Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/jIMO7cYMg1SW22bdobBV9_uOZ3U.roa
File: jIMO7cYMg1SW22bdobBV9_uOZ3U.roa (raw, json)
Hash identifier: uCOpf35VW26ASCdtBuMOogpYGVBqf0/gJ7Ve5ZTVjCE=
Subject key identifier: 8C:83:0E:ED:C6:0C:83:54:96:DB:66:DD:A1:B0:55:F7:FB:8E:67:75
Certificate issuer: /CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Certificate serial: 557881
Authority key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/jIMO7cYMg1SW22bdobBV9_uOZ3U.roa
Signing time: Wed 05 Jan 2022 16:02:08 +0000
ROA not before: Wed 05 Jan 2022 16:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5601409 (0x557881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Validity
Not Before: Jan 5 16:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c830eedc60c835496db66dda1b055f7fb8e6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:45:0f:ce:f7:77:9d:49:23:5a:89:cc:04:
d1:0f:6a:7d:7a:24:36:cb:13:6a:6c:e0:bb:da:33:
6f:8b:d0:8f:04:7a:e1:f6:cd:11:b1:85:50:5e:f5:
ea:ec:6f:ad:b5:cd:85:ba:22:f9:b6:49:38:7b:d4:
1a:69:09:99:11:b3:32:be:eb:68:88:b9:89:3a:71:
f3:60:d8:c8:e1:06:b7:eb:16:d8:de:94:fc:19:1e:
0e:42:99:40:53:4a:9e:e5:b2:17:d5:46:e6:4e:67:
e9:4e:83:55:85:48:7c:0b:92:f3:a4:fc:e6:14:3e:
5f:83:61:65:53:24:99:a5:c7:9c:23:6b:53:0b:f9:
38:6e:34:54:4e:67:24:ea:c0:63:d7:e5:5e:26:0a:
9d:55:39:49:06:21:8c:ea:76:19:e6:f8:1e:4c:43:
28:e3:88:c4:54:4c:a5:9c:14:fe:9c:f0:84:ff:6e:
8d:f1:de:23:c0:53:58:df:6d:00:83:a3:6f:f1:1d:
be:ea:f2:00:f7:13:e3:27:5d:06:4f:2e:56:11:eb:
37:32:bf:e6:1f:c8:e5:58:3e:9b:6a:27:46:dd:d9:
03:cf:be:7c:68:b9:f6:5f:1b:38:be:ca:39:aa:72:
bc:7a:27:2c:21:84:d6:d9:fe:5c:00:a0:2a:4a:45:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:0E:ED:C6:0C:83:54:96:DB:66:DD:A1:B0:55:F7:FB:8E:67:75
X509v3 Authority Key Identifier:
keyid:4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/jIMO7cYMg1SW22bdobBV9_uOZ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c0:68:8b:4c:96:d4:d1:0f:f3:cb:da:a1:c2:c8:0a:15:ac:
7c:d5:16:21:c0:42:cb:5c:6e:69:65:b3:03:d7:bc:3f:f9:52:
bc:9f:ee:13:02:33:4a:2c:a6:6d:da:81:30:58:c8:90:f6:81:
33:c2:64:6d:5f:82:0b:04:a2:a6:56:ce:83:90:5f:a0:72:ac:
03:ed:c2:e2:61:ca:5a:ad:9d:71:d5:77:be:19:02:a8:ca:87:
23:d0:6d:c8:1b:be:ff:f5:fd:9c:56:48:9e:f9:dd:f8:13:45:
5e:1d:12:3a:c6:8a:a9:f7:1e:96:a9:6c:f0:31:59:64:81:9b:
fb:46:54:e0:21:0d:cf:52:c7:ed:87:dc:80:ab:bf:b4:47:4a:
ec:ce:a7:1d:36:a5:5d:0a:a4:94:57:94:08:86:61:85:4a:52:
06:c2:a9:85:fd:af:a4:99:a8:5a:ea:ee:65:fb:dd:c1:09:55:
9f:9c:e5:b1:4b:a4:b3:f5:80:3e:d2:6c:03:a8:34:e7:92:cc:
99:e9:49:35:6b:41:a9:43:97:36:91:d2:a4:11:20:5e:e4:70:
74:04:ba:03:01:11:36:c5:e3:ef:3b:12:9b:bd:d2:4c:24:e3:
b1:c5:6d:5b:75:10:8d:89:ba:9d:1e:a3:b7:fa:63:da:ac:c8:
00:89:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:58 2025 by rpki-client