Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/evW88p2N9-J_IwHxK1fLm4aBE7g.roa
File: evW88p2N9-J_IwHxK1fLm4aBE7g.roa (raw, json)
Hash identifier: 6551d6ilWy6j1UOVhPjtFjWVrouFiy/yZjl6Clz1CDA=
Subject key identifier: 7A:F5:BC:F2:9D:8D:F7:E2:7F:23:01:F1:2B:57:CB:9B:86:81:13:B8
Certificate issuer: /CN=9acae1e86f3e58abb80c0fa97420094d55206d7b
Certificate serial: 5DBD00
Authority key identifier: 9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msrh6G8-WKu4DA-pdCAJTVUgbXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/evW88p2N9-J_IwHxK1fLm4aBE7g.roa
Signing time: Sat 01 Jan 2022 00:57:48 +0000
ROA not before: Sat 01 Jan 2022 00:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57884
IP address blocks: 146.19.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6143232 (0x5dbd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acae1e86f3e58abb80c0fa97420094d55206d7b
Validity
Not Before: Jan 1 00:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af5bcf29d8df7e27f2301f12b57cb9b868113b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:11:34:ff:48:0a:3f:76:0e:9f:fd:d1:29:
e4:26:ee:0e:b2:5d:d9:29:76:20:53:15:8d:44:ef:
76:b0:9c:df:b9:65:da:47:6f:ff:fe:f0:8a:de:54:
a1:53:6d:bd:ce:96:ba:87:46:6f:53:cf:c8:9f:18:
b5:1b:cb:bd:31:ba:28:14:35:52:e5:e9:59:3a:41:
9c:64:f7:0b:5a:5c:03:3c:72:10:3f:99:e6:35:aa:
ba:26:38:50:40:9d:32:21:1c:1c:9c:ba:84:29:e2:
df:58:74:95:13:2e:fb:23:f2:5c:72:ad:c7:cb:3e:
65:47:64:50:7d:b3:d0:14:a9:ab:e6:f8:d8:51:bb:
95:f7:3c:b5:35:a0:e4:00:50:aa:26:d4:19:f1:b7:
30:71:36:27:f3:6c:07:61:34:94:7b:56:42:d6:1d:
90:b0:be:46:06:3a:b9:6c:0a:45:e4:a8:44:dd:6d:
2a:db:78:a9:6c:eb:de:2d:74:5d:02:1a:85:24:9f:
92:00:ab:68:eb:94:35:51:bd:69:fd:08:1e:c3:ef:
45:de:2a:ca:3d:4e:c4:78:56:21:b5:b0:29:7d:84:
1e:d0:05:54:f8:02:fb:c9:39:44:3b:c0:dc:4c:70:
e4:48:21:7e:f6:8a:e4:09:ee:99:aa:81:21:11:8a:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:BC:F2:9D:8D:F7:E2:7F:23:01:F1:2B:57:CB:9B:86:81:13:B8
X509v3 Authority Key Identifier:
keyid:9A:CA:E1:E8:6F:3E:58:AB:B8:0C:0F:A9:74:20:09:4D:55:20:6D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msrh6G8-WKu4DA-pdCAJTVUgbXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/evW88p2N9-J_IwHxK1fLm4aBE7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/15db9b-562b-4b97-8024-43473c2362c4/1/msrh6G8-WKu4DA-pdCAJTVUgbXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:37:5f:63:5b:a2:fd:55:b5:89:f3:1b:84:3a:e8:61:d6:d3:
5a:8e:c2:c0:ea:e8:0d:c4:01:c7:69:77:d6:4c:89:57:38:ef:
c7:1e:f6:eb:60:57:7c:64:de:a1:54:84:b6:8b:63:00:46:6b:
02:8e:21:9f:4a:6d:eb:82:75:3e:ac:42:d8:1a:47:e4:88:8a:
8d:fd:7f:54:2f:aa:fd:3e:ee:e4:f3:e3:1e:41:fd:98:98:1e:
33:fd:da:c7:1b:c7:b3:17:6a:e4:da:84:88:27:35:4e:a4:d4:
ce:77:bc:eb:02:a7:54:b4:5f:2b:cb:66:2c:2f:5e:70:fa:c4:
5f:ab:76:a9:ac:e2:fc:1d:6b:fe:98:e9:f8:10:18:fa:7b:51:
4a:90:55:f4:36:fd:71:bd:0e:6e:c9:5b:3f:d9:93:dd:b7:9a:
72:db:31:7f:17:1c:ee:ae:0b:0e:db:c0:45:e6:ae:ec:0e:c8:
2c:25:8b:bb:41:bf:72:27:3e:29:6b:22:c0:83:36:67:0c:27:
f1:b1:af:97:c6:72:bd:13:9a:81:4d:99:0d:b8:e4:72:51:3d:
a3:4c:8a:51:d4:e8:c4:79:f3:c1:73:cf:38:6f:99:f5:9c:c7:
81:84:05:f6:fa:ed:2f:da:5d:cf:43:cc:5f:de:e8:c7:fe:50:
20:7e:ba:94
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDXb0AMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlh
Y2FlMWU4NmYzZTU4YWJiODBjMGZhOTc0MjAwOTRkNTUyMDZkN2IwHhcNMjIwMTAx
MDA1NzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3YWY1YmNmMjlkOGRm
N2UyN2YyMzAxZjEyYjU3Y2I5Yjg2ODExM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwwERNP9ICj92Dp/90SnkJu4Osl3ZKXYgUxWNRO92sJzfuWXa
R2///vCK3lShU229zpa6h0ZvU8/Inxi1G8u9MbooFDVS5elZOkGcZPcLWlwDPHIQ
P5nmNaq6JjhQQJ0yIRwcnLqEKeLfWHSVEy77I/Jccq3Hyz5lR2RQfbPQFKmr5vjY
UbuV9zy1NaDkAFCqJtQZ8bcwcTYn82wHYTSUe1ZC1h2QsL5GBjq5bApF5KhE3W0q
23ipbOveLXRdAhqFJJ+SAKto65Q1Ub1p/Qgew+9F3irKPU7EeFYhtbApfYQe0AVU
+AL7yTlEO8DcTHDkSCF+9orkCe6ZqoEhEYo18QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHr1vPKdjffifyMB8StXy5uGgRO4MB8GA1UdIwQYMBaAFJrK4ehvPliruAwP
qXQgCU1VIG17MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bXNyaDZHOC1XS3U0REEtcGRDQUpUVlVnYlhzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wOS8xNWRiOWItNTYyYi00Yjk3LTgwMjQtNDM0NzNjMjM2MmM0LzEv
ZXZXODhwMk45LUpfSXdIeEsxZkxtNGFCRTdnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8x
NWRiOWItNTYyYi00Yjk3LTgwMjQtNDM0NzNjMjM2MmM0LzEvbXNyaDZHOC1XS3U0
REEtcGRDQUpUVlVnYlhzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPaMA0GCSqGSIb3DQEBCwUAA4IB
AQCpN19jW6L9VbWJ8xuEOuhh1tNajsLA6ugNxAHHaXfWTIlXOO/HHvbrYFd8ZN6h
VIS2i2MARmsCjiGfSm3rgnU+rELYGkfkiIqN/X9UL6r9Pu7k8+MeQf2YmB4z/drH
G8ezF2rk2oSIJzVOpNTOd7zrAqdUtF8ry2YsL15w+sRfq3aprOL8HWv+mOn4EBj6
e1FKkFX0Nv1xvQ5uyVs/2ZPdt5py2zF/FxzurgsO28BF5q7sDsgsJYu7Qb9yJz4p
ayLAgzZnDCfxsa+XxnK9E5qBTZkNuORyUT2jTIpR1OjEefPBc884b5n1nMeBhAX2
+u0v2l3PQ8xf3ujH/lAgfrqU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org