Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/qoWeXc8obn4K0Uq-QMcs3jnkB-8.roa
File: qoWeXc8obn4K0Uq-QMcs3jnkB-8.roa (raw, json)
Hash identifier: mMEifoiMcpqNScVh17gDAH7s232BRWeOdxAKPNj94u8=
Subject key identifier: AA:85:9E:5D:CF:28:6E:7E:0A:D1:4A:BE:40:C7:2C:DE:39:E4:07:EF
Certificate issuer: /CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Certificate serial: 01148F07
Authority key identifier: EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/qoWeXc8obn4K0Uq-QMcs3jnkB-8.roa
Signing time: Mon 07 Mar 2022 17:38:51 +0000
ROA not before: Mon 07 Mar 2022 17:38:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18124551 (0x1148f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef80c90afe9bf931b3ba57945a96513fde0831bd
Validity
Not Before: Mar 7 17:38:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa859e5dcf286e7e0ad14abe40c72cde39e407ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:a4:b1:e4:a0:9b:b2:6b:b2:a3:a5:51:8e:
5d:b0:b8:2c:c4:f0:2e:db:43:90:81:6b:42:ca:3d:
92:71:dc:d6:9e:0e:8a:ec:40:67:af:7c:ba:f9:bf:
a5:2c:2a:db:a4:0f:5b:89:08:a7:93:43:f8:83:6f:
8d:24:c9:b8:89:16:fb:c2:f2:dc:0f:e6:d4:e9:71:
71:08:77:67:fe:6d:41:c9:99:4c:70:bc:f9:43:fd:
20:24:ca:2f:46:5a:44:c6:fb:08:91:d4:9b:2f:d3:
53:26:43:3c:ed:38:f0:ec:e0:31:cb:29:3f:d7:bc:
9f:63:81:d8:59:e8:c3:b2:24:98:c2:80:8d:77:54:
c9:06:7b:c9:49:8e:46:c3:73:f0:5f:42:52:2e:c1:
ff:3f:51:37:a2:b5:b5:75:d7:0a:27:22:bb:4b:58:
bb:f9:58:17:c6:19:2e:e7:2d:2a:84:a0:02:27:f3:
4e:f6:94:32:a6:7a:36:ba:8e:44:72:ac:0c:05:79:
25:bb:61:e7:b6:13:52:df:2c:90:7b:c5:1a:eb:3f:
f7:5e:2f:23:f5:33:2e:e2:3a:f2:f4:f3:90:b2:cb:
84:85:9c:3b:d7:be:bb:11:66:29:d8:7e:00:a2:90:
21:a6:90:c9:a9:1a:92:77:dc:43:5e:bb:2b:fc:cd:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:9E:5D:CF:28:6E:7E:0A:D1:4A:BE:40:C7:2C:DE:39:E4:07:EF
X509v3 Authority Key Identifier:
keyid:EF:80:C9:0A:FE:9B:F9:31:B3:BA:57:94:5A:96:51:3F:DE:08:31:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74DJCv6b-TGzuleUWpZRP94IMb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/qoWeXc8obn4K0Uq-QMcs3jnkB-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aee1e3-5240-4ed8-aaf2-7b3ee6873b4c/1/74DJCv6b-TGzuleUWpZRP94IMb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5a:ff:2d:da:b7:6a:23:9d:05:21:8f:95:a3:89:e6:9b:c7:
08:73:e9:28:95:a7:31:87:08:4f:61:d8:6f:46:ea:8e:0a:27:
b5:8e:c0:59:a4:1f:ba:b0:bb:28:a9:91:9f:29:13:c3:35:cb:
21:da:8c:da:00:46:31:c5:3d:45:bf:28:99:6f:c8:93:ef:b6:
2d:7e:32:af:16:23:65:a7:1e:52:dd:d8:3c:62:97:bf:23:e2:
b7:9e:d2:d5:18:df:08:06:dc:dd:55:4c:74:61:49:e2:76:82:
be:93:be:e9:7e:d6:e7:4f:50:31:da:e6:1f:c6:78:37:96:f8:
55:5b:d4:57:b9:c7:0e:58:46:12:c1:6f:89:be:70:5d:85:e2:
49:c0:17:47:23:40:31:83:b2:fd:18:98:d9:02:2c:b5:df:33:
e6:e0:b5:1b:f9:5a:26:5a:d8:36:87:09:87:83:17:14:5c:5b:
bf:da:e8:af:59:6f:29:1f:f5:0f:42:db:52:f4:e1:ea:79:11:
84:6a:36:47:a3:a6:f2:f6:ec:84:09:b4:c2:09:86:5f:75:21:
ae:9a:16:55:8f:48:fb:ce:09:26:96:1f:20:f0:34:8d:5c:e8:
cc:2b:16:1a:e8:de:3d:5a:60:b0:50:a0:c0:62:34:7e:9b:41:
37:d6:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:30:16 2025 by rpki-client