Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa
File: 3wk539RunyK1VicvWrYl-BCG9_s.roa (raw, json)
Hash identifier: tLfb2g4R6fLJUP1bPejJ+OF5H7SFpss7mlKg+UGrp0Y=
Subject key identifier: DF:09:39:DF:D4:6E:9F:22:B5:56:27:2F:5A:B6:25:F8:10:86:F7:FB
Certificate issuer: /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial: 01099E75
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa
Signing time: Mon 07 Mar 2022 17:31:18 +0000
ROA not before: Mon 07 Mar 2022 17:31:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17407605 (0x1099e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
Validity
Not Before: Mar 7 17:31:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df0939dfd46e9f22b556272f5ab625f81086f7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:ff:85:60:57:36:2c:ab:cf:a5:b2:50:8d:
a2:a0:73:78:57:86:bd:d8:b3:01:1f:61:83:78:e4:
80:f2:61:2d:31:d3:2b:a6:48:91:96:73:fe:35:be:
da:7a:01:e8:ae:4c:d7:5d:26:ea:9c:32:ae:64:1c:
7f:53:31:78:e8:36:92:ad:6f:f0:9c:0c:cd:8b:c5:
d2:0e:42:a8:e1:09:4b:d1:8b:07:ba:8f:f9:6a:03:
e9:29:b4:f4:72:61:74:fa:5d:81:65:82:c0:f1:82:
ee:04:07:75:81:32:85:60:41:56:4d:93:d2:b7:7b:
a0:ed:af:6b:f4:96:17:1e:03:67:ef:8b:96:0e:a3:
59:14:76:1c:16:40:45:8e:f3:68:89:60:2f:c5:0a:
93:fa:5a:9d:64:45:f0:22:34:c9:90:4b:f1:bb:cd:
ef:b7:61:6a:77:8b:8d:70:2b:8b:86:29:a9:3f:a0:
03:33:8a:7b:ab:13:39:52:f9:55:4b:f2:7b:fe:87:
e3:c5:f9:f8:a2:bf:45:f8:49:2c:ff:2b:1c:51:72:
5b:12:d0:28:47:29:44:bb:c1:4a:72:d2:d8:c1:e4:
0c:9c:fb:21:23:2d:91:95:4c:4f:39:7e:9d:c2:7f:
d5:21:89:ec:20:64:6b:2a:bd:bc:5c:9e:a3:b4:d7:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:09:39:DF:D4:6E:9F:22:B5:56:27:2F:5A:B6:25:F8:10:86:F7:FB
X509v3 Authority Key Identifier:
keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/3wk539RunyK1VicvWrYl-BCG9_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2b:bb:f6:0f:fb:cb:58:e5:9d:f7:b5:3c:0c:52:34:f5:40:
41:b8:0a:1f:16:4e:47:cb:42:05:d1:c6:d7:f9:ca:03:81:10:
5a:9d:f5:5b:3d:51:75:d9:28:f7:f5:e4:b3:41:22:00:03:59:
08:17:4b:b9:01:37:f5:fb:d6:61:a7:78:04:ef:cd:f1:4b:cc:
60:a4:92:d2:ed:54:63:60:d1:f4:f0:b9:4e:43:4d:fc:08:e7:
9b:b8:56:98:b8:ae:38:d7:39:c6:c8:6d:ac:65:71:13:61:af:
e0:93:e3:be:25:a5:bb:5d:b6:6e:e0:ce:43:08:c8:3a:52:a6:
00:3d:7b:8a:67:b4:20:c2:b2:ce:58:10:9e:b9:f3:a0:a5:89:
dd:78:0e:06:6d:1e:37:61:a3:19:a9:6e:40:ce:31:a4:fd:15:
90:bc:16:65:c4:c9:5f:ca:f2:f6:57:03:07:85:b8:d7:40:bd:
1b:f0:22:57:9b:bf:54:7e:d6:fc:27:3b:29:d1:90:3c:3b:4a:
5b:bf:cd:4b:b0:4f:d3:d4:b3:1d:5a:f7:f7:fc:04:5c:08:fb:
94:16:a9:ef:87:1a:78:8a:b5:26:94:17:e9:96:90:d4:3f:ab:
f5:9e:a0:d9:da:e3:1b:62:8d:2c:5f:10:e6:0c:74:2b:60:85:
7f:82:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:50 2025 by rpki-client