Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/NQnOaiv4cAcLjtuhPNv6Gnbsa4M.roa
File: NQnOaiv4cAcLjtuhPNv6Gnbsa4M.roa (raw, json)
Hash identifier: mEVOTU9YjeeCJxiWFIrcq/pbdmQtS141y+UAW9c97Eg=
Subject key identifier: 35:09:CE:6A:2B:F8:70:07:0B:8E:DB:A1:3C:DB:FA:1A:76:EC:6B:83
Certificate issuer: /CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
Certificate serial: 018572CCA235550B0E5EB8D111D8DBDC580B
Authority key identifier: F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/NQnOaiv4cAcLjtuhPNv6Gnbsa4M.roa
Signing time: Mon 02 Jan 2023 14:04:51 +0000
ROA not before: Mon 02 Jan 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 146.19.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a2:35:55:0b:0e:5e:b8:d1:11:d8:db:dc:58:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
Validity
Not Before: Jan 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3509ce6a2bf870070b8edba13cdbfa1a76ec6b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:ac:4a:bd:75:01:b6:7a:d3:ba:5a:2c:58:
d7:fd:c4:e5:c5:20:84:80:19:95:80:2a:e9:e2:86:
58:41:09:36:2c:7f:03:ff:79:a5:2f:dc:8e:41:ec:
39:ac:f5:37:93:20:d4:17:41:0a:81:b3:29:f3:56:
f4:0d:20:95:86:45:52:82:da:6f:ae:15:01:5b:3b:
18:87:79:d3:3f:9a:2b:d3:2f:0d:e3:b2:7d:c2:c1:
34:9e:09:73:58:21:cb:69:74:b7:62:ef:04:91:46:
a0:cf:a2:70:94:dd:59:66:7d:6d:a7:1b:e0:0f:16:
5d:50:77:70:d8:2d:59:57:5b:31:fa:fe:8f:11:78:
83:3f:9e:49:7f:71:b1:d6:dd:3c:c1:9f:1b:48:bc:
80:d0:3f:6e:a3:7d:5e:8a:b3:35:eb:bc:c3:97:67:
73:8c:e6:11:f9:64:0b:ea:f4:7b:8c:b9:36:fc:78:
2d:58:a5:fd:33:99:55:46:21:8d:af:41:e0:7f:19:
b0:2b:80:53:72:4d:f5:13:d3:06:3b:31:3f:7e:17:
86:80:f2:b1:a0:1b:a2:01:d0:cb:c2:d8:cd:46:76:
9e:f9:7b:76:53:a3:89:aa:c1:58:d2:20:19:53:12:
ae:ba:3e:6f:46:e9:96:3a:3c:4c:fd:cf:72:ba:b8:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:CE:6A:2B:F8:70:07:0B:8E:DB:A1:3C:DB:FA:1A:76:EC:6B:83
X509v3 Authority Key Identifier:
keyid:F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/NQnOaiv4cAcLjtuhPNv6Gnbsa4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f4:ee:75:04:d9:55:35:59:92:14:14:5e:e6:1e:a1:09:a8:
01:a3:52:3a:86:7e:26:ec:b1:e3:80:5e:78:10:87:0a:9f:77:
d1:d3:05:93:24:cd:d6:2d:60:a4:ba:a5:48:68:4a:56:19:50:
4f:e5:3b:67:e9:c3:eb:85:91:ca:d3:18:d7:3f:e9:7a:0f:27:
12:88:2f:17:7e:48:b9:77:a1:04:f5:8b:3c:d4:2c:85:03:f6:
b2:b1:df:57:ba:81:8f:bf:d2:1d:e2:7d:29:d1:09:e1:9a:94:
7c:a3:fc:2a:49:a9:b2:53:15:60:8b:d8:a6:2b:d1:d3:fa:7a:
eb:c3:44:65:a1:2e:80:1b:59:94:7c:86:3e:be:2e:0e:4c:c4:
ad:ed:2c:43:ea:eb:5f:42:29:4e:cd:12:0a:a5:aa:0b:cc:83:
02:24:78:b6:7d:74:8c:23:5b:a6:c8:27:4a:b9:7f:f8:74:00:
e1:50:d1:cf:a0:5a:fe:90:db:b6:c5:fd:7e:0f:40:e3:56:f0:
e8:68:9b:7f:1e:cb:a7:23:46:4d:5a:ae:18:e0:85:1e:cb:92:
bc:79:9b:d4:02:ff:54:f9:f8:af:20:df:6b:59:77:b5:c0:4a:
86:ae:a9:92:2f:91:7f:da:18:43:6d:24:1a:f3:81:76:8e:e2:
84:de:0d:a6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVyzKI1VQsOXrjREdjb3FgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjM5MzczNzFiODk5MDhkZmNlZTg5ZTQxMmM1ZTRiMzRh
ZjNlYzAwHhcNMjMwMTAyMTQwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA5Y2U2YTJiZjg3MDA3MGI4ZWRiYTEzY2RiZmExYTc2ZWM2YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWOsSr11AbZ607paLFjX/cTlxSCE
gBmVgCrp4oZYQQk2LH8D/3mlL9yOQew5rPU3kyDUF0EKgbMp81b0DSCVhkVSgtpv
rhUBWzsYh3nTP5or0y8N47J9wsE0nglzWCHLaXS3Yu8EkUagz6JwlN1ZZn1tpxvg
DxZdUHdw2C1ZV1sx+v6PEXiDP55Jf3Gx1t08wZ8bSLyA0D9uo31eirM167zDl2dz
jOYR+WQL6vR7jLk2/HgtWKX9M5lVRiGNr0HgfxmwK4BTck31E9MGOzE/fheGgPKx
oBuiAdDLwtjNRnae+Xt2U6OJqsFY0iAZUxKuuj5vRumWOjxM/c9yurjWSQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDUJzmor+HAHC47boTzb+hp27GuDMB8GA1UdIwQY
MBaAFPmzk3NxuJkI387onkEsXks0rz7AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iT1RjM0c0bVFqZnp1aWVRU3hlU3pTdlBzQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYzUzYjc5LTk3ZDAtNDhjYi04YTli
LTQyMzRlNmE5NWQ0YS8xL05Rbk9haXY0Y0FjTGp0dWhQTnY2R25ic2E0TS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYzUzYjc5LTk3ZDAtNDhjYi04YTliLTQyMzRlNmE5NWQ0
YS8xLzEtYk9UYzNHNG1RamZ6dWllUVN4ZVN6U3ZQc0EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSE6sw
DQYJKoZIhvcNAQELBQADggEBACv07nUE2VU1WZIUFF7mHqEJqAGjUjqGfibsseOA
XngQhwqfd9HTBZMkzdYtYKS6pUhoSlYZUE/lO2fpw+uFkcrTGNc/6XoPJxKILxd+
SLl3oQT1izzULIUD9rKx31e6gY+/0h3ifSnRCeGalHyj/CpJqbJTFWCL2KYr0dP6
euvDRGWhLoAbWZR8hj6+Lg5MxK3tLEPq619CKU7NEgqlqgvMgwIkeLZ9dIwjW6bI
J0q5f/h0AOFQ0c+gWv6Q27bF/X4PQONW8Ohom38ey6cjRk1arhjghR7Lkrx5m9QC
/1T5+K8g32tZd7XASoauqZIvkX/aGENtJBrzgXaO4oTeDaY=
-----END CERTIFICATE-----
Generated at Wed Dec 13 12:55:41 2023 by rpki-client on console-fra.rpki-client.org