Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/cFUSSL6oqJ5mWoJLQfK93aEtznc.roa
File: cFUSSL6oqJ5mWoJLQfK93aEtznc.roa (raw, json)
Hash identifier: 2AGzicfa74VfGgnkrHRFEoNWQPp/iWddLBVlNPsnv1Q=
Subject key identifier: 70:55:12:48:BE:A8:A8:9E:66:5A:82:4B:41:F2:BD:DD:A1:2D:CE:77
Certificate issuer: /CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Certificate serial: 018572FA6D4AFDDE4341F8F515BB7A3D8A3C
Authority key identifier: EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/cFUSSL6oqJ5mWoJLQfK93aEtznc.roa
Signing time: Mon 02 Jan 2023 14:54:52 +0000
ROA not before: Mon 02 Jan 2023 14:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:6d:4a:fd:de:43:41:f8:f5:15:bb:7a:3d:8a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Validity
Not Before: Jan 2 14:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70551248bea8a89e665a824b41f2bddda12dce77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:3f:e8:bc:2e:67:71:06:14:63:fe:58:6a:
51:a0:79:5d:59:ab:e3:1f:1e:0a:23:2a:e7:c3:e2:
12:15:2d:51:da:be:47:5e:a0:26:90:76:63:9e:87:
a7:29:6f:13:49:ac:bf:72:18:be:b0:13:f9:cd:a1:
37:89:12:ba:a8:d1:49:dd:c9:d0:26:a6:66:a7:f2:
d2:9e:c3:60:4f:41:5d:8b:22:0f:be:5a:79:23:2b:
0c:61:e2:3f:73:77:87:83:31:e7:9c:d9:24:53:ba:
bd:51:7b:98:23:bf:b7:d5:72:c3:27:de:b1:22:74:
e2:5b:c5:bc:77:23:ae:37:4c:ff:67:b6:d5:82:7f:
d2:13:da:1b:60:0c:aa:e3:c6:c6:58:9b:c9:da:da:
3a:5a:24:d6:09:b6:ca:64:ba:48:c2:00:73:95:f5:
aa:39:0b:4f:13:70:ed:5f:16:df:6a:b8:30:25:b5:
4b:ca:d9:27:54:ba:a6:6f:0d:eb:36:09:8e:74:e0:
66:13:6d:73:7d:bd:4f:7f:f5:64:0c:5f:73:be:7d:
86:05:11:c9:95:c4:99:87:47:9a:fa:2b:e2:77:71:
e1:74:25:60:42:76:71:77:a0:93:db:86:5d:d5:be:
8b:25:3b:86:e3:db:72:fa:b1:bd:55:e2:b4:21:6f:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:12:48:BE:A8:A8:9E:66:5A:82:4B:41:F2:BD:DD:A1:2D:CE:77
X509v3 Authority Key Identifier:
keyid:EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/cFUSSL6oqJ5mWoJLQfK93aEtznc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d5:d9:65:25:58:ba:57:d1:44:c2:14:dc:16:19:f5:a7:f5:
7b:21:9a:b1:c1:a0:72:db:51:3e:b5:0b:6c:cf:a3:18:fc:89:
b4:75:1e:c8:91:cd:41:67:6a:12:7b:2f:bb:eb:15:38:4e:82:
52:8a:0e:84:8f:ef:00:5b:78:3e:9b:f9:03:59:0a:f9:b9:1b:
5b:e0:37:f5:3f:7a:a1:da:62:6c:a9:8e:95:ae:dd:88:91:e6:
42:56:55:ff:40:e7:9f:bd:f5:b1:a1:63:ba:75:cc:ae:95:78:
c5:a4:5c:e4:01:2a:f9:43:04:20:13:36:ce:8f:2f:93:34:67:
3b:0a:e1:c1:6a:61:62:1d:20:d5:64:a2:7a:9d:13:2d:23:1d:
91:06:76:0c:eb:a8:5a:bb:1e:72:05:40:8a:b7:5e:10:3a:0b:
38:9e:dc:cc:bf:98:bb:ce:2e:0a:39:d6:4e:35:89:c8:1f:70:
3f:b8:41:29:06:a8:7f:b7:42:6e:1b:0a:e2:f6:cf:c3:11:8b:
26:a5:5c:e9:56:85:af:3e:bd:20:b1:66:90:dd:e9:d8:b5:d8:
ec:d4:d7:6b:5e:e0:43:fc:00:35:7f:c6:47:a0:c3:e0:61:37:
51:db:03:5a:7f:7e:f5:8c:1b:d6:89:92:a8:f8:f7:50:d6:1a:
ae:e8:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:34:56 2025 by rpki-client