Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/1-B--I_XQqtr27fuJwdVYJg4loG4.roa
File: 1-B--I_XQqtr27fuJwdVYJg4loG4.roa (raw, json)
Hash identifier: sCyi3ly15wOYnxqvucr6KTVWivIryjWT19B5CrfRq+4=
Subject key identifier: F8:1F:BE:23:F5:D0:AA:DA:F6:ED:FB:89:C1:D5:58:26:0E:25:A0:6E
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 7B1E1E
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/1-B--I_XQqtr27fuJwdVYJg4loG4.roa
Signing time: Sat 01 Jan 2022 03:52:37 +0000
ROA not before: Sat 01 Jan 2022 03:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8068638 (0x7b1e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Jan 1 03:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81fbe23f5d0aadaf6edfb89c1d558260e25a06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:42:bd:f6:af:51:c0:cd:6b:af:3b:27:78:
38:e7:9d:d6:7e:bf:43:da:5f:5a:2f:b2:f1:d6:3a:
0a:c3:a0:40:78:eb:32:67:d9:c8:17:ac:22:ae:c7:
3f:21:6f:f3:b5:e7:b4:ef:f5:90:86:a5:ae:1b:62:
14:ba:4b:2c:61:a0:02:75:21:77:ba:db:6a:00:49:
8a:27:29:52:49:7c:3e:1d:95:94:79:24:45:8d:b2:
bb:e7:fd:12:7e:95:d3:22:d3:9f:94:5f:13:b5:33:
4a:af:f1:8e:f5:5f:9c:c0:2c:c9:39:a0:8a:18:72:
32:5f:f1:f3:9e:b5:b8:bd:f5:ba:81:9a:99:56:cd:
43:03:35:ab:56:d5:b1:9a:bb:dc:39:17:3c:3e:cb:
d0:67:f4:38:2e:a4:6e:7b:89:4d:50:ea:86:d5:f2:
d8:d8:84:48:b6:30:2a:ab:7b:8b:29:69:0b:01:54:
33:f9:a2:48:9b:6a:69:0c:a1:d3:54:86:09:1a:61:
ad:b0:23:fc:34:c2:9c:9c:b7:59:4e:9e:db:56:67:
84:9c:ff:30:80:be:1a:1d:56:73:96:9e:85:45:29:
73:37:23:95:9e:40:3b:f0:49:02:8d:b9:34:1a:21:
c5:e2:54:1c:46:e6:9c:ec:0f:b6:3e:26:b9:61:a7:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:BE:23:F5:D0:AA:DA:F6:ED:FB:89:C1:D5:58:26:0E:25:A0:6E
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/1-B--I_XQqtr27fuJwdVYJg4loG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:38:6f:d4:70:ff:9a:42:cd:5c:90:9f:53:e2:12:b1:a7:da:
2c:57:c1:f2:1c:06:cb:df:e1:2c:36:77:e4:bc:fe:41:c5:61:
ca:0c:cb:90:07:36:d0:b2:27:63:a7:f9:97:d5:a4:8b:31:3c:
26:f2:b6:2f:34:f6:1f:f6:e8:f5:8e:3b:58:54:4f:20:41:09:
f2:26:9e:6c:b9:45:3e:cf:65:2e:08:35:a8:51:7b:fb:c0:66:
5a:78:fd:8f:8f:2b:c6:15:bb:1b:6e:53:56:66:86:64:2c:f4:
61:51:69:ee:c5:0e:e8:4b:76:8e:30:36:db:ed:ff:0a:d0:43:
37:bb:53:0a:29:c2:f6:39:3d:22:ca:b9:77:77:34:51:81:72:
40:de:7b:e3:49:c7:26:38:7d:a7:27:4f:4f:42:c3:da:d0:e2:
f8:68:7b:c9:32:ca:73:40:f5:87:94:c7:87:eb:d7:cc:f0:a9:
0d:b7:94:5c:08:32:3e:5a:18:ee:8f:af:ad:b8:05:5c:18:f9:
e6:a7:0b:ff:7e:71:8c:45:16:34:fe:44:26:e3:ac:28:4c:02:
84:18:0d:39:ec:c1:cb:85:98:6b:2c:40:54:cb:9e:d4:25:3b:
5d:9e:25:7b:8f:fd:61:c8:d2:90:7d:1f:01:ad:bf:45:eb:a8:
29:03:be:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDex4eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
MmQyMDVhZjNiMDFiZjg0ZTAxYzAyMmQxZWU2YTYyNTMzZTE3YmEwHhcNMjIwMTAx
MDM1MjM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODFmYmUyM2Y1ZDBh
YWRhZjZlZGZiODljMWQ1NTgyNjBlMjVhMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArBhCvfavUcDNa687J3g4553Wfr9D2l9aL7Lx1joKw6BAeOsy
Z9nIF6wirsc/IW/ztee07/WQhqWuG2IUukssYaACdSF3uttqAEmKJylSSXw+HZWU
eSRFjbK75/0SfpXTItOflF8TtTNKr/GO9V+cwCzJOaCKGHIyX/HznrW4vfW6gZqZ
Vs1DAzWrVtWxmrvcORc8PsvQZ/Q4LqRue4lNUOqG1fLY2IRItjAqq3uLKWkLAVQz
+aJIm2ppDKHTVIYJGmGtsCP8NMKcnLdZTp7bVmeEnP8wgL4aHVZzlp6FRSlzNyOV
nkA78EkCjbk0GiHF4lQcRuac7A+2Pia5YaeZmwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFPgfviP10Kra9u37icHVWCYOJaBuMB8GA1UdIwQYMBaAFFktIFrzsBv4TgHA
ItHuamJTPhe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
V1MwZ1d2T3dHX2hPQWNBaTBlNXFZbE0tRjdvLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMy9lNWFhYWMtY2M4ZC00N2M4LTgwNzItMjc3YTg2NjhkMGNiLzEv
MS1CLS1JX1hRcXRyMjdmdUp3ZFZZSmc0bG9HNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
ZTVhYWFjLWNjOGQtNDdjOC04MDcyLTI3N2E4NjY4ZDBjYi8xL1dTMGdXdk93R19o
T0FjQWkwZTVxWWxNLUY3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITBDANBgkqhkiG9w0BAQsFAAOC
AQEANjhv1HD/mkLNXJCfU+ISsafaLFfB8hwGy9/hLDZ35Lz+QcVhygzLkAc20LIn
Y6f5l9WkizE8JvK2LzT2H/bo9Y47WFRPIEEJ8iaebLlFPs9lLgg1qFF7+8BmWnj9
j48rxhW7G25TVmaGZCz0YVFp7sUO6Et2jjA22+3/CtBDN7tTCinC9jk9Isq5d3c0
UYFyQN5740nHJjh9pydPT0LD2tDi+Gh7yTLKc0D1h5THh+vXzPCpDbeUXAgyPloY
7o+vrbgFXBj55qcL/35xjEUWNP5EJuOsKEwChBgNOezBy4WYayxAVMue1CU7XZ4l
e4/9YcjSkH0fAa2/ReuoKQO+ew==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:58:11 2025 by rpki-client