Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Hs7nBszn9iTJkR9Vy8UAKCnpwnU.roa
File: Hs7nBszn9iTJkR9Vy8UAKCnpwnU.roa (raw, json)
Hash identifier: xyyqgeriatn4r2TTtb+UR5zHA53POD6KD1ZW7hEocw8=
Subject key identifier: 1E:CE:E7:06:CC:E7:F6:24:C9:91:1F:55:CB:C5:00:28:29:E9:C2:75
Certificate issuer: /CN=5dddc965c3e90a82200f4afbb92991904d06422c
Certificate serial: 75B8C9
Authority key identifier: 5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Hs7nBszn9iTJkR9Vy8UAKCnpwnU.roa
Signing time: Sat 01 Jan 2022 03:54:46 +0000
ROA not before: Sat 01 Jan 2022 03:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7715017 (0x75b8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dddc965c3e90a82200f4afbb92991904d06422c
Validity
Not Before: Jan 1 03:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ecee706cce7f624c9911f55cbc5002829e9c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:9d:ac:09:fe:fb:88:d9:be:31:3d:66:f2:
a7:cb:37:2f:d4:3e:66:cf:24:1f:33:04:cc:23:6c:
2b:80:8a:9c:ab:91:1f:88:a2:7c:07:fb:77:83:64:
d6:3c:66:d0:92:44:f4:c2:0d:9e:1d:29:22:cc:e9:
eb:d8:d6:00:08:43:1a:d0:d0:64:87:9f:3e:d5:26:
3c:80:58:57:7f:60:c5:f3:4e:2b:bc:44:d1:3c:e7:
28:4b:9f:71:19:d6:78:83:54:5b:7d:2d:76:4a:73:
75:4b:db:75:b4:97:73:48:25:2b:e7:16:b7:e2:14:
f1:87:1c:3a:e7:77:1d:41:e2:ac:5b:12:5f:eb:58:
18:ec:1a:18:7e:54:29:a6:9c:29:2e:de:9b:bd:25:
34:79:e8:0b:be:dc:01:b4:82:2b:15:e6:12:d4:1d:
af:3c:33:28:bb:71:f7:c7:0c:96:a3:04:7d:19:04:
24:e6:54:08:6d:9b:dc:d3:79:19:72:52:5c:da:e1:
57:0c:1c:fe:de:c8:c6:2d:e5:e9:78:b0:58:aa:4e:
ea:49:41:0e:4e:1f:ab:67:ed:7b:b9:78:f9:9a:40:
c9:b8:47:f3:ba:71:22:2c:4c:cd:ac:bb:cb:46:0c:
41:8f:68:56:99:71:9d:89:e9:30:e3:b5:2f:fe:41:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:E7:06:CC:E7:F6:24:C9:91:1F:55:CB:C5:00:28:29:E9:C2:75
X509v3 Authority Key Identifier:
keyid:5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Hs7nBszn9iTJkR9Vy8UAKCnpwnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:cb:ef:6a:b0:92:cd:dc:81:0b:e0:1a:00:26:a7:8c:ee:95:
b4:3a:a5:d4:1f:b6:e3:9d:d3:72:d7:48:43:48:cd:af:40:8c:
df:74:3b:e0:91:74:39:65:d5:b1:e7:a7:4d:f1:b4:ea:b9:8a:
78:a0:f8:ce:3a:d8:f0:00:75:6a:a3:54:1d:d7:6d:87:05:a3:
60:86:a1:af:93:61:32:34:e8:fb:5a:c9:be:89:9a:41:cd:a7:
1b:da:bd:51:17:36:9b:cd:99:e6:17:e6:ed:a6:1b:1b:37:3e:
cc:31:cd:c3:f0:d8:06:43:66:6a:08:06:c5:9f:ac:87:6f:ce:
67:73:af:c1:e5:c7:42:37:46:36:7c:26:dd:a9:6a:44:87:f5:
b4:8a:a3:0b:1c:fc:19:6d:88:0b:89:8c:ac:dd:ac:b4:25:0c:
24:22:8f:04:03:2f:af:f0:35:bb:f1:7e:b3:c7:82:19:36:c0:
9e:53:d1:37:99:f6:68:eb:dd:ab:90:c1:8b:43:7f:f5:a9:42:
b2:0e:fb:6c:47:ba:f2:e7:5c:ce:c7:d5:51:ea:f0:27:af:47:
e4:f9:10:b7:47:aa:9d:f5:5c:d3:7a:15:3a:e0:f5:36:be:d8:
07:bc:31:80:56:cc:d1:f2:7f:2b:dc:01:31:10:df:47:26:03:
48:9a:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:25:15 2025 by rpki-client