Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/P6ocuS6_IoIncD1CK1lIwZib44M.roa
File: P6ocuS6_IoIncD1CK1lIwZib44M.roa (raw, json)
Hash identifier: 0bkRKYoV2s66I9q0qMNModQbPyrjpZrXmYCEF+fI5ck=
Subject key identifier: 3F:AA:1C:B9:2E:BF:22:82:27:70:3D:42:2B:59:48:C1:98:9B:E3:83
Certificate issuer: /CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Certificate serial: 79047E
Authority key identifier: EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/P6ocuS6_IoIncD1CK1lIwZib44M.roa
Signing time: Sat 01 Jan 2022 01:53:13 +0000
ROA not before: Sat 01 Jan 2022 01:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7931006 (0x79047e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Validity
Not Before: Jan 1 01:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3faa1cb92ebf228227703d422b5948c1989be383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:09:a0:54:86:27:1c:28:da:09:9b:8b:20:
2f:a8:34:2a:22:81:f4:9b:ca:9c:2d:db:f6:ce:fa:
29:61:2e:c7:30:85:24:96:e5:6d:3b:aa:b9:6a:60:
d1:c0:77:ec:c6:14:73:d4:47:73:57:f7:b5:e7:f1:
b6:4b:a3:26:c9:40:45:ee:a8:00:9f:f9:15:a5:6c:
fe:47:d1:42:0c:7c:15:f6:d3:e5:19:63:54:1b:0b:
d2:21:0b:f0:6d:63:17:f0:e1:92:61:fb:ff:8b:47:
29:ad:a2:90:56:4b:cf:73:bf:d7:ba:d8:d6:e1:20:
ae:cc:b4:cc:39:8e:ed:0f:ea:76:2b:69:48:a6:d4:
e9:f9:20:44:f5:cf:51:45:cd:7a:46:6e:a3:d8:b1:
06:62:6f:d8:45:84:4d:4c:ad:b1:be:33:39:2f:92:
3a:6e:68:77:d0:66:43:b9:57:52:81:ce:99:fc:ac:
2a:f0:28:70:e9:81:84:78:74:3f:9f:98:bc:f7:51:
c1:c7:79:61:7a:bc:76:65:a2:25:8d:3f:f7:8b:13:
a8:55:32:d6:17:7c:f4:06:a1:c2:05:8e:a9:71:6d:
1d:05:a2:8d:72:fd:f9:d1:19:a8:32:1b:05:04:22:
d0:0d:5f:5b:8d:7c:11:51:29:07:7d:ed:18:20:73:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:1C:B9:2E:BF:22:82:27:70:3D:42:2B:59:48:C1:98:9B:E3:83
X509v3 Authority Key Identifier:
keyid:EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/P6ocuS6_IoIncD1CK1lIwZib44M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:03:d9:33:9c:c4:80:d5:fd:6c:1e:e9:0f:92:93:d0:2b:11:
90:5a:92:c9:84:c2:2a:18:af:cc:d9:33:43:2b:cc:f1:15:40:
78:ee:88:ec:33:8d:ff:a9:11:93:a7:38:db:d9:58:d3:60:99:
79:13:83:94:ca:e8:fa:20:33:7c:18:09:85:00:e6:73:a3:50:
1d:29:00:59:b6:63:1f:74:b6:64:b8:12:43:c9:cd:3b:ec:ce:
1b:65:bc:50:98:d3:bf:e0:79:56:55:8d:80:be:8e:b8:ef:55:
9d:6d:1e:a2:27:cd:dc:5f:43:08:a0:d6:99:76:5f:83:a4:e2:
63:07:b0:a0:35:b4:c0:9e:98:61:8a:f4:d3:f3:6c:b5:3d:ec:
1b:17:87:66:69:01:0a:33:73:c2:0a:d0:fd:7b:b1:aa:18:b5:
fe:04:4b:11:ed:44:fa:0f:b9:5a:6f:bf:af:89:72:e5:bb:df:
56:7a:9f:0f:d9:5e:70:7f:3f:79:d9:77:74:14:9e:22:a9:ed:
72:40:c3:b9:2e:37:44:04:9b:58:96:0f:86:76:6b:65:56:05:
82:ba:a5:70:a3:24:95:19:09:1f:ac:d4:36:1b:cf:e0:9f:ea:
cb:8c:d1:8c:d9:d0:83:0a:af:87:e5:99:1e:04:ec:ad:1b:1f:
9f:c1:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:33:33 2025 by rpki-client