Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/1-0MN1yVOiDMhMDgVrx6JB-6c7iQ.roa
File: 1-0MN1yVOiDMhMDgVrx6JB-6c7iQ.roa (raw, json)
Hash identifier: M8NN4n6nWCUxQmkfbUE+fQw/CjhqHEDixFPexpPgigE=
Subject key identifier: FB:43:0D:D7:25:4E:88:33:21:30:38:15:AF:1E:89:07:EE:9C:EE:24
Certificate issuer: /CN=9f50270fd310e11422e586f26317155d5cf66458
Certificate serial: 677D1F
Authority key identifier: 9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/1-0MN1yVOiDMhMDgVrx6JB-6c7iQ.roa
Signing time: Sat 01 Jan 2022 00:52:28 +0000
ROA not before: Sat 01 Jan 2022 00:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6782239 (0x677d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f50270fd310e11422e586f26317155d5cf66458
Validity
Not Before: Jan 1 00:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb430dd7254e883321303815af1e8907ee9cee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:a1:8b:15:8e:1d:2c:50:fe:71:c3:7e:99:
7b:09:40:ac:ec:50:1c:96:58:9b:e1:85:10:8d:de:
bf:8b:f3:0a:65:22:c1:07:29:55:d7:59:29:29:6c:
a9:9f:8d:c7:99:79:db:9e:45:49:c8:cc:7a:70:fa:
83:13:6e:63:d9:01:98:ae:6b:f1:e1:b9:55:a0:80:
7c:60:44:7c:41:af:92:83:e8:18:06:f5:79:b5:11:
9e:75:14:03:3b:16:dc:16:83:8b:27:52:a1:6a:08:
65:4e:f9:c9:ab:24:39:0c:11:8c:77:10:30:09:e5:
ca:18:5d:6a:e1:d8:5c:3a:12:bb:83:f3:e8:a9:13:
76:c4:a7:f1:9b:51:15:43:e5:ed:f7:52:3d:d7:57:
34:a1:77:ba:ed:52:79:2b:57:66:7c:31:e7:6f:ed:
d2:0e:af:ad:11:8b:58:db:77:25:fa:f9:6c:4a:a5:
98:e4:8e:a1:db:97:12:95:e6:3a:ff:74:03:14:35:
01:29:44:4d:11:62:23:5c:e5:c9:ea:78:00:0f:5b:
ca:ac:92:d3:9d:df:83:67:a4:6a:d8:f3:d1:6a:d6:
ff:ce:67:1a:72:8c:ad:fe:45:58:49:aa:f7:08:21:
b2:51:63:69:82:e8:29:39:f9:24:83:21:88:82:fb:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:0D:D7:25:4E:88:33:21:30:38:15:AF:1E:89:07:EE:9C:EE:24
X509v3 Authority Key Identifier:
keyid:9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/1-0MN1yVOiDMhMDgVrx6JB-6c7iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.245.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bc:67:59:f9:36:ea:46:2a:af:dd:9f:1e:94:61:c5:35:41:
4a:43:5e:ae:bb:21:c2:22:5d:2e:6e:dc:b1:8d:ac:4d:47:fc:
ba:1a:24:98:d3:23:76:af:3f:11:78:3c:6f:c2:50:6b:9e:e9:
35:44:87:0a:95:7a:70:79:7c:fb:e0:42:fb:0b:ca:2b:41:35:
68:12:52:ef:f5:95:6f:93:40:95:70:13:bb:2b:58:c9:ac:4d:
f0:a9:c5:81:23:ca:db:9e:39:72:2d:3d:8e:25:f2:9a:2c:d5:
b4:87:6c:ef:aa:aa:2e:f1:be:d5:3c:f0:88:1e:a4:54:fd:87:
77:a4:34:a7:f6:30:fe:95:26:f2:d3:47:df:a4:b3:4f:63:2f:
4a:a2:e4:c6:9a:58:d2:cd:a7:31:dc:c9:a1:8b:9b:df:6e:1a:
a9:28:0b:03:1b:84:56:28:49:6e:a9:99:9f:e3:97:33:05:00:
fe:1c:cc:2f:03:2e:d3:c8:1c:3d:d8:64:1f:6c:45:d3:c6:8b:
03:77:7c:78:5a:ba:ed:07:85:48:10:c7:79:7c:0e:75:53:23:
ee:ae:ae:43:1c:f9:d6:31:d2:98:a3:fe:4e:a3:83:61:96:a7:
82:5e:e5:0c:49:f9:41:33:57:7d:ad:0d:98:56:3b:a8:86:d3:
ef:c8:87:be
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDZ30fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
NTAyNzBmZDMxMGUxMTQyMmU1ODZmMjYzMTcxNTVkNWNmNjY0NTgwHhcNMjIwMTAx
MDA1MjI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmYjQzMGRkNzI1NGU4
ODMzMjEzMDM4MTVhZjFlODkwN2VlOWNlZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtoOhixWOHSxQ/nHDfpl7CUCs7FAcllib4YUQjd6/i/MKZSLB
BylV11kpKWypn43HmXnbnkVJyMx6cPqDE25j2QGYrmvx4blVoIB8YER8Qa+Sg+gY
BvV5tRGedRQDOxbcFoOLJ1KhaghlTvnJqyQ5DBGMdxAwCeXKGF1q4dhcOhK7g/Po
qRN2xKfxm1EVQ+Xt91I911c0oXe67VJ5K1dmfDHnb+3SDq+tEYtY23cl+vlsSqWY
5I6h25cSleY6/3QDFDUBKURNEWIjXOXJ6ngAD1vKrJLTnd+DZ6Rq2PPRatb/zmca
coyt/kVYSar3CCGyUWNpgugpOfkkgyGIgvssqQIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFPtDDdclTogzITA4Fa8eiQfunO4kMB8GA1UdIwQYMBaAFJ9QJw/TEOEUIuWG
8mMXFV1c9mRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bjFBbkQ5TVE0UlFpNVlieVl4Y1ZYVnoyWkZnLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zOC9mNTczZDMtZGUxNC00NDM0LWFiOTQtOTRmYmYzNGRlMTU5LzEv
MS0wTU4xeVZPaURNaE1EZ1ZyeDZKQi02YzdpUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
ZjU3M2QzLWRlMTQtNDQzNC1hYjk0LTk0ZmJmMzRkZTE1OS8xL24xQW5EOU1RNFJR
aTVZYnlZeGNWWFZ6MlpGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT9TANBgkqhkiG9w0BAQsFAAOC
AQEAkrxnWfk26kYqr92fHpRhxTVBSkNerrshwiJdLm7csY2sTUf8uhokmNMjdq8/
EXg8b8JQa57pNUSHCpV6cHl8++BC+wvKK0E1aBJS7/WVb5NAlXATuytYyaxN8KnF
gSPK2545ci09jiXymizVtIds76qqLvG+1TzwiB6kVP2Hd6Q0p/Yw/pUm8tNH36Sz
T2MvSqLkxppY0s2nMdzJoYub324aqSgLAxuEVihJbqmZn+OXMwUA/hzMLwMu08gc
PdhkH2xF08aLA3d8eFq67QeFSBDHeXwOdVMj7q6uQxz51jHSmKP+TqODYZangl7l
DEn5QTNXfa0NmFY7qIbT78iHvg==
-----END CERTIFICATE-----
Generated at Sun May 4 15:34:43 2025 by rpki-client