Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa
File: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (raw, json)
Hash identifier: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=
Subject key identifier: 33:A5:3A:76:41:FD:0D:21:F3:13:61:25:5D:FD:D9:52:0B:FE:81:AA
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 019425216E2E4E0480CFE735DDC41E6036A1
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205334
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:2e:4e:04:80:cf:e7:35:dd:c4:1e:60:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a53a7641fd0d21f31361255dfdd9520bfe81aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:2e:e7:5e:8b:18:05:38:37:40:7f:14:50:
0d:af:49:68:80:02:26:d5:35:ee:a5:92:8a:03:4c:
be:42:22:36:f5:55:31:32:89:6f:cc:ff:14:bc:d8:
71:e5:19:fd:74:a9:fb:ba:65:62:38:94:7d:31:23:
2b:8e:d3:3f:ce:c9:72:be:1b:e9:76:2a:8b:15:dd:
24:eb:46:09:5b:ed:5f:75:97:7e:0c:82:eb:9c:78:
54:a6:f3:e3:bb:0e:4f:db:af:f6:23:a5:aa:b5:eb:
e6:0a:ac:db:1c:9f:34:b2:6c:6e:c7:bc:e8:d2:e6:
32:1e:00:aa:05:2b:72:85:bf:52:e1:70:74:60:0e:
a5:6b:89:1e:44:4e:6d:e3:db:47:46:12:ce:65:e0:
2b:04:c9:7f:4c:d6:e7:8f:f8:b2:66:c3:f9:ec:bf:
49:2c:fd:a4:9a:2f:3c:84:9b:bc:f2:d3:88:79:b1:
8d:97:19:47:ca:00:48:3a:13:f4:0a:7f:62:12:13:
8c:6a:76:63:c0:d0:88:13:58:05:ad:7a:f3:dd:96:
08:75:a3:bd:a4:56:12:84:eb:36:aa:7a:9b:9b:d2:
08:76:5f:a9:09:88:46:98:87:84:ca:85:1a:74:25:
70:bf:6e:18:86:09:72:fb:9e:d9:2b:d7:4d:1b:b9:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:3A:76:41:FD:0D:21:F3:13:61:25:5D:FD:D9:52:0B:FE:81:AA
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
01:48:83:1e:20:e0:47:a6:3f:82:0a:e8:6e:1d:ab:a8:b2:ea:
6a:5e:50:51:d8:57:bc:2d:15:09:b0:e9:a3:45:8a:8f:8c:87:
9d:21:a7:8f:f3:3b:1c:43:e9:8e:04:78:c4:a5:fc:c3:b5:8c:
0a:d5:33:89:c8:d7:75:a0:b2:5a:73:9c:34:b7:f6:7d:69:50:
f0:16:c8:7d:c7:49:5e:5b:b8:97:13:fe:a2:03:e0:8f:ca:5d:
01:bd:be:0a:be:d6:3a:11:23:d6:2a:bc:5e:53:87:56:e3:01:
c6:3d:8d:0e:87:a9:0c:41:26:f6:14:fb:86:a9:1f:17:4a:f3:
79:3b:d1:a1:75:2d:eb:10:aa:9e:de:85:47:f6:a9:ac:2d:df:
23:1b:97:39:e4:3f:6f:4e:33:3d:d5:76:e2:09:4d:19:52:5f:
d6:51:a3:5e:06:d8:a1:0d:51:c5:e4:af:62:22:9f:e8:98:07:
17:da:bb:0b:5a:92:d4:ee:37:fd:38:5b:78:ae:62:b5:a4:66:
8c:17:cb:f7:70:73:d8:b2:2e:a2:2d:f8:39:e6:fd:32:71:12:
45:41:1a:80:41:2b:f9:2e:e2:af:62:0d:7b:09:b5:d9:7e:01:
71:fb:cf:50:59:56:57:bf:ea:cd:0b:3f:d5:27:8d:1e:7e:45:
7e:e7:b8:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIW4uTgSAz+c13cQeYDahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2E1M2E3NjQxZmQwZDIxZjMxMzYxMjU1ZGZkZDk1MjBiZmU4MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki0u516LGAU4N0B/FFANr0logAIm
1TXupZKKA0y+QiI29VUxMolvzP8UvNhx5Rn9dKn7umViOJR9MSMrjtM/zslyvhvp
diqLFd0k60YJW+1fdZd+DILrnHhUpvPjuw5P26/2I6WqtevmCqzbHJ80smxux7zo
0uYyHgCqBStyhb9S4XB0YA6la4keRE5t49tHRhLOZeArBMl/TNbnj/iyZsP57L9J
LP2kmi88hJu88tOIebGNlxlHygBIOhP0Cn9iEhOManZjwNCIE1gFrXrz3ZYIdaO9
pFYShOs2qnqbm9IIdl+pCYhGmIeEyoUadCVwv24Yhgly+57ZK9dNG7nnnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOlOnZB/Q0h8xNhJV392VIL/oGqMB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvTTZVNmRrSDlEU0h6RTJFbFhmM1pVZ3YtZ2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN1MA0G
CSqGSIb3DQEBCwUAA4IBAQABSIMeIOBHpj+CCuhuHauosupqXlBR2Fe8LRUJsOmj
RYqPjIedIaeP8zscQ+mOBHjEpfzDtYwK1TOJyNd1oLJac5w0t/Z9aVDwFsh9x0le
W7iXE/6iA+CPyl0Bvb4KvtY6ESPWKrxeU4dW4wHGPY0Oh6kMQSb2FPuGqR8XSvN5
O9GhdS3rEKqe3oVH9qmsLd8jG5c55D9vTjM91XbiCU0ZUl/WUaNeBtihDVHF5K9i
Ip/omAcX2rsLWpLU7jf9OFt4rmK1pGaMF8v3cHPYsi6iLfg55v0ycRJFQRqAQSv5
LuKvYg17CbXZfgFx+89QWVZXv+rNCz/VJ40efkV+57gJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:53 2025 by rpki-client