Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/En5OGDNWXfgop2MYsYc23p6s10k.roa
File: En5OGDNWXfgop2MYsYc23p6s10k.roa (raw, json)
Hash identifier: IKBMdEi9aSZ1up7wv4lNKatDFrP2EdF7FoHdL32G3jk=
Subject key identifier: 12:7E:4E:18:33:56:5D:F8:28:A7:63:18:B1:87:36:DE:9E:AC:D7:49
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 0183643FB4E6E137A9F05250BAEE9D3E9467
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/En5OGDNWXfgop2MYsYc23p6s10k.roa
Signing time: Thu 22 Sep 2022 08:10:40 +0000
ROA not before: Thu 22 Sep 2022 08:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:3f:b4:e6:e1:37:a9:f0:52:50:ba:ee:9d:3e:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Sep 22 08:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=127e4e1833565df828a76318b18736de9eacd749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:c0:f9:c6:6b:03:7d:01:16:ec:a0:b0:eb:
6b:d1:43:2d:d9:c1:d0:ed:00:4a:8c:48:eb:64:f7:
cb:02:6a:04:5f:c6:09:9f:db:82:ba:37:2f:2d:56:
6d:5d:4b:8b:fe:ac:5a:5f:a9:3d:6c:36:40:fa:89:
da:ef:83:38:8f:6a:5f:c5:56:06:79:2d:ef:4a:0d:
f8:f4:87:75:4a:13:ba:7c:81:5e:02:96:45:e9:8d:
cc:73:a8:7b:bc:e1:51:2a:1d:d3:95:54:5e:5e:d1:
b8:36:d3:91:81:be:29:77:ae:43:03:ed:aa:e8:66:
de:0b:87:ad:05:f4:7d:2a:fc:01:a9:02:bf:a1:bd:
b6:e2:41:f4:06:43:18:44:82:37:76:49:b1:c2:14:
5e:8e:61:cb:48:46:17:03:56:26:87:41:0f:7e:d5:
38:35:a1:20:b2:62:af:65:a5:c2:5f:8e:fa:a0:3d:
0a:61:08:b0:c0:c3:ac:db:92:4c:25:91:0d:d3:ee:
cc:a1:df:23:2a:6d:18:12:d2:fe:96:71:d6:5f:e0:
a5:f5:06:f5:b1:b3:d7:6b:6d:29:e9:84:c2:5f:d4:
60:c7:98:ec:d1:8a:c6:4e:0c:2e:79:1a:19:44:4a:
f7:97:43:1f:f1:a8:1e:9d:8a:db:0d:4b:33:be:91:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:4E:18:33:56:5D:F8:28:A7:63:18:B1:87:36:DE:9E:AC:D7:49
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/En5OGDNWXfgop2MYsYc23p6s10k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:14:fd:16:91:f0:62:06:81:79:da:cb:b1:a0:02:39:f2:bf:
04:a8:24:59:06:6b:f1:11:56:1c:03:07:dd:71:d8:2e:90:cf:
87:b8:a6:61:18:f6:a9:0a:cc:05:a4:58:f6:5f:2c:5e:02:10:
fb:d0:35:5d:61:f3:9f:6b:c0:dc:18:04:b6:26:ef:b2:b8:71:
4d:79:bc:b3:37:0a:31:3a:0f:f5:7e:34:b4:c3:f6:c3:b4:3b:
82:4b:8e:6b:5c:76:eb:b1:35:3e:53:f7:e0:b2:9c:f9:8d:bc:
fe:92:13:53:13:b2:2f:45:32:ff:c3:7e:1e:a6:2e:53:21:19:
fa:a9:db:4b:5c:65:29:02:55:20:7c:08:e6:04:f0:59:33:10:
8e:5a:5e:7b:bb:53:db:d5:c9:ac:96:a8:44:3b:af:76:a1:eb:
1b:f3:74:8a:b8:2c:25:aa:f2:0e:5c:4f:b7:6a:f4:1b:0e:93:
9b:9e:89:74:4b:f1:7b:64:ca:87:d3:94:97:73:ae:a1:71:0e:
4d:47:33:47:36:b2:75:28:d1:50:cc:c2:dc:f9:71:0c:7f:46:
14:8c:4c:2e:bf:33:0a:9e:95:c4:27:35:d8:f3:1f:08:c6:8f:
03:39:cc:2d:26:36:23:fc:2d:81:4a:46:12:51:31:17:de:8d:
db:53:9b:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNkP7Tm4Tep8FJQuu6dPpRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjIwOTIyMDgxMDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdlNGUxODMzNTY1ZGY4MjhhNzYzMThiMTg3MzZkZTllYWNkNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreDA+cZrA30BFuygsOtr0UMt2cHQ
7QBKjEjrZPfLAmoEX8YJn9uCujcvLVZtXUuL/qxaX6k9bDZA+ona74M4j2pfxVYG
eS3vSg349Id1ShO6fIFeApZF6Y3Mc6h7vOFRKh3TlVReXtG4NtORgb4pd65DA+2q
6GbeC4etBfR9KvwBqQK/ob224kH0BkMYRII3dkmxwhRejmHLSEYXA1Ymh0EPftU4
NaEgsmKvZaXCX476oD0KYQiwwMOs25JMJZEN0+7Mod8jKm0YEtL+lnHWX+Cl9Qb1
sbPXa20p6YTCX9Rgx5js0YrGTgwueRoZREr3l0Mf8agenYrbDUszvpFKrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ+ThgzVl34KKdjGLGHNt6erNdJMB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvRW41T0dETldYZmdvcDJNWXNZYzIzcDZzMTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvc6MA0G
CSqGSIb3DQEBCwUAA4IBAQCrFP0WkfBiBoF52suxoAI58r8EqCRZBmvxEVYcAwfd
cdgukM+HuKZhGPapCswFpFj2XyxeAhD70DVdYfOfa8DcGAS2Ju+yuHFNebyzNwox
Og/1fjS0w/bDtDuCS45rXHbrsTU+U/fgspz5jbz+khNTE7IvRTL/w34epi5TIRn6
qdtLXGUpAlUgfAjmBPBZMxCOWl57u1Pb1cmslqhEO692oesb83SKuCwlqvIOXE+3
avQbDpObnol0S/F7ZMqH05SXc66hcQ5NRzNHNrJ1KNFQzMLc+XEMf0YUjEwuvzMK
npXEJzXY8x8Ixo8DOcwtJjYj/C2BSkYSUTEX3o3bU5st
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:12 2023 by rpki-client on console-fra.rpki-client.org