Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/YhwvM2RYnrJv3P8sfncE1HGAK94.roa
File: YhwvM2RYnrJv3P8sfncE1HGAK94.roa (raw, json)
Hash identifier: zvmrHYNnLaGti5b2JolC6JjMWV8W/UQ+keWjnFXtQSE=
Subject key identifier: 62:1C:2F:33:64:58:9E:B2:6F:DC:FF:2C:7E:77:04:D4:71:80:2B:DE
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 78DC30
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/YhwvM2RYnrJv3P8sfncE1HGAK94.roa
Signing time: Sat 01 Jan 2022 03:52:36 +0000
ROA not before: Sat 01 Jan 2022 03:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7920688 (0x78dc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Jan 1 03:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=621c2f3364589eb26fdcff2c7e7704d471802bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:1e:91:5f:df:1f:ab:06:a2:49:0d:07:10:
f6:e7:f3:71:6b:ae:f5:83:17:7a:a9:a0:47:39:a1:
6c:83:3e:1f:f3:69:67:4e:74:2f:35:3e:d5:24:25:
70:7e:f4:54:2d:16:bb:71:09:37:a3:79:ae:90:4d:
82:00:c8:61:4b:09:2e:ea:23:76:dd:d3:fb:5a:c7:
f4:df:67:dd:95:ec:f5:6c:58:29:ce:7d:e5:0b:5a:
51:75:ab:33:a0:b5:ab:5c:49:df:9a:e6:9f:63:0a:
68:b8:12:4e:8f:95:de:0f:67:2c:01:9e:02:08:37:
97:9a:21:ca:eb:2f:e6:44:50:2f:61:c3:c7:07:b7:
dd:32:54:f1:92:86:34:f1:ae:56:2f:a1:9f:9d:48:
0f:68:04:97:55:73:78:75:9e:f8:01:4a:4e:dc:d2:
53:62:c5:26:48:7e:ab:c1:4d:89:de:06:e4:43:b7:
c7:a9:5a:c8:07:12:a1:86:15:2f:db:30:5f:a2:ce:
ce:c9:fc:e2:32:e3:1a:5e:08:f3:c0:e7:7c:03:fb:
a7:72:60:0f:77:cb:7b:28:1d:63:68:8a:46:81:0c:
4c:d5:9d:7d:10:b4:fb:e9:21:64:f7:91:9e:46:c5:
57:6e:9e:16:50:37:ff:a5:e3:00:8d:41:41:bc:10:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:2F:33:64:58:9E:B2:6F:DC:FF:2C:7E:77:04:D4:71:80:2B:DE
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/YhwvM2RYnrJv3P8sfncE1HGAK94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e8:ee:7a:c9:4a:b1:c2:84:32:40:49:28:20:9b:16:1b:de:
70:1e:d8:90:a1:27:01:6e:24:4b:9e:73:60:f9:96:b2:d8:e9:
93:08:27:58:22:08:0f:29:1c:57:12:6d:ec:c4:f5:2c:ec:a7:
0c:75:c4:46:ac:c6:56:c2:32:cf:a5:fb:48:f3:83:1f:ab:f2:
d9:09:ae:f6:40:f1:dc:d7:81:f0:c4:b4:85:21:c1:d3:b7:a3:
d5:40:33:81:17:c1:8c:b3:3f:85:63:bc:df:78:1f:39:84:4f:
cb:bb:7f:81:fc:69:56:55:65:26:e3:c3:34:90:83:dd:04:fe:
0a:34:03:45:b3:6c:fc:b8:20:11:87:29:e7:94:ce:cb:4a:f0:
48:eb:b8:94:87:49:74:f2:6b:67:d2:06:14:3a:57:42:e4:a2:
65:30:56:b0:0e:17:08:13:e9:f5:4f:a3:64:5d:91:e6:7e:16:
9c:28:fc:14:f8:f6:58:0f:0a:66:a8:13:d9:df:93:af:08:4e:
ad:a3:d0:89:de:b9:c4:ac:38:f6:0d:6d:e8:20:b0:97:3c:60:
ea:27:51:06:a2:8f:5b:8a:b3:85:64:5f:1c:36:05:8e:a4:71:
54:71:3b:0f:44:e4:2b:ed:82:7e:93:77:8f:fd:e6:e5:95:e4:
8d:92:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:37:53 2025 by rpki-client