Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/AkCQFVukk7mB8B8bv0oHfYkofr8.roa
File: AkCQFVukk7mB8B8bv0oHfYkofr8.roa (raw, json)
Hash identifier: CQ92vt1t54qBgBbM7+0qlQD8Qv/iE3CSuy/i+5H5y/Y=
Subject key identifier: 02:40:90:15:5B:A4:93:B9:81:F0:1F:1B:BF:4A:07:7D:89:28:7E:BF
Certificate issuer: /CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Certificate serial: 018805C97712BC54C8D9DDD564900C0FC212
Authority key identifier: EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/AkCQFVukk7mB8B8bv0oHfYkofr8.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:77:12:bc:54:c8:d9:dd:d5:64:90:0c:0f:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024090155ba493b981f01f1bbf4a077d89287ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:43:cf:3e:a8:17:07:29:93:a7:68:d7:99:
a5:b4:45:97:1f:bc:2e:49:f4:0e:2e:d7:63:33:3b:
f9:22:db:f8:d2:79:74:21:06:4b:d1:e9:f1:6f:40:
c6:5a:13:68:90:9a:14:08:f9:6c:26:e0:2e:ee:04:
1a:7d:64:6c:c6:4f:7a:f4:c1:ff:fa:f6:59:35:1d:
fa:56:12:a8:3d:31:e6:21:ba:6e:de:63:61:a4:71:
b9:af:47:c8:98:ae:7b:31:25:90:cf:83:4f:86:a0:
b5:4f:1a:99:09:31:77:a7:58:da:72:c6:e4:a4:49:
74:23:92:2e:70:65:8f:af:ab:43:f2:84:e4:34:d0:
ef:bf:0c:ea:60:05:5a:cb:3b:bb:e8:b7:8c:23:db:
fc:08:a3:e4:dc:d1:ed:53:e0:12:0a:8e:b9:a3:d2:
9b:cf:d3:7f:d2:6c:6b:e7:58:90:9e:cd:27:14:fe:
88:94:8d:ac:f9:6f:37:b8:b0:f7:25:88:e5:e1:3c:
eb:84:c7:0a:22:09:3e:b8:8c:e0:4f:f4:11:ac:c4:
01:ee:fc:86:72:dd:3a:34:88:49:96:eb:63:99:3c:
56:44:05:e7:70:4a:46:13:93:8a:fe:c1:8d:84:2c:
21:18:95:01:36:29:dc:17:80:5a:eb:54:81:6d:64:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:90:15:5B:A4:93:B9:81:F0:1F:1B:BF:4A:07:7D:89:28:7E:BF
X509v3 Authority Key Identifier:
keyid:EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/AkCQFVukk7mB8B8bv0oHfYkofr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:13:fc:e2:93:87:c3:30:da:a2:5b:e8:29:4d:3f:e1:87:
d0:ca:20:a0:8a:f1:77:13:fc:d0:ad:3e:c9:d8:65:92:2e:51:
fa:b1:76:32:c1:6e:69:89:4d:81:71:3b:6a:11:ba:8c:f0:09:
9b:89:c3:b0:cd:b0:57:c2:0c:c6:58:1e:e2:c7:7e:77:4f:9c:
71:a3:41:37:54:bb:38:84:93:03:61:79:21:d3:ff:62:1f:9a:
85:6a:2f:bc:a8:0c:f6:ba:f3:4b:54:75:d6:66:5f:73:0b:57:
2b:f4:63:fe:ad:71:d3:69:98:68:5e:67:25:4f:3e:00:b5:18:
12:c6:18:f5:20:d0:b2:a0:48:17:58:fc:15:c4:30:27:57:6d:
66:6b:a1:96:cb:98:8f:5e:be:a0:9a:43:f4:3d:30:2d:38:db:
8d:11:1a:40:f0:0b:ae:b0:e6:b9:7e:3d:b2:b1:30:0e:fc:0e:
db:72:4c:31:30:b3:ac:80:ce:a1:e4:02:c8:de:87:a8:cb:98:
0a:48:cf:ba:8e:f8:f9:01:2f:7c:57:19:35:aa:ae:b1:2e:be:
58:83:69:bc:96:d0:88:ea:0d:be:fe:68:23:92:fa:02:7d:b1:
95:6e:92:09:f5:e2:6c:d0:b0:64:f5:b3:e1:2a:8f:43:4a:97:
5c:30:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:35:58 2025 by rpki-client