Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/Yw_P_NQdk46-hhA9sx6KBlTYEsU.roa
File: Yw_P_NQdk46-hhA9sx6KBlTYEsU.roa (raw, json)
Hash identifier: D0FIgz1iJvHjDFbvi/LBxsvFD4zbK6A5iHw2ppyxDPk=
Subject key identifier: 63:0F:CF:FC:D4:1D:93:8E:BE:86:10:3D:B3:1E:8A:06:54:D8:12:C5
Certificate issuer: /CN=cbb168d46d05712c72cb147ce95a2e5b8ccb44e4
Certificate serial: 01856F9DC5F2C77325EE01F71944B628C2C1
Authority key identifier: CB:B1:68:D4:6D:05:71:2C:72:CB:14:7C:E9:5A:2E:5B:8C:CB:44:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Fo1G0FcSxyyxR86VouW4zLROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/Yw_P_NQdk46-hhA9sx6KBlTYEsU.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c5:f2:c7:73:25:ee:01:f7:19:44:b6:28:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb168d46d05712c72cb147ce95a2e5b8ccb44e4
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=630fcffcd41d938ebe86103db31e8a0654d812c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:c4:05:a2:53:99:16:da:34:1a:1e:db:cf:
c8:2f:33:5b:33:28:c2:6d:f6:39:ba:c8:5d:de:0e:
cc:e9:13:93:2e:3b:c7:87:e3:a4:0f:8f:af:c2:15:
27:bd:9f:59:5d:c2:57:bb:04:18:a3:62:93:3c:a4:
bc:84:81:78:24:25:61:83:06:f3:12:84:82:54:3a:
1f:90:8b:6a:12:ec:e2:60:8f:29:c4:e4:7c:18:73:
3a:92:fc:c1:e4:77:6f:0a:c7:52:2e:3d:85:7e:33:
9c:c8:e4:71:53:d4:10:30:bc:fd:cc:a1:7f:3c:50:
23:73:5f:5d:c8:fa:97:24:57:c7:9f:55:54:34:f1:
d8:1d:28:94:cc:6b:2e:f9:b9:84:c7:5d:6b:84:39:
89:1c:7f:74:38:5e:90:c2:8d:cb:42:09:b4:eb:bb:
3a:00:2a:92:3b:c0:d5:32:9f:a5:6e:16:93:6c:b3:
e6:02:66:92:44:09:6f:53:92:57:c3:99:ac:83:25:
a7:65:ef:67:0f:f8:89:ce:e8:ce:4f:10:26:1a:32:
f5:d5:c6:13:6d:d5:3b:de:69:3a:ed:b9:7c:5b:7c:
bb:94:49:d8:1d:4d:fc:e3:a3:d7:d1:4a:d3:21:5f:
7e:fe:b9:92:8c:3e:ae:34:f7:07:67:20:09:83:fe:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:CF:FC:D4:1D:93:8E:BE:86:10:3D:B3:1E:8A:06:54:D8:12:C5
X509v3 Authority Key Identifier:
keyid:CB:B1:68:D4:6D:05:71:2C:72:CB:14:7C:E9:5A:2E:5B:8C:CB:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Fo1G0FcSxyyxR86VouW4zLROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/Yw_P_NQdk46-hhA9sx6KBlTYEsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bd1eb6-1484-44bd-a4b6-f5139e7a03a2/1/y7Fo1G0FcSxyyxR86VouW4zLROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:73:20:3c:85:25:b8:36:96:7a:c6:96:86:cb:bb:20:a8:8b:
c6:bb:e3:0c:e0:d0:1b:c8:35:a1:fa:09:1e:80:e2:86:f0:e1:
66:cd:3f:96:c8:f0:7f:33:69:c9:c7:ed:74:69:9b:68:65:b9:
ac:fe:77:fc:fc:3e:fd:69:b4:5a:4c:14:97:80:59:3f:9a:64:
8a:be:7d:e2:03:00:d2:bf:cd:aa:fe:88:4a:a4:d7:ff:26:67:
fc:49:ba:77:e3:19:d7:55:d6:8f:da:21:7c:ab:84:6d:ec:7c:
27:77:a2:ef:8f:cc:d8:66:32:9d:ae:a5:7e:8f:95:e8:42:51:
a4:e4:81:39:4f:19:ab:3d:64:da:d9:7a:2c:80:1c:df:70:58:
7e:14:cc:fd:76:1e:ce:c7:b0:49:6e:08:6a:8c:a8:fa:ef:6c:
1f:0e:c1:21:b1:1b:aa:f3:61:34:73:5e:b3:09:e3:f9:da:73:
36:2f:0c:19:8c:ba:7a:7c:de:dd:66:02:9d:1a:b0:de:92:cd:
4d:d3:c4:12:77:e2:10:2e:55:fe:a0:3e:8e:62:fb:a6:c7:f4:
4c:a0:9b:a6:8b:be:8c:66:67:4c:51:52:8d:1b:df:46:3d:2d:
51:0c:78:1d:2c:b7:dd:a6:32:e4:2a:cb:f8:95:4f:81:e0:c2:
08:7d:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:10 2025 by rpki-client