Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/g4Njw_kebDM7AQgSgkKRrr1otRU.roa
File: g4Njw_kebDM7AQgSgkKRrr1otRU.roa (raw, json)
Hash identifier: feFGeK52R7bk1T5UBmdnEenKGBNDrM/5vQK9TDuutiA=
Subject key identifier: 83:83:63:C3:F9:1E:6C:33:3B:01:08:12:82:42:91:AE:BD:68:B5:15
Certificate issuer: /CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Certificate serial: 0187068D43C13170C38106318B6927B552A1
Authority key identifier: 59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/g4Njw_kebDM7AQgSgkKRrr1otRU.roa
Signing time: Tue 21 Mar 2023 23:42:13 +0000
ROA not before: Tue 21 Mar 2023 23:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 146.19.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:8d:43:c1:31:70:c3:81:06:31:8b:69:27:b5:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592d205af3b01bf84e01c022d1ee6a62533e17ba
Validity
Not Before: Mar 21 23:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=838363c3f91e6c333b010812824291aebd68b515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:b0:78:f8:e2:c6:1e:92:61:5d:bf:84:2e:
c0:62:15:39:b8:0e:a8:b2:3b:04:e9:b3:32:73:b6:
9f:11:12:cc:a7:31:29:9d:a1:32:0d:8e:d7:a9:2a:
28:53:28:03:16:e4:be:58:79:84:02:e9:74:11:52:
02:c6:27:f9:95:8d:eb:7e:52:f9:0e:e3:07:25:e7:
f2:00:1a:2a:e0:39:20:37:9a:05:b1:f1:67:3d:e3:
a9:c2:c3:62:27:18:0b:df:02:4f:98:41:46:29:a5:
b8:9b:f5:f5:4e:10:67:e5:3b:f8:e7:59:26:27:5d:
23:a8:c6:3b:ae:45:13:e9:8f:fa:4e:02:69:74:a8:
d1:68:d2:2f:03:ce:73:a0:5c:ab:8d:8e:f9:61:77:
57:a6:b4:4a:5c:f9:8d:4c:f7:e6:4c:f2:01:04:48:
e8:e2:f2:13:69:0d:0c:6b:81:5d:33:fd:7c:f4:99:
0f:58:17:e2:d8:93:48:ec:b3:dc:3a:3d:eb:3a:18:
06:51:69:9a:f4:4e:b9:aa:d2:37:44:e2:6e:30:9c:
6b:13:1b:73:4d:a4:c1:ef:de:8b:ff:f4:43:b3:4a:
29:6c:87:56:2a:48:0a:8c:14:a2:e1:19:4d:65:40:
72:24:92:7a:06:77:47:d6:6c:b8:71:7b:a6:5a:57:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:63:C3:F9:1E:6C:33:3B:01:08:12:82:42:91:AE:BD:68:B5:15
X509v3 Authority Key Identifier:
keyid:59:2D:20:5A:F3:B0:1B:F8:4E:01:C0:22:D1:EE:6A:62:53:3E:17:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS0gWvOwG_hOAcAi0e5qYlM-F7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/g4Njw_kebDM7AQgSgkKRrr1otRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e5aaac-cc8d-47c8-8072-277a8668d0cb/1/WS0gWvOwG_hOAcAi0e5qYlM-F7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:96:5c:5b:3c:d0:89:45:2f:32:20:14:d9:b2:8b:80:6d:6f:
37:43:d9:93:cc:f1:09:ce:49:f3:48:30:21:4d:9f:c9:0e:50:
2c:5e:f8:81:f9:ea:4f:7c:7a:b9:57:74:6a:69:81:6c:b9:30:
ee:ae:1f:af:cd:0b:62:0d:c0:e4:c7:b2:cd:2d:6a:76:a2:bd:
60:04:96:e4:89:8f:c5:cf:f0:2d:1a:68:19:f3:28:e9:c3:81:
7a:8d:56:0b:05:a9:3e:41:5b:5d:0b:72:c4:2c:25:6b:f2:c2:
2d:f1:00:54:bd:43:d7:8b:12:15:72:67:e7:52:0b:e0:26:6f:
31:48:e3:4c:47:43:8f:51:b9:5f:a6:1f:cd:19:3f:42:45:21:
e5:37:2b:f8:83:56:16:71:d5:3b:0e:69:80:4f:13:6c:fc:95:
bc:37:b6:ce:98:e8:06:12:5d:87:a0:63:86:2b:28:c9:2b:8d:
89:83:f2:d8:d5:15:58:01:c5:09:5d:92:5d:16:10:23:ca:67:
72:2e:57:c2:04:e8:c9:84:49:72:2a:36:99:b8:60:d0:50:95:
e9:4a:0b:9b:1d:e8:1d:bc:0f:53:df:38:32:ce:8a:72:3c:89:
54:d4:f1:76:a8:b2:b2:41:1a:3d:a9:f0:53:13:29:4e:8d:78:
1a:7b:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:20 2025 by rpki-client