94:34:d5:cb:56:
f8:96:7b:45:d7:01:cc:8f:a2:a2:c5:4e:4a:31:ae:e3:16:0f:
d6:6e:0e:c0:bb:a8:90:26:2c:bb:c6:4a:cf:09:a6:01:e5:2d:
e0:5c:45:c8:b8:eb:a7:b6:53:a5:c2:de:9f:bb:a0:0a:07:e3:
b5:68:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:55 2025 by rpki-client