Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/00vg8IRkVKB_uABtmBrXZln6gSU.roa
File: 00vg8IRkVKB_uABtmBrXZln6gSU.roa (raw, json)
Hash identifier: Tjn7mocjR+BXTjBKAQFsvBxmPJAoqiRqK1NCuwg0ORc=
Subject key identifier: D3:4B:E0:F0:84:64:54:A0:7F:B8:00:6D:98:1A:D7:66:59:FA:81:25
Certificate issuer: /CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Certificate serial: 01934F02
Authority key identifier: 40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/00vg8IRkVKB_uABtmBrXZln6gSU.roa
Signing time: Wed 11 May 2022 22:00:48 +0000
ROA not before: Wed 11 May 2022 22:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26431234 (0x1934f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098f1d390ad42264b5fc4e6eb6f83097b579e73
Validity
Not Before: May 11 22:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d34be0f0846454a07fb8006d981ad76659fa8125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:5d:b2:fb:51:ea:6d:39:00:58:87:90:a6:
57:01:4f:c3:96:b5:a3:c7:a8:7c:4b:d4:c8:de:7b:
bd:3d:c3:4f:57:99:86:d0:09:6b:d1:85:0e:e0:ee:
fd:22:15:da:5d:77:9b:a1:ef:ff:bd:68:c1:57:24:
a3:f8:11:f7:55:6f:ab:8d:49:cb:1c:8d:62:e1:7f:
6f:bf:46:12:4e:f4:59:0e:9d:84:c8:1f:24:95:a4:
a5:7a:e9:61:36:d5:93:f9:62:a7:ed:cf:11:a1:00:
c2:4f:7b:eb:00:b1:e0:d1:76:f3:1b:a3:c0:97:c0:
4a:19:31:2e:39:2b:c8:55:b4:3c:20:3c:b0:53:e3:
77:53:b1:52:91:8d:ae:c4:bd:5b:86:43:3c:b6:30:
4e:45:b0:aa:9d:e2:18:8c:7c:5c:74:52:47:50:af:
b8:f6:d1:66:9d:2e:7d:e4:fc:b7:b7:cb:90:ec:b3:
1f:e7:82:f7:21:45:70:9f:99:aa:81:79:0c:c6:b3:
5f:c3:3f:e1:ec:7e:b1:a6:62:f9:e9:be:cc:41:0a:
60:39:67:5b:03:ab:6e:09:a0:0a:eb:a4:83:db:d7:
02:a6:ec:fe:2c:22:39:46:62:d2:32:8e:5b:c2:46:
f1:94:94:a0:99:a1:e6:1e:91:1f:b0:a8:ed:cc:e0:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:E0:F0:84:64:54:A0:7F:B8:00:6D:98:1A:D7:66:59:FA:81:25
X509v3 Authority Key Identifier:
keyid:40:98:F1:D3:90:AD:42:26:4B:5F:C4:E6:EB:6F:83:09:7B:57:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJjx05CtQiZLX8Tm62-DCXtXnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/00vg8IRkVKB_uABtmBrXZln6gSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f9eeb8-48a1-414d-bf0d-fc6f5f4c626c/1/QJjx05CtQiZLX8Tm62-DCXtXnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7a:ea:de:a0:ae:23:53:1a:4b:5e:39:cb:fd:97:63:ed:b2:
6d:13:1a:1a:90:1f:2e:25:83:c9:9d:22:79:55:25:f1:84:4e:
0c:e0:d8:39:6f:ab:04:e0:93:2c:f4:94:f8:a6:fc:b2:28:c0:
f7:59:d6:41:da:d1:3a:a7:cc:e9:b9:85:f5:2c:8e:68:a0:f8:
52:93:11:80:73:8f:5b:78:3d:cf:b9:7e:2c:70:bf:47:81:a3:
7a:a6:55:f2:9e:70:77:db:4d:fe:fa:c5:72:15:99:ab:ff:76:
54:99:fb:09:60:f5:a2:4a:22:cb:f7:d5:3e:d7:46:aa:e6:f7:
89:41:bf:91:67:62:ca:5a:0b:ce:98:bd:43:ba:8e:f0:92:50:
3a:54:25:d3:e0:47:b0:63:a9:f5:21:99:71:49:24:20:e5:4d:
65:71:34:82:e7:68:a0:57:7d:4e:f9:4a:ff:be:9f:9b:6d:b4:
e4:1b:4a:f4:6f:d8:84:0d:13:74:62:f0:01:73:33:fb:cc:a1:
ef:fb:55:c6:1a:1b:81:fb:23:83:a3:5c:b2:0e:56:f9:bd:a7:
fd:d6:bb:9a:30:5c:a7:19:0c:40:b5:52:11:5b:35:3d:b2:b3:
6d:18:97:a0:b0:a3:7e:7b:ce:27:4a:b7:7a:22:17:d4:ad:8b:
0e:ea:ac:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZNPAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDk4ZjFkMzkwYWQ0MjI2NGI1ZmM0ZTZlYjZmODMwOTdiNTc5ZTczMB4XDTIyMDUx
MTIyMDA0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM0YmUwZjA4NDY0
NTRhMDdmYjgwMDZkOTgxYWQ3NjY1OWZhODEyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKEXXbL7UeptOQBYh5CmVwFPw5a1o8eofEvUyN57vT3DT1eZ
htAJa9GFDuDu/SIV2l13m6Hv/71owVcko/gR91Vvq41JyxyNYuF/b79GEk70WQ6d
hMgfJJWkpXrpYTbVk/lip+3PEaEAwk976wCx4NF28xujwJfAShkxLjkryFW0PCA8
sFPjd1OxUpGNrsS9W4ZDPLYwTkWwqp3iGIx8XHRSR1CvuPbRZp0ufeT8t7fLkOyz
H+eC9yFFcJ+ZqoF5DMazX8M/4ex+saZi+em+zEEKYDlnWwOrbgmgCuukg9vXAqbs
/iwiOUZi0jKOW8JG8ZSUoJmh5h6RH7Co7czghlsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTS+DwhGRUoH+4AG2YGtdmWfqBJTAfBgNVHSMEGDAWgBRAmPHTkK1CJktf
xObrb4MJe1eeczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FKangwNUN0UWlaTFg4VG02Mi1EQ1h0WG5uTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvZjllZWI4LTQ4YTEtNDE0ZC1iZjBkLWZjNmY1ZjRjNjI2Yy8x
LzAwdmc4SVJrVktCX3VBQnRtQnJYWmxuNmdTVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
ZjllZWI4LTQ4YTEtNDE0ZC1iZjBkLWZjNmY1ZjRjNjI2Yy8xL1FKangwNUN0UWla
TFg4VG02Mi1EQ1h0WG5uTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITbDANBgkqhkiG9w0BAQsFAAOC
AQEAoXrq3qCuI1MaS145y/2XY+2ybRMaGpAfLiWDyZ0ieVUl8YRODODYOW+rBOCT
LPSU+Kb8sijA91nWQdrROqfM6bmF9SyOaKD4UpMRgHOPW3g9z7l+LHC/R4GjeqZV
8p5wd9tN/vrFchWZq/92VJn7CWD1okoiy/fVPtdGqub3iUG/kWdiyloLzpi9Q7qO
8JJQOlQl0+BHsGOp9SGZcUkkIOVNZXE0gudooFd9TvlK/76fm2205BtK9G/YhA0T
dGLwAXMz+8yh7/tVxhobgfsjg6Ncsg5W+b2n/da7mjBcpxkMQLVSEVs1PbKzbRiX
oLCjfnvOJ0q3eiIX1K2LDuqsag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:16 2024 by rpki-client on console-ams.rpki-client.org