Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/Wo_AorHNfFo0C6V4MHkxVSCEzBw.roa
File: Wo_AorHNfFo0C6V4MHkxVSCEzBw.roa (raw, json)
Hash identifier: yh9U9qjvDp5K147hMxEGSCnvZEyyddZBwhWP6JB8o/M=
Subject key identifier: 5A:8F:C0:A2:B1:CD:7C:5A:34:0B:A5:78:30:79:31:55:20:84:CC:1C
Certificate issuer: /CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Certificate serial: 0184E45D97FC717FC5983CB8CC4AE4A136E5
Authority key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/Wo_AorHNfFo0C6V4MHkxVSCEzBw.roa
Signing time: Mon 05 Dec 2022 22:17:29 +0000
ROA not before: Mon 05 Dec 2022 22:17:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:5d:97:fc:71:7f:c5:98:3c:b8:cc:4a:e4:a1:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Validity
Not Before: Dec 5 22:17:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8fc0a2b1cd7c5a340ba578307931552084cc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:46:d2:11:5f:a7:36:4f:30:cd:de:9e:40:
6e:cb:7b:d4:c0:4e:b2:f7:9d:1e:89:56:35:64:87:
98:36:61:b1:e5:aa:15:fc:a5:db:37:43:1e:e1:01:
e9:1c:7b:ed:a2:49:14:dd:07:9e:f1:ab:85:bb:66:
4f:7a:84:61:db:c2:63:a6:31:1d:a1:c3:ca:19:62:
c2:09:dc:55:aa:30:37:f3:f4:02:81:65:59:a1:18:
b9:75:ee:e7:5f:14:6c:33:68:41:a4:62:c1:6a:f6:
45:bf:44:ae:63:c1:b2:74:07:9f:b7:25:40:4b:2a:
4e:15:5c:ac:e5:3f:b0:b6:a9:ad:af:99:d2:ff:1f:
88:dc:6f:27:59:ee:9e:13:84:66:51:60:3c:42:76:
6e:10:13:44:49:64:7c:04:aa:4f:e8:01:4a:04:9d:
b1:67:99:56:78:67:f4:32:b1:3c:1f:aa:c7:e6:34:
dd:8e:d4:99:90:92:cf:65:2a:c3:8f:d4:4c:83:28:
0f:62:2d:82:e7:7c:f9:44:d2:57:03:49:dc:ee:1d:
bb:9d:13:ac:76:65:56:9f:b9:4f:9e:c4:5a:d6:2a:
db:e3:b3:fa:5d:c6:94:50:2a:3c:79:ce:93:84:4c:
b8:85:60:29:e9:fd:1d:0d:f1:e1:c9:10:7b:17:81:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:C0:A2:B1:CD:7C:5A:34:0B:A5:78:30:79:31:55:20:84:CC:1C
X509v3 Authority Key Identifier:
keyid:4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/Wo_AorHNfFo0C6V4MHkxVSCEzBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f7:30:3f:19:57:ac:f6:e9:50:58:65:24:ee:27:5d:26:62:
39:a0:19:46:c5:64:2f:3a:c5:99:ea:70:eb:dd:77:1e:30:91:
bb:05:9e:e1:a4:08:1d:a6:65:93:34:2e:2a:83:ba:9c:ee:b4:
22:02:17:5d:48:5a:fd:49:4a:3a:8e:66:3d:42:ca:01:63:d3:
c2:6f:18:2b:e9:dc:c1:b2:98:13:e5:06:36:0e:d1:c1:09:ec:
57:f1:1e:bc:a2:92:f1:d9:79:a8:4a:5b:bf:32:4e:68:bc:71:
13:b5:ab:5f:25:b4:af:d1:2f:03:0e:d1:ea:da:af:df:52:e8:
e5:3b:66:20:04:99:64:5c:ca:be:38:e1:76:dd:db:20:79:c3:
14:a2:6e:44:27:c7:c2:22:d6:6d:89:aa:b6:e8:3d:28:38:ce:
f7:90:34:66:f8:93:7d:fe:d8:76:81:d5:2a:f2:15:10:6d:c0:
06:af:84:83:1a:c0:ca:1a:00:87:63:ba:4d:62:f2:be:88:71:
e3:ae:62:db:80:7b:5e:5e:3c:a2:30:63:18:88:6f:06:cb:49:
57:be:30:69:bf:30:a9:68:15:b1:d5:c3:41:04:72:3e:63:5a:
f9:01:55:e4:25:4e:06:35:4f:42:aa:7b:9d:f0:4b:e9:7d:6c:
a3:33:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:17 2025 by rpki-client