Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/okLNvYahqaWWDfzZMckpKloDX8E.roa
File: okLNvYahqaWWDfzZMckpKloDX8E.roa (raw, json)
Hash identifier: Tkv041q0JvIuzBldlBlfXVCZmzlnyBTFceN/1TDc/X4=
Subject key identifier: A2:42:CD:BD:86:A1:A9:A5:96:0D:FC:D9:31:C9:29:2A:5A:03:5F:C1
Certificate issuer: /CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Certificate serial: 0182AE8357504ED65FAD6C23C0B4C7A32FA7
Authority key identifier: C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/okLNvYahqaWWDfzZMckpKloDX8E.roa
Signing time: Thu 18 Aug 2022 01:13:39 +0000
ROA not before: Thu 18 Aug 2022 01:13:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 146.255.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ae:83:57:50:4e:d6:5f:ad:6c:23:c0:b4:c7:a3:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Validity
Not Before: Aug 18 01:13:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a242cdbd86a1a9a5960dfcd931c9292a5a035fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:ef:a8:a2:9b:f3:76:27:e8:48:01:d2:8e:
4e:c7:6c:e8:ab:f4:99:c9:20:7d:0d:51:3e:42:3e:
b9:34:67:8c:9c:44:ea:26:91:21:63:b0:a7:80:e4:
1b:f6:b6:10:0b:c6:ba:70:df:84:53:b0:f7:e8:f3:
0b:c6:d2:5c:5e:e3:ad:c6:8a:4c:e5:3a:fc:85:5b:
87:2a:01:f4:b2:be:f7:0b:3d:27:5f:58:fe:3f:66:
cd:91:4f:93:0c:89:04:1d:1b:73:5b:6a:4c:a8:b7:
4f:94:a6:bd:fe:c5:c1:7f:5a:92:55:74:42:72:78:
35:13:2b:21:e9:43:7b:e5:dd:70:2e:ff:10:ad:d6:
2d:93:7b:d0:64:b1:7f:37:ce:e1:5a:c7:dd:90:07:
22:27:d6:97:14:8f:ba:7c:43:86:7c:15:b7:d5:22:
70:b9:c2:ea:15:ab:60:02:a8:ad:ea:c0:49:98:3b:
93:40:b0:b9:04:e0:29:77:1b:14:78:37:fd:f5:3b:
0a:5f:da:2a:ab:19:cf:15:3d:f5:99:dc:f2:da:83:
9c:a8:a8:62:e5:b6:e5:d4:fa:14:82:34:d7:51:d9:
14:62:79:e3:12:d5:74:55:8c:91:3c:84:0c:c9:af:
1e:73:0c:e9:43:fd:95:98:8a:fd:77:35:20:da:f6:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:CD:BD:86:A1:A9:A5:96:0D:FC:D9:31:C9:29:2A:5A:03:5F:C1
X509v3 Authority Key Identifier:
keyid:C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/okLNvYahqaWWDfzZMckpKloDX8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.190.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e0:ec:c8:34:13:92:d4:61:c3:c1:8d:fb:b9:e3:ae:34:dc:
46:d6:6c:8c:13:82:78:cf:72:18:61:69:3a:a7:d6:d6:fb:77:
34:ef:ec:ec:30:71:15:37:32:7e:64:80:6c:86:d9:1d:08:c4:
2f:1c:8f:25:3d:4b:47:05:94:47:07:e4:49:23:85:cb:b4:f2:
d9:21:b7:3a:53:fb:8a:d0:64:f6:41:24:b3:25:39:85:e7:b0:
d6:81:de:c5:40:6e:37:a7:4d:d6:9e:b1:47:15:16:85:38:28:
7c:2f:7b:c5:16:35:31:9b:2e:42:32:ef:0a:b5:42:e1:f9:9c:
de:5a:69:bc:58:61:55:a1:5c:21:96:ab:1c:f7:f4:d1:0b:bc:
83:b7:4e:86:75:17:03:3f:ea:2a:dd:66:b9:d4:b1:a8:22:1c:
f0:2f:d4:07:0b:0c:db:2a:36:29:15:44:17:e4:33:ce:d5:0c:
00:ce:08:3b:dd:63:2d:43:ee:86:0c:6c:32:a0:f1:6d:49:b1:
8a:28:61:88:90:e0:6d:31:c0:83:ea:af:c3:92:0b:b6:b4:2e:
44:e6:d1:08:e1:33:16:c1:aa:e0:65:40:e1:61:cd:d8:8b:b4:
57:b4:f1:68:f6:1a:1a:a9:40:81:0f:0c:fb:14:dd:75:4e:17:
10:1c:78:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKug1dQTtZfrWwjwLTHoy+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2JiN2ZmMDY5ZTcwZGUwZGY1NmM0Yjc0ODE0NWFlYjJk
MDFhZDIwHhcNMjIwODE4MDExMzM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjQyY2RiZDg2YTFhOWE1OTYwZGZjZDkzMWM5MjkyYTVhMDM1ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjLvqKKb83Yn6EgB0o5Ox2zoq/SZ
ySB9DVE+Qj65NGeMnETqJpEhY7CngOQb9rYQC8a6cN+EU7D36PMLxtJcXuOtxopM
5Tr8hVuHKgH0sr73Cz0nX1j+P2bNkU+TDIkEHRtzW2pMqLdPlKa9/sXBf1qSVXRC
cng1Eysh6UN75d1wLv8QrdYtk3vQZLF/N87hWsfdkAciJ9aXFI+6fEOGfBW31SJw
ucLqFatgAqit6sBJmDuTQLC5BOApdxsUeDf99TsKX9oqqxnPFT31mdzy2oOcqKhi
5bbl1PoUgjTXUdkUYnnjEtV0VYyRPIQMya8ecwzpQ/2VmIr9dzUg2vZchwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJCzb2Goamllg382THJKSpaA1/BMB8GA1UdIwQY
MBaAFMTLt/8GnnDeDfVsS3SBRa6y0BrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE11M193YWVjTjROOVd4TGRJRkZyckxRR3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xNmU1MWYtNTM4OC00ZDVjLWFhZjEt
MTIwMGYyMWJhMDc1LzEvb2tMTnZZYWhxYVdXRGZ6Wk1ja3BLbG9EWDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xNmU1MWYtNTM4OC00ZDVjLWFhZjEtMTIwMGYyMWJhMDc1
LzEveE11M193YWVjTjROOVd4TGRJRkZyckxRR3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkv++MA0G
CSqGSIb3DQEBCwUAA4IBAQAB4OzINBOS1GHDwY37ueOuNNxG1myME4J4z3IYYWk6
p9bW+3c07+zsMHEVNzJ+ZIBshtkdCMQvHI8lPUtHBZRHB+RJI4XLtPLZIbc6U/uK
0GT2QSSzJTmF57DWgd7FQG43p03WnrFHFRaFOCh8L3vFFjUxmy5CMu8KtULh+Zze
Wmm8WGFVoVwhlqsc9/TRC7yDt06GdRcDP+oq3Wa51LGoIhzwL9QHCwzbKjYpFUQX
5DPO1QwAzgg73WMtQ+6GDGwyoPFtSbGKKGGIkOBtMcCD6q/Dkgu2tC5E5tEI4TMW
wargZUDhYc3Yi7RXtPFo9hoaqUCBDwz7FN11ThcQHHh7
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:28 2025 by rpki-client