Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/pxEmt4j50s9AjzuedDq48c_2vzw.roa
File: pxEmt4j50s9AjzuedDq48c_2vzw.roa (raw, json)
Hash identifier: pizAy8XkKG/bskAcy1VYRPbFwQCMgUhEH1NAsZ8vVn8=
Subject key identifier: A7:11:26:B7:88:F9:D2:CF:40:8F:3B:9E:74:3A:B8:F1:CF:F6:BF:3C
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 018595D4FE0D28F8D0CACD98F9F6DD0F00B0
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/pxEmt4j50s9AjzuedDq48c_2vzw.roa
Signing time: Mon 09 Jan 2023 09:20:41 +0000
ROA not before: Mon 09 Jan 2023 09:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:d4:fe:0d:28:f8:d0:ca:cd:98:f9:f6:dd:0f:00:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Jan 9 09:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71126b788f9d2cf408f3b9e743ab8f1cff6bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:b8:47:c2:85:10:51:38:ef:9c:33:5f:b5:
60:43:be:48:dd:57:15:5f:63:e6:e4:d4:42:10:28:
18:08:96:3f:9f:c0:0e:c6:96:36:8b:b9:8c:c1:9f:
3e:c8:60:29:74:a4:76:7a:6a:b4:4e:77:07:32:d1:
41:8a:3e:8d:e8:7b:c2:cc:a2:8a:3e:95:eb:72:c6:
82:1c:4f:1b:f0:87:b1:83:0e:73:63:1f:76:ee:25:
70:d5:de:b9:c5:9b:21:0d:5b:b8:f7:e1:8f:89:0a:
cf:8b:7b:f8:25:79:51:e9:15:82:94:65:48:c4:77:
61:68:b1:15:56:95:f6:10:93:0f:36:73:bb:1c:92:
9d:e3:3e:58:bd:bf:e4:b9:36:ec:57:7e:84:ec:11:
f8:4e:08:2d:c6:bf:fe:79:b8:4c:f4:36:5b:13:62:
0f:a1:e3:d5:85:d3:b8:27:ac:aa:75:e6:a5:16:82:
d9:52:50:c9:70:20:03:74:54:8d:2b:2e:be:24:58:
3e:07:66:d2:dc:77:05:dc:0a:aa:a4:59:5b:2c:3c:
8f:1e:a6:5b:63:0a:e0:a6:c4:4a:17:d7:d8:04:84:
73:2e:86:c4:47:47:5b:7c:c9:9d:1d:22:90:34:5b:
c2:3a:c6:5f:b4:3d:10:5f:e2:10:0f:4b:46:fc:10:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:26:B7:88:F9:D2:CF:40:8F:3B:9E:74:3A:B8:F1:CF:F6:BF:3C
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/pxEmt4j50s9AjzuedDq48c_2vzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2e:fa:91:16:14:e9:d4:e7:11:66:94:a8:77:bf:92:a2:01:
68:f3:f3:f4:ef:e5:20:35:b6:6e:f9:d3:c1:38:63:3e:ce:d2:
46:ca:2f:10:e7:17:5b:38:64:f4:0e:3e:7a:37:1f:83:4f:dd:
70:49:d0:05:1f:c2:6d:68:22:c7:83:48:35:50:26:d0:d1:6d:
5a:b4:48:d5:2d:c8:7d:88:bf:b9:36:0f:1b:1b:71:c7:73:2a:
54:f6:7c:ee:e3:1b:8b:5c:c2:90:1c:dc:52:c8:87:c6:93:e4:
59:4b:44:2f:9c:27:ec:cf:d9:0e:ed:04:87:cd:0f:6d:59:f0:
bd:a2:85:a6:30:fb:96:e6:c0:41:3c:fe:78:32:9d:0a:85:d6:
57:fc:d6:57:a7:8c:22:f9:b5:e8:13:11:ea:a0:3c:bd:86:46:
aa:cd:b7:1d:31:0d:b3:49:91:f6:52:65:15:99:39:ed:28:e1:
99:8f:03:14:60:0e:1f:7c:a3:6c:7a:99:6e:21:59:6d:73:26:
55:ba:6e:59:3c:1e:18:3b:d1:6b:6f:2b:dc:fd:47:22:33:99:
7a:39:ff:bc:ae:a1:30:a3:04:0f:20:6a:b6:3a:8f:6c:eb:35:
00:be:be:d9:f6:4a:d2:d5:0d:f2:61:34:20:7d:ca:f5:94:52:
c9:ac:bb:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWV1P4NKPjQys2Y+fbdDwCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjMwMTA5MDkyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzExMjZiNzg4ZjlkMmNmNDA4ZjNiOWU3NDNhYjhmMWNmZjZiZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BW4R8KFEFE475wzX7VgQ75I3VcV
X2Pm5NRCECgYCJY/n8AOxpY2i7mMwZ8+yGApdKR2emq0TncHMtFBij6N6HvCzKKK
PpXrcsaCHE8b8Iexgw5zYx927iVw1d65xZshDVu49+GPiQrPi3v4JXlR6RWClGVI
xHdhaLEVVpX2EJMPNnO7HJKd4z5Yvb/kuTbsV36E7BH4Tggtxr/+ebhM9DZbE2IP
oePVhdO4J6yqdealFoLZUlDJcCADdFSNKy6+JFg+B2bS3HcF3AqqpFlbLDyPHqZb
YwrgpsRKF9fYBIRzLobER0dbfMmdHSKQNFvCOsZftD0QX+IQD0tG/BDBdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcRJreI+dLPQI87nnQ6uPHP9r88MB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvcHhFbXQ0ajUwczlBanp1ZWREcTQ4Y18ydnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvc6MA0G
CSqGSIb3DQEBCwUAA4IBAQAmLvqRFhTp1OcRZpSod7+SogFo8/P07+UgNbZu+dPB
OGM+ztJGyi8Q5xdbOGT0Dj56Nx+DT91wSdAFH8JtaCLHg0g1UCbQ0W1atEjVLch9
iL+5Ng8bG3HHcypU9nzu4xuLXMKQHNxSyIfGk+RZS0QvnCfsz9kO7QSHzQ9tWfC9
ooWmMPuW5sBBPP54Mp0KhdZX/NZXp4wi+bXoExHqoDy9hkaqzbcdMQ2zSZH2UmUV
mTntKOGZjwMUYA4ffKNsepluIVltcyZVum5ZPB4YO9Frbyvc/UciM5l6Of+8rqEw
owQPIGq2Oo9s6zUAvr7Z9krS1Q3yYTQgfcr1lFLJrLs8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org