Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/ATwPdwuDjEEJfcQJFv3iMdjhVPw.roa
File: ATwPdwuDjEEJfcQJFv3iMdjhVPw.roa (raw, json)
Hash identifier: PQ5cAcrvUAmJsxIzjUgazG0kM4nURGQ0GXkAluzADns=
Subject key identifier: 01:3C:0F:77:0B:83:8C:41:09:7D:C4:09:16:FD:E2:31:D8:E1:54:FC
Certificate issuer: /CN=39c8805853685c995f3e75e77f7fbb37341de15f
Certificate serial: 6A0BE9
Authority key identifier: 39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/ATwPdwuDjEEJfcQJFv3iMdjhVPw.roa
Signing time: Sat 01 Jan 2022 03:52:13 +0000
ROA not before: Sat 01 Jan 2022 03:52:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 146.19.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6949865 (0x6a0be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c8805853685c995f3e75e77f7fbb37341de15f
Validity
Not Before: Jan 1 03:52:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=013c0f770b838c41097dc40916fde231d8e154fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:93:13:9b:65:4c:10:17:d8:eb:6c:15:2b:
b8:0e:fe:05:89:1e:fd:a9:78:b0:8d:45:41:b8:0a:
ec:0d:9b:b7:07:b6:25:7e:ca:02:e8:43:6d:99:9f:
a0:c2:0a:6b:ec:71:5a:de:ca:77:b2:1f:fb:5b:74:
9f:92:4b:ba:ba:59:9c:1c:3b:e8:3d:4f:49:45:19:
3e:fd:e0:63:db:26:5c:6b:3a:33:36:f6:83:af:c8:
f1:48:77:39:43:f4:03:47:6e:7e:2f:e5:79:be:98:
43:6c:6d:74:dd:8f:55:7f:73:69:21:e0:51:e2:68:
27:72:f3:d7:10:db:f0:08:29:42:16:68:83:97:32:
1b:dc:0c:bd:23:22:a4:c9:23:da:7e:67:58:4b:15:
f5:e1:13:07:5e:67:f5:db:3a:45:66:74:80:de:11:
9a:56:0e:ed:f6:fd:85:f4:b0:82:6d:d6:59:1e:78:
2a:af:82:22:92:c0:1a:2b:90:de:f8:3f:b7:c0:d7:
8e:03:f1:22:b9:cc:d2:cb:7f:77:80:9b:b7:4f:95:
b0:16:1d:97:43:18:fb:cb:28:86:bb:08:b6:32:aa:
03:4f:e8:54:2e:33:01:5c:24:6b:21:8c:f0:c9:37:
bb:8d:20:17:c3:48:51:01:63:88:a1:4c:bc:42:55:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:0F:77:0B:83:8C:41:09:7D:C4:09:16:FD:E2:31:D8:E1:54:FC
X509v3 Authority Key Identifier:
keyid:39:C8:80:58:53:68:5C:99:5F:3E:75:E7:7F:7F:BB:37:34:1D:E1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OciAWFNoXJlfPnXnf3-7NzQd4V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/ATwPdwuDjEEJfcQJFv3iMdjhVPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/953b87-faa1-49a5-ac1f-ba5d5bcc9ae1/1/OciAWFNoXJlfPnXnf3-7NzQd4V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.98.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:2c:83:6e:50:e9:5e:ac:42:c2:09:05:05:d8:3c:73:04:b2:
44:c5:a9:4e:21:e1:bf:80:67:74:a5:ae:f6:cf:e6:8b:47:18:
ea:d1:1f:f0:48:f6:03:ee:da:2d:0d:ce:48:81:1e:40:a0:6b:
3e:fc:13:ed:c3:61:16:ea:98:e7:8a:3c:78:0c:f2:e0:a1:0c:
26:4f:fd:f6:4f:8f:9f:30:3e:01:8f:97:b0:5a:b8:c5:1b:53:
19:51:e6:13:68:70:10:f5:71:d8:4c:e7:90:3f:58:16:e4:51:
d9:bd:78:66:5f:0e:4d:23:09:ce:54:ef:04:33:32:5d:7c:63:
85:b0:33:ce:f3:a0:9a:ce:06:8d:1d:a3:89:2c:1f:4f:cf:00:
a2:d6:b7:69:16:da:01:27:11:ee:2b:23:9d:c9:a8:6a:c2:d4:
9d:e5:40:cc:d9:31:6c:a2:44:54:3c:a6:0d:7d:aa:5b:b2:7d:
1a:b2:48:30:de:da:d1:61:8f:12:aa:0f:44:1a:6e:33:65:2f:
88:f4:c8:80:af:ff:c1:d6:2f:16:33:9e:10:b0:0f:11:fc:69:
bf:8b:c2:59:0e:1d:de:5b:e3:33:f2:c5:dd:e5:b9:29:0c:57:
af:2d:1f:2a:39:d5:d4:0d:25:e3:21:f5:47:2b:c9:e0:3a:6d:
d0:f5:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:54 2025 by rpki-client