Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/0KUwv7stbnfjSSAvoM9HnU78B94.roa
File: 0KUwv7stbnfjSSAvoM9HnU78B94.roa (raw, json)
Hash identifier: f2mlPq96hlHA42KVdq0ByujfHy7rRoc6d7NbrkgIyaw=
Subject key identifier: D0:A5:30:BF:BB:2D:6E:77:E3:49:20:2F:A0:CF:47:9D:4E:FC:07:DE
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 018216FA66C755FDBF57610418AAF5875962
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/0KUwv7stbnfjSSAvoM9HnU78B94.roa
Signing time: Tue 19 Jul 2022 15:01:25 +0000
ROA not before: Tue 19 Jul 2022 15:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 146.66.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:fa:66:c7:55:fd:bf:57:61:04:18:aa:f5:87:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jul 19 15:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0a530bfbb2d6e77e349202fa0cf479d4efc07de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:0d:36:64:78:e2:92:6e:e7:59:aa:25:f7:
18:81:7e:95:1c:b8:74:73:37:e9:42:94:f1:74:dc:
03:b7:09:1f:f2:ff:2b:e6:63:dd:c4:51:95:f1:5c:
ab:0f:34:24:3a:9e:8b:73:06:4c:32:3f:98:b1:c1:
9e:8e:fc:14:a0:13:a1:e3:67:bf:a1:91:12:55:a0:
0d:5a:0c:2d:ec:18:66:03:51:ac:a2:b1:91:96:db:
87:98:b8:3e:66:42:c6:2d:4e:6e:7d:87:33:a5:e3:
6d:36:8e:94:c6:ea:c4:71:c1:c4:3d:7a:36:9a:7b:
f8:4f:d1:c7:0e:e2:2e:8d:70:4b:ba:be:51:0b:b0:
35:6d:b7:d3:fb:cb:35:99:af:c8:29:be:0f:ba:b0:
96:80:12:fc:c3:e1:36:24:65:63:3e:73:92:29:7d:
11:7c:27:e4:bb:9d:8f:fc:26:9c:68:19:86:fe:65:
52:1a:53:ee:9b:e7:36:05:a4:a4:d3:bb:88:22:47:
1b:a0:97:47:51:fd:42:dc:2b:a9:39:84:c6:f4:2a:
9d:be:1b:67:be:0b:66:fb:21:32:86:84:11:e0:e6:
64:6a:e2:b9:73:60:36:c9:32:88:27:69:05:06:a5:
03:5e:a0:9e:27:f0:00:b8:3d:d5:5f:e6:5b:1b:87:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:30:BF:BB:2D:6E:77:E3:49:20:2F:A0:CF:47:9D:4E:FC:07:DE
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/0KUwv7stbnfjSSAvoM9HnU78B94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:70:02:06:42:21:e3:e8:32:71:42:b8:4e:96:2a:78:b9:ab:
3a:2a:bc:ca:5a:e9:8f:b7:8b:5a:8c:18:b4:6b:ea:da:23:79:
b8:73:5e:70:68:bc:d3:10:e2:cc:25:46:b4:d1:ce:c5:68:48:
a9:98:70:9f:96:b4:69:49:d8:13:9a:d6:a3:3c:b6:62:e7:8e:
f3:19:a3:51:41:b3:e3:62:e2:13:04:d3:bd:31:20:18:c0:f0:
94:c2:a1:0f:52:3e:1c:09:34:6c:d9:4c:f8:83:38:fa:70:42:
be:97:31:f3:07:22:0d:92:5d:d6:ec:5e:e2:3c:77:74:63:f5:
35:30:ab:bf:bf:39:0a:9e:27:60:5d:56:61:c1:e5:b4:4c:0f:
2a:46:db:8f:93:53:a3:2d:4e:30:83:a1:d3:02:c6:5b:1c:00:
f1:c6:c2:93:0d:e4:8c:a8:7b:39:fe:00:2d:d5:bf:29:b3:bd:
df:b1:7c:0c:cd:ae:4d:21:06:19:29:96:e7:a8:aa:a5:cb:e5:
0c:fb:48:f7:49:17:7f:bd:1f:ed:16:ab:b3:1f:57:11:76:ef:
8d:e2:21:61:ef:bf:4a:34:a4:ec:99:07:53:d3:67:1e:45:60:
c3:2a:32:86:03:35:52:09:01:17:71:9d:f8:45:f3:06:85:d1:
ae:dc:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:39 2025 by rpki-client