Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/9EDaoZ65L26z_dsB-yvc89ebGHg.roa
File: 9EDaoZ65L26z_dsB-yvc89ebGHg.roa (raw, json)
Hash identifier: pnWfGzwDfevvAwsF7TS4HmSvjoKaVCEWmf/e2EqgZmQ=
Subject key identifier: F4:40:DA:A1:9E:B9:2F:6E:B3:FD:DB:01:FB:2B:DC:F3:D7:9B:18:78
Certificate issuer: /CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Certificate serial: 018CC94D75E2A67FF849F31C0E6C15E52A33
Authority key identifier: 0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/9EDaoZ65L26z_dsB-yvc89ebGHg.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206750
IP address blocks: 146.19.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:75:e2:a6:7f:f8:49:f3:1c:0e:6c:15:e5:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f440daa19eb92f6eb3fddb01fb2bdcf3d79b1878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:2f:b3:33:f8:59:d4:e6:6c:3a:43:ac:44:
a8:7e:71:65:4f:5e:b3:12:29:be:73:bd:63:6e:6d:
70:b6:ac:79:8b:ed:07:a6:39:5d:28:07:1f:d8:b4:
4e:58:f7:1d:f4:04:69:3b:f8:fc:ca:b9:8d:72:b7:
a9:55:11:08:a2:1b:ba:55:22:c2:7a:aa:30:8e:20:
03:10:be:1c:b3:16:45:cc:81:66:a9:71:e8:1e:85:
f1:1b:46:72:5e:83:ca:56:82:a2:54:ac:87:14:88:
08:c0:da:f8:c9:19:7c:7c:00:b3:54:f2:c6:8f:86:
03:b8:3d:b5:54:47:21:29:c5:b9:a3:50:e3:83:ca:
35:9a:b1:c5:f0:50:11:09:f2:7d:7d:52:63:3a:87:
6d:28:c6:36:88:d8:25:05:e9:6f:12:73:56:d2:b8:
6e:a6:3f:9b:80:30:94:7d:be:92:b7:11:d4:08:74:
7d:23:80:7c:53:f0:bc:6c:7d:57:af:60:1b:a5:79:
e3:37:e4:a9:af:f7:18:94:a6:c2:67:95:70:cc:f6:
cc:d4:7e:47:5f:ed:45:36:05:5f:1f:7b:ef:b5:b7:
96:c2:62:1a:4a:9e:4c:d1:99:3d:c8:c4:d7:fd:65:
9b:c6:6e:3b:b7:d8:a2:fc:57:dc:e1:7a:35:c1:be:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:DA:A1:9E:B9:2F:6E:B3:FD:DB:01:FB:2B:DC:F3:D7:9B:18:78
X509v3 Authority Key Identifier:
keyid:0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/9EDaoZ65L26z_dsB-yvc89ebGHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/D7L06jurD7DoiS7n-FXWRS6nMwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7f:8b:c7:09:50:08:8f:24:38:73:16:1d:01:95:ac:1a:91:
a4:3a:97:43:aa:82:af:7e:8c:7b:bc:aa:c8:80:c5:2e:85:66:
57:6f:67:2f:55:63:d7:62:9d:76:06:c9:1d:e7:33:98:3a:6e:
7e:12:a3:61:14:7e:e2:ae:a0:55:c6:31:89:38:8f:49:b9:d4:
00:0c:c4:7f:14:12:88:66:92:44:58:65:4d:7f:fe:d6:90:05:
c1:41:8c:16:c1:78:47:ee:77:98:be:09:16:bc:3c:9c:b2:d7:
81:55:df:47:d2:1c:c0:3a:65:f7:93:02:29:15:a6:42:00:a3:
50:9d:c4:bc:ab:5c:db:eb:fe:e8:6c:52:91:8b:e7:6f:40:31:
12:a7:8f:06:cf:b3:7e:dd:69:99:cd:c1:2a:7b:d4:ab:91:b5:
90:e8:c3:6b:b1:e6:79:9c:55:55:0f:a8:f7:cc:14:bf:48:0a:
37:bb:28:e9:ad:2b:c7:ce:63:48:92:b5:36:c3:dd:e4:f7:c2:
50:21:df:b0:ad:cf:53:c1:93:11:ef:c4:80:fa:0c:b5:fa:1b:
1e:dd:c6:b0:a1:b5:ca:1a:2b:c2:cf:98:f1:51:81:64:01:36:
30:36:bb:3e:c9:2f:0b:b4:69:f8:02:34:07:70:4f:b2:00:74:
c1:55:41:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTXXipn/4SfMcDmwV5SozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjJmNGVhM2JhYjBmYjBlODg5MmVlN2Y4NTVkNjQ1MmVh
NzMzMDAwHhcNMjQwMTAyMDgzMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQwZGFhMTllYjkyZjZlYjNmZGRiMDFmYjJiZGNmM2Q3OWIxODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFsvszP4WdTmbDpDrESofnFlT16z
Eim+c71jbm1wtqx5i+0HpjldKAcf2LROWPcd9ARpO/j8yrmNcrepVREIohu6VSLC
eqowjiADEL4csxZFzIFmqXHoHoXxG0ZyXoPKVoKiVKyHFIgIwNr4yRl8fACzVPLG
j4YDuD21VEchKcW5o1Djg8o1mrHF8FARCfJ9fVJjOodtKMY2iNglBelvEnNW0rhu
pj+bgDCUfb6StxHUCHR9I4B8U/C8bH1Xr2AbpXnjN+Spr/cYlKbCZ5VwzPbM1H5H
X+1FNgVfH3vvtbeWwmIaSp5M0Zk9yMTX/WWbxm47t9ii/Ffc4Xo1wb7PHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRA2qGeuS9us/3bAfsr3PPXmxh4MB8GA1UdIwQY
MBaAFA+y9Oo7qw+w6Iku5/hV1kUupzMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdMMDZqdXJEN0RvaVM3bi1GWFdSUzZuTXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDBmMDItZTUyZS00N2Y2LTgyODAt
ZjQ4OTI4N2FiY2M0LzEvOUVEYW9aNjVMMjZ6X2RzQi15dmM4OWViR0hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDBmMDItZTUyZS00N2Y2LTgyODAtZjQ4OTI4N2FiY2M0
LzEvRDdMMDZqdXJEN0RvaVM3bi1GWFdSUzZuTXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMyMA0G
CSqGSIb3DQEBCwUAA4IBAQBhf4vHCVAIjyQ4cxYdAZWsGpGkOpdDqoKvfox7vKrI
gMUuhWZXb2cvVWPXYp12Bskd5zOYOm5+EqNhFH7irqBVxjGJOI9JudQADMR/FBKI
ZpJEWGVNf/7WkAXBQYwWwXhH7neYvgkWvDycsteBVd9H0hzAOmX3kwIpFaZCAKNQ
ncS8q1zb6/7obFKRi+dvQDESp48Gz7N+3WmZzcEqe9SrkbWQ6MNrseZ5nFVVD6j3
zBS/SAo3uyjprSvHzmNIkrU2w93k98JQId+wrc9TwZMR78SA+gy1+hse3cawobXK
GivCz5jxUYFkATYwNrs+yS8LtGn4AjQHcE+yAHTBVUHD
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:04:50 2025 by rpki-client