Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/yOVja7vrTErSBBbS4gW0nfwQ_uU.roa
File: yOVja7vrTErSBBbS4gW0nfwQ_uU.roa (raw, json)
Hash identifier: orws9xRTuVEXiNN5QkvQHOeOac8lON0enQBFQsRd5zQ=
Subject key identifier: C8:E5:63:6B:BB:EB:4C:4A:D2:04:16:D2:E2:05:B4:9D:FC:10:FE:E5
Certificate issuer: /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial: 719A74
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/yOVja7vrTErSBBbS4gW0nfwQ_uU.roa
Signing time: Sat 01 Jan 2022 03:53:57 +0000
ROA not before: Sat 01 Jan 2022 03:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210505
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7445108 (0x719a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Validity
Not Before: Jan 1 03:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8e5636bbbeb4c4ad20416d2e205b49dfc10fee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:e9:47:da:e1:8b:2f:26:86:fd:92:b1:c0:
e8:63:2a:8c:01:63:ed:bb:fb:df:5e:9b:f6:d8:a1:
c7:7d:f6:e1:ab:fa:d9:3b:fd:44:46:5b:6e:f2:ac:
f6:10:5e:7c:1d:8e:47:7d:c4:bf:4c:e1:14:2d:45:
3c:9d:50:72:cc:6c:9b:87:21:f6:7d:79:96:77:c5:
13:16:08:43:08:9b:15:dd:82:9c:98:11:44:ca:8d:
32:78:8a:0a:1b:cc:98:27:e4:57:2f:68:ee:a8:d9:
4c:8a:e3:ef:77:c9:70:c3:4a:33:b4:27:be:83:19:
e1:e4:13:15:6b:9c:1f:93:4d:ab:99:ea:fe:a9:43:
6e:48:3b:10:8d:e0:92:73:f3:94:29:f7:74:c5:43:
44:6e:48:d5:f4:9c:a7:45:4e:7b:63:7b:00:53:e6:
4d:dd:52:12:98:a3:35:bd:48:0b:30:ae:42:23:c1:
56:18:5c:e0:da:a5:da:58:9f:3a:17:fd:53:53:88:
65:0b:ca:8d:91:ec:42:81:e8:27:c5:73:e2:38:5f:
dc:f1:ea:86:6c:a9:3b:78:9a:34:74:8c:70:80:51:
14:fc:dc:03:c8:d8:7b:24:dd:11:ce:d5:d6:cd:1a:
a6:aa:d2:5e:60:a7:18:06:55:d9:e4:6e:05:b1:e3:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:63:6B:BB:EB:4C:4A:D2:04:16:D2:E2:05:B4:9D:FC:10:FE:E5
X509v3 Authority Key Identifier:
keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/yOVja7vrTErSBBbS4gW0nfwQ_uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:54:e0:d0:1d:a9:f0:39:3c:01:21:65:b5:23:c6:c4:bf:a9:
fc:76:6d:7c:6e:1e:39:ec:5b:0d:db:0d:0f:c0:44:09:ee:fb:
a5:7e:9f:79:6d:b1:7b:ed:ad:77:55:e6:db:71:b3:5e:6b:ba:
57:84:e9:d3:e2:3c:2e:84:7f:96:22:d9:00:ac:3b:45:89:8b:
ce:c4:1e:84:00:0a:da:02:8f:9f:2a:2f:64:25:89:55:88:d2:
e9:ce:eb:5f:db:95:bc:23:7f:66:8f:18:9e:5a:fb:7d:85:62:
e8:7f:6c:6d:7f:94:8a:d6:68:2c:21:d5:d9:0f:a9:e0:27:cb:
98:45:60:5b:8b:66:8a:3d:19:81:ce:ea:04:97:27:33:f2:d5:
03:23:fc:ef:ba:62:f3:64:17:c0:55:45:a7:10:9d:5a:73:34:
cf:a6:0d:72:67:e1:96:d9:cc:4d:dd:6b:f0:84:ed:0f:6e:90:
65:0a:8d:ea:00:21:04:12:8e:f3:3d:7c:4b:e0:f1:d8:27:9e:
19:13:69:cc:22:d0:59:b0:38:6b:49:ad:8b:35:cd:40:e8:d8:
83:3a:65:76:e6:0f:d2:b1:c3:36:24:cc:52:d3:92:31:3a:20:
5b:6a:45:3b:80:dd:2b:bc:de:0d:8b:e7:32:70:83:0d:b4:d3:
9f:4d:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:34 2025 by rpki-client