Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/sB__M-2tf_r-WmnijGfjgMLXBtA.roa
File: sB__M-2tf_r-WmnijGfjgMLXBtA.roa (raw, json)
Hash identifier: F4y11EajosyBV3nQgNUdJso3i2Bvw9jOsjKJCLiJGsk=
Subject key identifier: B0:1F:FF:33:ED:AD:7F:FA:FE:5A:69:E2:8C:67:E3:80:C2:D7:06:D0
Certificate issuer: /CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Certificate serial: 018A4B726BEBA10715618213FA44263DF99B
Authority key identifier: 0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/sB__M-2tf_r-WmnijGfjgMLXBtA.roa
Signing time: Thu 31 Aug 2023 11:55:04 +0000
ROA not before: Thu 31 Aug 2023 11:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:72:6b:eb:a1:07:15:61:82:13:fa:44:26:3d:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb2f4ea3bab0fb0e8892ee7f855d6452ea73300
Validity
Not Before: Aug 31 11:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b01fff33edad7ffafe5a69e28c67e380c2d706d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:2d:17:b8:f0:b0:55:0e:5c:a0:38:1f:44:
fc:c0:90:a1:91:91:6b:72:27:df:98:47:c2:d9:d9:
31:3b:ac:2b:c9:2e:db:0f:12:81:ce:e4:3d:2a:a5:
58:4f:10:ba:19:7a:df:17:47:aa:d1:79:b7:81:43:
e4:92:23:a7:bc:17:d9:03:d6:08:06:f4:9f:70:45:
6e:46:39:e5:19:7e:9a:b2:54:0c:e9:e3:c5:3c:41:
c5:73:9a:3c:b5:13:69:f2:f8:cb:7f:d9:98:7b:a5:
00:21:58:3a:cf:4a:41:56:36:cc:2d:3c:8e:24:f5:
37:21:7b:b9:ee:18:40:fb:6e:fa:22:cb:95:93:e9:
67:af:6e:49:7b:60:74:8c:5d:65:00:75:bf:29:f9:
8a:8a:9d:c0:dc:8e:c7:12:63:26:db:78:04:cf:4d:
67:3d:7e:2c:30:35:31:ca:f6:e2:0c:bf:7c:80:f8:
87:d7:1c:48:54:6e:81:a3:39:ea:c3:9c:90:46:f5:
cd:72:e1:3f:a6:51:d3:da:08:b9:44:ce:ff:2c:d4:
be:d8:5e:cd:17:69:c3:dd:d7:5f:74:f6:9a:84:de:
21:ca:d3:12:4a:7f:d9:1d:28:e4:7f:50:1e:cf:fc:
5b:bb:c3:31:03:b5:c5:b4:b3:06:fd:1b:bd:ab:4e:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:FF:33:ED:AD:7F:FA:FE:5A:69:E2:8C:67:E3:80:C2:D7:06:D0
X509v3 Authority Key Identifier:
keyid:0F:B2:F4:EA:3B:AB:0F:B0:E8:89:2E:E7:F8:55:D6:45:2E:A7:33:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7L06jurD7DoiS7n-FXWRS6nMwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/sB__M-2tf_r-WmnijGfjgMLXBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/400f02-e52e-47f6-8280-f489287abcc4/1/D7L06jurD7DoiS7n-FXWRS6nMwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4f:de:09:19:a9:1a:bb:b7:ea:49:1b:a1:75:d1:49:27:f3:
b2:6e:d8:3f:41:67:23:5c:45:21:f5:c8:88:32:bc:1a:66:33:
11:d0:47:a6:17:97:32:0c:b3:61:6f:ea:9a:c8:9f:92:a3:3b:
05:65:58:a9:44:11:22:db:c5:f7:01:f4:e5:be:e6:15:9f:be:
9f:00:fc:6a:05:cd:52:bb:bf:27:17:df:a5:5e:cc:2b:43:8c:
a4:70:a2:36:a5:8c:1d:7b:a3:a3:9d:53:68:c5:70:58:79:40:
fc:08:9f:9e:26:de:5a:67:12:92:92:7e:fe:f0:fc:8f:64:e8:
3b:22:37:91:e3:26:31:73:64:46:fa:42:4e:d8:85:48:44:3d:
e6:05:ab:63:b7:0c:73:08:5b:ec:83:15:75:37:d1:6b:58:f8:
cf:8f:4d:05:ae:e8:0a:8c:9a:dc:87:c1:e0:5d:3a:7e:d7:49:
f5:73:a2:26:dd:f5:dd:77:48:a9:eb:2b:e3:3f:1e:e0:da:19:
d3:87:6e:7c:bd:6d:c7:75:d2:47:3d:f8:a0:0f:bf:1c:bf:80:
93:41:b0:46:7c:11:64:ff:a3:29:b4:f4:bd:84:17:81:24:17:
0b:7e:1d:e9:05:65:57:d6:d9:ec:55:82:d9:26:71:76:ac:84:
7f:39:c4:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpLcmvroQcVYYIT+kQmPfmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjJmNGVhM2JhYjBmYjBlODg5MmVlN2Y4NTVkNjQ1MmVh
NzMzMDAwHhcNMjMwODMxMTE1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDFmZmYzM2VkYWQ3ZmZhZmU1YTY5ZTI4YzY3ZTM4MGMyZDcwNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsYtF7jwsFUOXKA4H0T8wJChkZFr
ciffmEfC2dkxO6wryS7bDxKBzuQ9KqVYTxC6GXrfF0eq0Xm3gUPkkiOnvBfZA9YI
BvSfcEVuRjnlGX6aslQM6ePFPEHFc5o8tRNp8vjLf9mYe6UAIVg6z0pBVjbMLTyO
JPU3IXu57hhA+276IsuVk+lnr25Je2B0jF1lAHW/KfmKip3A3I7HEmMm23gEz01n
PX4sMDUxyvbiDL98gPiH1xxIVG6Boznqw5yQRvXNcuE/plHT2gi5RM7/LNS+2F7N
F2nD3ddfdPaahN4hytMSSn/ZHSjkf1Aez/xbu8MxA7XFtLMG/Ru9q06huQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAf/zPtrX/6/lpp4oxn44DC1wbQMB8GA1UdIwQY
MBaAFA+y9Oo7qw+w6Iku5/hV1kUupzMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdMMDZqdXJEN0RvaVM3bi1GWFdSUzZuTXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDBmMDItZTUyZS00N2Y2LTgyODAt
ZjQ4OTI4N2FiY2M0LzEvc0JfX00tMnRmX3ItV21uaWpHZmpnTUxYQnRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDBmMDItZTUyZS00N2Y2LTgyODAtZjQ4OTI4N2FiY2M0
LzEvRDdMMDZqdXJEN0RvaVM3bi1GWFdSUzZuTXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMyMA0G
CSqGSIb3DQEBCwUAA4IBAQBbT94JGakau7fqSRuhddFJJ/Oybtg/QWcjXEUh9ciI
MrwaZjMR0EemF5cyDLNhb+qayJ+SozsFZVipRBEi28X3AfTlvuYVn76fAPxqBc1S
u78nF9+lXswrQ4ykcKI2pYwde6OjnVNoxXBYeUD8CJ+eJt5aZxKSkn7+8PyPZOg7
IjeR4yYxc2RG+kJO2IVIRD3mBatjtwxzCFvsgxV1N9FrWPjPj00FrugKjJrch8Hg
XTp+10n1c6Im3fXdd0ip6yvjPx7g2hnTh258vW3HddJHPfigD78cv4CTQbBGfBFk
/6MptPS9hBeBJBcLfh3pBWVX1tnsVYLZJnF2rIR/OcR/
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:24 2025 by rpki-client