Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa
File: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (raw, json)
Hash identifier: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=
Subject key identifier: 93:03:45:1B:4C:00:B2:99:B8:7E:CC:51:D9:8A:CF:29:51:A4:D4:88
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0194252145FB58F51F444CE78F843CB251F6
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210477
IP address blocks: 146.19.17.0/24 maxlen: 24
185.18.151.0/24 maxlen: 24
185.216.191.0/24 maxlen: 24
2a12:b500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:45:fb:58:f5:1f:44:4c:e7:8f:84:3c:b2:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9303451b4c00b299b87ecc51d98acf2951a4d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:bc:ed:99:9a:18:f3:e9:50:c1:b5:76:3d:
da:d2:0d:c9:9a:35:79:9d:1a:c6:0f:7d:d8:18:22:
98:88:30:11:1c:79:bd:81:2a:6b:23:2f:ba:13:23:
d9:90:a2:79:8e:59:30:75:51:28:7f:48:55:19:2a:
e5:bc:4a:7d:5d:e0:8c:d9:c0:b6:76:cd:b1:ed:33:
48:62:e8:da:90:39:34:f9:1b:cb:66:ca:94:e8:4e:
50:d7:03:3f:91:a3:99:a6:15:9e:46:61:c9:0f:fb:
63:c4:b6:c6:0d:c5:3f:3e:cc:c5:7d:2a:31:c2:62:
52:77:4b:2a:72:ac:b2:84:65:ae:b8:84:31:19:58:
9b:68:a6:b0:55:82:34:6a:86:5b:77:0c:c4:67:fb:
99:42:54:7b:c7:14:b4:97:9e:23:c0:4a:b7:4d:ca:
ae:a7:10:5b:40:cb:97:df:12:7b:d3:de:71:6b:b9:
63:7e:89:6e:34:ff:1a:28:a7:0f:f6:d4:87:ea:fb:
00:6c:23:45:5e:4f:0e:a7:b9:40:78:c0:81:ed:4c:
56:43:0b:49:6d:52:7d:63:e6:f6:d8:56:9f:e4:2c:
c2:0b:f3:75:16:2c:54:00:37:cf:28:6b:80:a3:85:
27:02:02:3a:1c:18:81:61:fa:8d:64:b9:ba:82:58:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:45:1B:4C:00:B2:99:B8:7E:CC:51:D9:8A:CF:29:51:A4:D4:88
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.17.0/24
185.18.151.0/24
185.216.191.0/24
IPv6:
2a12:b500::/32
Signature Algorithm: sha256WithRSAEncryption
44:08:64:e3:70:e4:46:a4:df:fc:78:e1:10:60:67:3a:50:4c:
31:f7:36:49:c4:53:15:c4:b2:a7:7c:cb:9b:07:fe:71:11:be:
db:22:31:3f:c3:57:a7:f0:79:25:02:80:b8:4e:7f:91:2a:ba:
be:42:94:85:a2:1d:14:67:b2:a7:e0:8e:a7:f1:93:c2:1d:7f:
5b:46:43:ee:c6:b3:5f:08:30:ab:f3:fc:2d:8b:0c:01:35:62:
2d:dd:71:8e:06:09:d7:85:32:bf:ba:c1:26:66:6c:72:e9:d1:
22:87:9a:22:a0:40:e6:5d:89:fc:e1:87:7c:93:87:ed:1e:fc:
cb:b2:ec:3d:20:da:66:a8:fd:57:2d:be:3e:d9:34:7b:d1:41:
dd:4a:2f:83:d6:a4:6b:6e:f3:04:b1:b2:a0:c6:23:f1:9e:11:
71:0b:5f:89:cd:eb:5e:67:14:8c:f5:6d:00:a1:59:3a:47:29:
fd:65:e1:27:40:0e:d2:0f:10:ea:0c:26:ee:59:c2:20:4d:0a:
09:45:53:13:f9:11:f1:4f:d2:b8:4f:23:02:90:91:66:d6:6d:
91:1d:1e:5f:91:a4:1b:db:e0:bd:b9:e6:b6:af:e0:38:51:8e:
d5:ce:82:2e:c9:70:c1:5e:13:6b:85:45:be:cc:5a:1c:10:27:
19:eb:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:20 2025 by rpki-client