Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/hw59NyNPDeWoRYjbNm3NLXP849E.roa
File: hw59NyNPDeWoRYjbNm3NLXP849E.roa (raw, json)
Hash identifier: Pe6ibf9GCInoDnah1Pad8bE3ImGyCpY8AGb5Hc3Vzvg=
Subject key identifier: 87:0E:7D:37:23:4F:0D:E5:A8:45:88:DB:36:6D:CD:2D:73:FC:E3:D1
Certificate issuer: /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial: 01857015421042D45BFD17D59D47BA6E7233
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/hw59NyNPDeWoRYjbNm3NLXP849E.roa
Signing time: Mon 02 Jan 2023 01:25:19 +0000
ROA not before: Mon 02 Jan 2023 01:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 146.19.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:42:10:42:d4:5b:fd:17:d5:9d:47:ba:6e:72:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
Validity
Not Before: Jan 2 01:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=870e7d37234f0de5a84588db366dcd2d73fce3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:41:bd:06:24:68:ee:20:ae:31:2d:fa:0b:
99:bd:18:1e:e3:dc:45:df:99:9e:d3:8c:9c:7c:7f:
43:b1:90:2a:bb:e1:51:e7:a0:8e:1e:ab:bc:28:4d:
57:8f:fd:23:48:6d:d8:07:72:6a:11:05:bf:ed:08:
0d:87:41:83:2b:b3:c0:23:13:0c:00:18:35:1e:ff:
c9:3b:72:a2:35:36:b3:5b:34:39:15:00:f5:78:7d:
03:2f:f0:f6:4e:53:6d:1d:75:1f:2f:97:37:8f:c7:
d9:83:28:f0:32:b6:2b:55:a5:8f:f8:e6:f2:e9:85:
01:e9:aa:dd:6f:af:2f:08:de:34:35:0a:c4:88:a8:
00:4e:ac:27:0d:ad:c2:29:c6:3d:eb:04:8a:1f:f1:
ef:dc:20:6a:b1:fd:29:75:10:ea:b0:b3:ae:ee:ae:
6b:94:21:d8:38:c0:13:eb:c5:e3:48:0b:dc:37:33:
51:08:0f:95:34:e8:ea:e9:7b:fe:43:c2:9c:a2:75:
75:8f:9f:57:c2:ba:63:53:30:b5:af:f3:ea:45:1d:
b7:aa:48:12:09:39:a7:6a:62:04:95:a9:fa:d0:d2:
c6:e7:d8:fa:19:66:38:17:d9:74:4f:52:41:24:5d:
9d:7b:8f:c7:9d:cd:17:f5:ac:24:bd:c0:05:bf:ca:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:7D:37:23:4F:0D:E5:A8:45:88:DB:36:6D:CD:2D:73:FC:E3:D1
X509v3 Authority Key Identifier:
keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/hw59NyNPDeWoRYjbNm3NLXP849E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.212.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6d:a5:0f:fa:29:35:92:1d:6d:e9:06:1d:41:12:15:6b:e7:
5c:66:1d:d9:6b:24:0c:81:0c:bd:79:22:2d:0b:7e:1d:73:e6:
3e:42:4b:3e:d5:8f:1a:3d:eb:bf:8d:3b:7e:9c:af:43:6a:f1:
f9:b6:df:df:32:3d:c5:a7:cb:97:58:e0:cd:6d:bb:c7:91:1e:
41:10:98:65:a8:ec:63:98:8f:06:42:64:01:7c:83:6f:38:ff:
bc:9f:f2:69:96:80:c8:70:96:bc:95:38:9a:bf:e1:c5:2e:b8:
34:04:69:07:d8:07:d8:38:9b:49:e4:ab:45:c7:b5:e9:45:a4:
81:2f:76:42:b8:8f:5b:9a:88:4d:52:7a:43:ef:7f:f2:98:c8:
70:dd:1c:9c:35:12:e8:2a:ae:27:20:81:48:8c:03:ae:10:58:
98:6b:69:58:06:01:85:23:c3:e2:d0:ff:8d:3a:5a:56:ec:3f:
8b:6b:01:b4:a8:6f:6c:fc:5b:81:e5:f0:13:7d:a3:ad:91:fb:
6f:52:11:a9:6b:b8:4f:9d:e3:4b:b1:2c:4a:d7:e5:20:9e:3c:
fe:1b:75:30:c7:56:75:1b:11:be:cd:fe:51:b4:7a:ed:72:a7:
67:8c:98:33:88:58:7f:e8:23:3b:b7:c7:90:07:f2:c4:e9:3f:
d3:e3:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:25:02 2025 by rpki-client