Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/a0QXTdpulk9NIJOmQbC7Et8XqaQ.roa
File: a0QXTdpulk9NIJOmQbC7Et8XqaQ.roa (raw, json)
Hash identifier: 9RzobdDSExvd3e90MbZXSaVHVFG9x3sUTAY4EHiElco=
Subject key identifier: 6B:44:17:4D:DA:6E:96:4F:4D:20:93:A6:41:B0:BB:12:DF:17:A9:A4
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 7A2C12
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/a0QXTdpulk9NIJOmQbC7Et8XqaQ.roa
Signing time: Sat 01 Jan 2022 03:52:37 +0000
ROA not before: Sat 01 Jan 2022 03:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8006674 (0x7a2c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Jan 1 03:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b44174dda6e964f4d2093a641b0bb12df17a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:ea:fd:39:a2:6a:2a:1a:47:6b:09:65:b5:
7a:5f:84:9f:e9:cc:b6:fc:af:d3:31:30:7a:60:01:
79:48:08:3a:5d:73:fa:c8:be:a9:d5:ab:99:94:f8:
87:76:6f:0d:0d:00:74:21:97:c3:b3:5a:12:72:b7:
03:99:9c:74:64:c7:1d:e0:b3:f0:dc:df:08:99:8d:
75:19:98:28:0d:83:7e:44:d1:22:0b:f8:77:2b:53:
1c:55:b1:13:b3:bc:ba:52:6d:a3:60:48:79:4a:60:
8c:45:8d:e5:04:cb:59:4a:01:25:3c:75:d2:b5:24:
a6:e5:6a:47:c2:18:aa:09:b8:9e:f1:a0:95:b3:cf:
f0:38:b8:f5:96:d0:51:2b:d8:e0:1b:cf:de:f3:71:
02:29:fd:90:09:8d:bf:d7:e5:3d:82:5b:81:ac:36:
89:63:e6:7a:4c:78:b7:08:46:b6:43:84:fc:7e:8b:
23:32:af:57:3b:12:f0:74:b8:dc:29:4b:c0:9a:8f:
49:34:44:f8:b2:15:e5:c7:1e:57:01:03:7e:9e:1b:
8a:a0:aa:d3:ab:dd:65:90:cd:2d:97:b4:aa:64:6d:
66:d2:ba:3f:6a:29:99:48:fc:db:8f:a5:36:7b:27:
a3:c2:b8:26:98:14:42:e7:22:f9:51:78:b7:b8:2b:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:44:17:4D:DA:6E:96:4F:4D:20:93:A6:41:B0:BB:12:DF:17:A9:A4
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/a0QXTdpulk9NIJOmQbC7Et8XqaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1d:c1:11:99:5c:84:ca:da:f0:f4:67:22:9a:84:8f:df:d4:
a2:45:83:9a:19:00:a0:c0:70:18:9a:82:b0:50:39:84:0b:f7:
00:71:a5:0d:ca:cb:24:5f:81:e5:fb:35:cc:eb:f2:9f:9d:ca:
05:00:67:22:a3:02:f8:03:08:b8:5f:b7:d2:67:31:ca:a2:02:
b0:08:fa:1e:ae:3d:0e:1e:d5:14:a5:d1:dc:86:fa:52:c4:3b:
b3:20:26:cd:f5:d4:9a:bf:8a:29:89:63:64:ee:7c:17:0b:ae:
50:77:cf:b0:a2:44:10:9a:f9:de:95:70:b2:e0:2b:d2:95:72:
55:bd:6a:e4:96:fa:63:3b:ac:a8:f4:74:26:49:49:3a:f4:11:
25:a5:ae:52:bd:af:99:76:e8:2e:0f:74:80:69:4e:d9:a9:9f:
fd:23:eb:f0:58:b5:3e:0d:9c:73:ac:2d:18:70:60:57:85:93:
4d:85:16:0e:96:4b:75:fc:cb:73:99:2b:77:86:b4:d7:1c:b3:
52:26:1c:23:8e:f2:6a:25:cc:75:ea:47:b6:f4:ca:21:3c:7f:
d5:ea:3d:54:6c:49:6d:d2:d8:9c:6d:8d:db:5a:cb:5e:2f:e2:
e1:50:ac:53:88:6e:d8:a2:d9:82:9d:3c:2c:07:ad:79:ae:b5:
87:8f:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:37 2025 by rpki-client