Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/aaw_EjBYePwB7zTVaCLuqZmCiRE.roa
File: aaw_EjBYePwB7zTVaCLuqZmCiRE.roa (raw, json)
Hash identifier: XMpUvlRSSB8+TVTmI1Q3R6F4U6C/KJKK09DZc9rlBE0=
Subject key identifier: 69:AC:3F:12:30:58:78:FC:01:EF:34:D5:68:22:EE:A9:99:82:89:11
Certificate issuer: /CN=9f50270fd310e11422e586f26317155d5cf66458
Certificate serial: 0182C4C70DEEA3983FE8879C0710B13E5C0A
Authority key identifier: 9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/aaw_EjBYePwB7zTVaCLuqZmCiRE.roa
Signing time: Mon 22 Aug 2022 08:59:15 +0000
ROA not before: Mon 22 Aug 2022 08:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 146.19.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:c7:0d:ee:a3:98:3f:e8:87:9c:07:10:b1:3e:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f50270fd310e11422e586f26317155d5cf66458
Validity
Not Before: Aug 22 08:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69ac3f12305878fc01ef34d56822eea999828911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:17:61:c8:ba:59:0e:f4:cc:03:70:47:cc:
9a:10:45:6d:c4:08:6b:14:e6:cc:49:37:49:46:6f:
79:e3:bb:b6:91:7e:ff:5f:7c:b5:38:c7:11:b3:f7:
9a:5c:a4:ab:b5:57:ae:76:cc:43:22:28:9f:83:1b:
4e:7a:47:d9:28:4f:0d:c2:7e:1c:06:11:3d:77:ea:
79:10:1a:a7:a0:74:0a:a2:aa:39:23:91:72:3a:1b:
f6:f2:d2:93:51:2b:f7:ac:d0:70:95:f0:ca:0a:de:
d2:a0:87:14:23:41:fa:1e:0d:6a:83:27:d4:6f:ec:
67:df:78:76:00:90:da:ad:f8:34:a4:f7:0d:33:e0:
a5:ed:f8:58:a0:18:e6:2d:7a:e3:7e:c1:07:2f:bc:
80:0b:05:b7:2a:77:be:bd:67:19:ad:5e:7c:17:30:
d2:2a:59:90:80:a8:e0:b6:2e:3f:50:32:92:ae:35:
ad:05:4d:6f:b5:71:01:3e:da:3c:23:d5:ed:f1:c3:
1d:ab:2d:28:32:6f:80:9e:b3:0a:87:f4:f6:af:01:
aa:58:1e:67:b8:23:fe:34:1f:13:c8:93:84:bc:f6:
f9:eb:bb:5b:95:73:fd:73:11:45:05:6b:ed:e3:14:
e0:7c:4c:d5:88:ed:05:cb:4d:d1:5d:92:9c:37:69:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:3F:12:30:58:78:FC:01:EF:34:D5:68:22:EE:A9:99:82:89:11
X509v3 Authority Key Identifier:
keyid:9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/aaw_EjBYePwB7zTVaCLuqZmCiRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.245.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ec:40:85:4f:d2:29:d5:2c:a5:0c:b4:b6:9e:4b:45:6b:86:
9d:0d:67:ff:3a:1b:06:b2:28:87:b6:9f:3b:a7:06:f5:b5:2b:
dc:a2:72:67:da:09:b7:10:9b:a8:24:43:7e:86:15:05:ab:38:
84:92:bc:79:21:b0:6d:79:8f:16:28:48:70:ec:cb:2c:3c:e4:
34:ed:d3:3f:9e:a5:0e:80:f4:4c:18:47:6d:00:ca:7f:9b:29:
11:e4:61:fa:69:fb:a7:41:81:ae:c7:da:69:11:15:ec:38:67:
30:6d:cd:13:b6:41:62:f6:68:92:67:72:f3:78:cb:e3:52:70:
d8:2a:f6:2e:94:b9:90:13:f2:40:88:73:25:ba:60:94:87:ac:
9d:82:a1:42:ca:50:de:00:d8:75:91:4a:0e:2c:ec:ab:48:7f:
80:55:4e:88:b2:4d:b6:b6:2d:35:2f:47:4d:fb:3c:d1:de:1f:
35:05:07:41:9f:94:13:24:1b:50:7f:75:84:68:14:91:84:65:
ae:cc:8d:a0:0b:3f:ab:64:6f:ce:34:9e:11:94:c4:6f:56:59:
0f:06:03:a9:14:33:6d:27:48:e2:fa:77:bc:5f:a4:da:9b:0e:
11:06:79:85:30:75:98:ac:3c:16:c7:1b:1a:20:87:9e:81:ff:
97:6b:94:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLExw3uo5g/6IecBxCxPlwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNTAyNzBmZDMxMGUxMTQyMmU1ODZmMjYzMTcxNTVkNWNm
NjY0NTgwHhcNMjIwODIyMDg1OTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWFjM2YxMjMwNTg3OGZjMDFlZjM0ZDU2ODIyZWVhOTk5ODI4OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA0XYci6WQ70zANwR8yaEEVtxAhr
FObMSTdJRm9547u2kX7/X3y1OMcRs/eaXKSrtVeudsxDIiifgxtOekfZKE8Nwn4c
BhE9d+p5EBqnoHQKoqo5I5FyOhv28tKTUSv3rNBwlfDKCt7SoIcUI0H6Hg1qgyfU
b+xn33h2AJDarfg0pPcNM+Cl7fhYoBjmLXrjfsEHL7yACwW3Kne+vWcZrV58FzDS
KlmQgKjgti4/UDKSrjWtBU1vtXEBPto8I9Xt8cMdqy0oMm+AnrMKh/T2rwGqWB5n
uCP+NB8TyJOEvPb567tblXP9cxFFBWvt4xTgfEzViO0Fy03RXZKcN2lARwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGmsPxIwWHj8Ae801Wgi7qmZgokRMB8GA1UdIwQY
MBaAFJ9QJw/TEOEUIuWG8mMXFV1c9mRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFBbkQ5TVE0UlFpNVlieVl4Y1ZYVnoyWkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mNTczZDMtZGUxNC00NDM0LWFiOTQt
OTRmYmYzNGRlMTU5LzEvYWF3X0VqQlllUHdCN3pUVmFDTHVxWm1DaVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mNTczZDMtZGUxNC00NDM0LWFiOTQtOTRmYmYzNGRlMTU5
LzEvbjFBbkQ5TVE0UlFpNVlieVl4Y1ZYVnoyWkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhP1MA0G
CSqGSIb3DQEBCwUAA4IBAQAl7ECFT9Ip1SylDLS2nktFa4adDWf/OhsGsiiHtp87
pwb1tSvconJn2gm3EJuoJEN+hhUFqziEkrx5IbBteY8WKEhw7MssPOQ07dM/nqUO
gPRMGEdtAMp/mykR5GH6afunQYGux9ppERXsOGcwbc0TtkFi9miSZ3LzeMvjUnDY
KvYulLmQE/JAiHMlumCUh6ydgqFCylDeANh1kUoOLOyrSH+AVU6Isk22ti01L0dN
+zzR3h81BQdBn5QTJBtQf3WEaBSRhGWuzI2gCz+rZG/ONJ4RlMRvVlkPBgOpFDNt
J0ji+ne8X6Tamw4RBnmFMHWYrDwWxxsaIIeegf+Xa5TC
-----END CERTIFICATE-----
Generated at Sun May 4 11:03:22 2025 by rpki-client