Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/K9HL0yrdRpeussoTAoBM8p2MZ3Y.roa
File: K9HL0yrdRpeussoTAoBM8p2MZ3Y.roa (raw, json)
Hash identifier: h6AJuQpBTNXOtsexdX4JNDyw0wJprYDDFB4ihimPRIU=
Subject key identifier: 2B:D1:CB:D3:2A:DD:46:97:AE:B2:CA:13:02:80:4C:F2:9D:8C:67:76
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 018220896ADD6066C0316C61F36747892449
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/K9HL0yrdRpeussoTAoBM8p2MZ3Y.roa
Signing time: Thu 21 Jul 2022 11:34:12 +0000
ROA not before: Thu 21 Jul 2022 11:34:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:89:6a:dd:60:66:c0:31:6c:61:f3:67:47:89:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Jul 21 11:34:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bd1cbd32add4697aeb2ca1302804cf29d8c6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:b0:7e:4c:65:23:e3:c1:06:cf:9b:08:d7:
e1:0f:d0:0c:fe:0e:1c:af:c7:b8:8d:f9:28:38:99:
c0:9f:00:3e:6a:fe:27:ab:69:b0:1f:e2:93:eb:a6:
b0:69:b3:8c:64:51:bf:54:90:9b:5d:6e:3b:03:73:
ef:a2:ce:e6:4c:14:59:2e:97:06:38:be:f9:54:89:
41:d1:90:63:0d:d9:3d:ba:f4:54:a8:71:03:d6:13:
16:9d:8a:72:81:de:6e:bf:1d:f7:3d:10:f8:7f:d2:
e1:ba:48:f4:c3:55:33:d5:40:bb:d8:b6:92:fb:23:
da:78:a3:fa:2b:0d:82:c2:f6:e8:f2:08:29:39:e0:
7f:7c:63:38:fb:53:7a:df:18:d1:03:61:fb:d6:6d:
ee:96:87:63:a8:1c:35:aa:cb:16:27:28:20:69:3f:
f2:f3:79:5c:4e:c0:1d:82:fe:b6:3a:c4:9d:02:89:
58:cf:6d:6f:c6:19:37:51:27:54:9d:4e:d4:da:d4:
fc:1e:99:aa:83:f0:1b:16:4f:85:2a:e8:af:b5:db:
bf:ab:5f:66:52:72:e4:46:d4:65:60:27:78:6c:e7:
65:13:41:24:6b:fa:6d:56:8c:4b:bf:e3:ee:4b:eb:
d0:32:45:ae:16:99:df:25:a5:49:f9:a2:83:83:42:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D1:CB:D3:2A:DD:46:97:AE:B2:CA:13:02:80:4C:F2:9D:8C:67:76
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/K9HL0yrdRpeussoTAoBM8p2MZ3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:42:ae:86:21:f6:74:30:49:d9:f7:8e:1c:9f:25:2b:23:
2b:fd:7e:76:51:78:03:62:eb:85:30:b0:69:82:c5:9d:d0:39:
b7:e8:e1:f3:29:c7:9d:76:e9:2b:aa:17:68:3f:f2:0c:c6:c2:
80:05:87:31:a8:0b:e1:71:56:ef:d7:ca:0a:28:7d:bd:36:e7:
f1:f8:11:f6:76:d1:a2:aa:b6:02:bf:c4:b7:7b:d9:9e:0f:04:
c2:5e:18:9a:c7:3d:e4:ac:50:8a:26:2b:d9:e9:28:13:68:d4:
88:7f:45:58:b1:fd:44:47:3f:7e:57:a3:93:22:c3:88:fe:5d:
2c:c0:b1:ca:43:88:49:f0:37:90:17:f6:3f:5f:71:49:45:63:
8f:de:26:fc:61:67:4f:af:8c:40:6b:a6:47:c6:82:20:95:e9:
c7:4f:e3:6c:b5:48:5b:44:06:67:ca:44:52:eb:fe:17:79:14:
71:1a:92:38:52:23:1b:f1:4b:11:66:e3:08:8d:57:0d:40:42:
32:04:f3:30:9b:5f:00:92:b1:a5:b6:6c:91:b3:53:9f:6f:69:
74:dd:48:9f:c1:ab:e7:92:e8:bf:fd:6c:16:ef:5e:4c:6c:c0:
2f:b9:70:a4:91:6b:f2:ce:f4:c2:0e:b0:fd:90:3c:fe:79:e8:
ef:9c:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:35 2025 by rpki-client