Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa
File: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (raw, json)
Hash identifier: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=
Subject key identifier: A4:28:E7:56:B3:F9:16:04:F2:C4:90:9D:56:26:D3:65:F5:EC:75:0D
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 019424B3977E1CC4A6D5770AC1698B1859B4
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210463
IP address blocks: 146.19.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:7e:1c:c4:a6:d5:77:0a:c1:69:8b:18:59:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a428e756b3f91604f2c4909d5626d365f5ec750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:6e:85:40:89:4a:c1:c2:b9:3e:13:dd:d1:
2b:63:26:cb:ec:2e:a4:37:2e:4c:93:f8:a3:1f:92:
c3:5e:b0:a6:74:e9:3c:df:9c:e2:91:69:8c:23:59:
1b:ca:77:72:8c:ac:6f:e6:f1:99:08:2b:22:38:60:
77:4d:a8:80:1f:ed:db:86:e2:59:8a:e7:45:58:c9:
4f:dc:ba:72:1a:b8:36:b1:f7:00:3f:47:9f:fe:3c:
71:2b:e2:98:42:2f:db:ce:d2:bb:c0:3f:c0:9c:bf:
38:55:4e:45:2b:69:46:0e:39:f7:d0:26:c3:99:60:
7f:9f:97:c7:b2:cb:5e:d6:cc:13:8b:d4:a9:6c:1c:
bc:ee:10:b5:c4:6c:38:86:44:f9:7a:c2:9d:16:65:
8b:7e:44:04:11:b6:5e:46:8a:25:96:2d:a7:77:1d:
8f:b5:05:49:7f:9b:39:07:d2:8a:11:1c:92:0e:8e:
05:d1:85:e2:6a:58:dd:28:9d:61:1b:8f:2d:66:29:
16:99:76:61:a7:ef:8d:f1:2e:3b:99:32:4d:66:d9:
1c:be:94:1e:80:b7:78:41:63:c9:57:ce:4b:5d:7f:
0e:60:47:11:3e:b9:ef:ff:cb:e0:92:c6:86:76:4e:
59:e2:24:5d:9c:6c:9e:fa:cf:94:09:c8:e3:8d:aa:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:E7:56:B3:F9:16:04:F2:C4:90:9D:56:26:D3:65:F5:EC:75:0D
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fd:97:c9:e1:8f:74:f5:bb:c7:35:09:9f:d8:9b:2b:92:be:
f0:6b:14:2f:8a:ec:81:d9:03:41:2c:98:af:2d:08:15:61:fe:
24:35:90:4b:ed:20:9d:4d:94:69:b7:be:63:47:50:75:c8:00:
2f:86:41:f4:5a:60:1b:72:be:8a:b6:be:54:4b:44:cc:0b:0e:
fe:45:8b:47:07:8f:43:15:0c:f8:08:85:96:b6:52:ff:c2:9a:
60:f9:59:25:75:48:f5:4a:d5:90:9f:2e:71:50:92:57:0c:c3:
09:3b:7f:f1:63:e9:68:0d:92:62:e7:7f:d1:8d:56:8a:fc:83:
46:0d:ab:46:c1:93:a3:cf:a0:37:e6:84:9a:1a:26:75:41:ab:
1d:cf:d8:35:6a:8c:be:06:0b:59:6d:95:20:66:01:6a:5e:28:
73:13:19:1f:3c:8e:25:95:f9:06:46:5c:35:83:17:28:b9:ed:
7b:8a:ee:d8:f9:bd:b0:79:ef:f0:bc:d5:4b:06:70:e9:8a:56:
f1:91:c9:10:85:2c:a0:34:2e:76:93:87:a8:68:8a:28:14:eb:
b9:09:55:2d:fb:9d:7e:96:0f:6a:da:80:b6:ca:dd:71:fd:77:
34:53:6a:ab:73:fd:11:b4:26:04:ef:db:9b:0f:55:f6:fd:51:
47:dd:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:13 2025 by rpki-client