Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/8IXxJnl-vHNN3sNm2H0j_kUeP_4.roa
File: 8IXxJnl-vHNN3sNm2H0j_kUeP_4.roa (raw, json)
Hash identifier: 3YWsH1Yopga+Ai1Rk7OPmzdAAZBVOZ6gB4ZDcX7qfVc=
Subject key identifier: F0:85:F1:26:79:7E:BC:73:4D:DE:C3:66:D8:7D:23:FE:45:1E:3F:FE
Certificate issuer: /CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Certificate serial: 01014869
Authority key identifier: 1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/8IXxJnl-vHNN3sNm2H0j_kUeP_4.roa
Signing time: Mon 07 Mar 2022 17:38:53 +0000
ROA not before: Mon 07 Mar 2022 17:38:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16861289 (0x1014869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Validity
Not Before: Mar 7 17:38:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f085f126797ebc734ddec366d87d23fe451e3ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:eb:89:2c:82:f3:76:ea:72:24:d8:cf:7f:
8d:a8:cb:ef:85:4d:02:42:42:ff:f5:53:59:20:4d:
76:42:3e:c8:fb:56:b3:89:4c:10:79:f0:57:5a:0c:
7d:66:7a:7d:8f:51:29:9f:f6:be:f1:f0:a8:de:d9:
4d:b0:51:f2:fd:ce:98:f2:7f:2b:de:35:37:21:6d:
7a:ae:15:69:0c:f5:e4:fe:07:bd:ba:e8:86:ec:8f:
0c:a4:00:73:d1:d4:6a:7d:b7:62:04:b2:aa:46:23:
d4:a9:2c:7b:15:73:02:f0:d6:87:a4:b1:cd:ee:cc:
b2:28:cd:b8:16:c9:ed:ac:ee:17:c4:b2:e8:8a:06:
ed:66:eb:d7:b9:d0:bd:67:43:52:75:74:6b:53:a3:
63:ab:5f:24:f2:a9:b3:e1:9c:54:26:43:c6:2b:90:
cd:2d:6f:77:70:69:5c:93:14:15:f9:fd:59:ed:ff:
52:91:00:58:fe:b2:4a:d1:55:8d:3b:a3:da:df:0c:
fb:a3:7e:b9:fc:a4:ab:0f:26:ba:83:24:d1:7e:43:
bf:5b:7f:d7:94:8f:f4:13:65:43:60:3a:00:f0:30:
fe:a3:9e:bd:6b:cb:44:af:b8:bd:ca:de:47:a9:1e:
fa:ca:4c:7e:f6:8f:51:dd:68:94:4e:54:7e:e5:a2:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:F1:26:79:7E:BC:73:4D:DE:C3:66:D8:7D:23:FE:45:1E:3F:FE
X509v3 Authority Key Identifier:
keyid:1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/8IXxJnl-vHNN3sNm2H0j_kUeP_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.40.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:bc:6d:b4:82:7c:a3:2d:a9:08:3d:77:c3:8e:b1:45:b0:
ee:1b:5c:ee:5e:c0:72:ef:96:8d:80:ae:cf:92:6a:5b:f6:fe:
15:41:ef:28:b3:0c:63:c8:f1:09:28:16:a1:19:cb:ec:62:d0:
ad:81:c1:89:ce:4f:33:4d:8f:62:7d:85:5e:4b:40:bf:c3:c3:
2b:c8:0d:41:d8:5b:ce:3e:d3:6a:c9:3a:95:e0:b6:2f:e2:00:
42:70:ac:f5:f4:cc:15:47:b6:da:37:d2:f9:00:4c:76:dc:09:
d9:53:07:2a:0b:37:da:5b:3e:a7:80:73:5a:13:9d:88:f3:f2:
8a:16:6c:f8:54:5e:a1:ae:57:52:d5:64:9b:87:2c:59:0d:d1:
49:75:27:9c:c3:78:35:b0:a3:66:f9:11:8d:10:28:4b:99:da:
5b:68:69:4b:ab:1d:d4:40:84:3c:8a:df:c6:4b:d4:b4:08:11:
21:2f:cf:a4:34:e8:2b:a9:22:83:83:b2:66:7b:70:02:08:e0:
b5:4c:32:65:58:8c:ee:91:ad:9e:d2:d9:8a:c7:c4:4b:f6:cf:
d1:b8:f3:02:1a:78:3f:41:8d:46:c8:f7:b8:33:95:11:b8:94:
87:3c:97:a8:1e:fe:31:6f:18:ce:6d:6f:4c:d3:ef:67:f8:83:
44:bb:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:16:01 2025 by rpki-client