Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/1qBvtaczD23TCC2tKpLceqIDw3c.roa
File: 1qBvtaczD23TCC2tKpLceqIDw3c.roa (raw, json)
Hash identifier: SJbsFvnvF5jA3ojP0JkjSqaVtum8dFGHfmkeay1VTcU=
Subject key identifier: D6:A0:6F:B5:A7:33:0F:6D:D3:08:2D:AD:2A:92:DC:7A:A2:03:C3:77
Certificate issuer: /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial: 1BBA31
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/1qBvtaczD23TCC2tKpLceqIDw3c.roa
Signing time: Sat 01 Jan 2022 02:02:12 +0000
ROA not before: Sat 01 Jan 2022 02:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206485
IP address blocks: 146.19.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817137 (0x1bba31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb558699207297438090cbee19f022b6eeab982
Validity
Not Before: Jan 1 02:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6a06fb5a7330f6dd3082dad2a92dc7aa203c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:fc:2b:52:37:d5:d8:6f:f8:78:db:1d:eb:
9e:f6:45:04:e3:6c:0c:d4:c2:1e:d4:ff:ae:8c:ee:
03:04:61:72:39:ae:90:97:db:15:95:19:50:ac:06:
3a:10:9d:12:5f:c9:f1:50:d8:25:96:d1:c7:f0:04:
d6:72:51:62:13:d7:f2:df:87:27:23:fc:77:62:a1:
f8:88:25:72:5a:ec:3f:02:d4:94:1b:44:d5:12:11:
af:07:c2:4f:dd:c8:00:7f:7e:2d:b2:40:39:1e:64:
35:a1:c3:e8:1b:68:6d:52:5f:63:26:27:73:3d:e1:
73:85:c6:d3:75:66:6c:2f:ff:1f:1c:9e:c8:e3:72:
e4:4e:08:1b:bb:5a:04:e5:b6:50:5e:5d:4a:bf:60:
b7:36:cb:f1:33:44:de:08:eb:1b:dc:41:14:46:20:
15:84:ee:e6:82:82:5e:8f:3e:5c:71:e8:53:d6:e0:
90:12:ee:c5:60:5d:1f:48:3c:48:78:e0:5f:a1:1f:
f9:90:c5:05:d3:26:2c:6d:6f:ae:51:29:49:36:96:
bc:d7:09:c3:eb:c3:ee:5d:bb:09:1b:c9:7e:a5:1b:
48:79:70:88:ab:27:e5:a5:3b:2d:46:4b:3b:84:00:
a8:f4:d7:d8:ea:4c:46:2f:4b:2e:dd:4b:99:85:21:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:6F:B5:A7:33:0F:6D:D3:08:2D:AD:2A:92:DC:7A:A2:03:C3:77
X509v3 Authority Key Identifier:
keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/1qBvtaczD23TCC2tKpLceqIDw3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d7:7b:aa:f8:c5:bc:d7:eb:c7:3f:8f:05:eb:90:db:e0:20:
2d:a7:5f:23:5a:45:a9:b5:c2:ef:98:91:5e:44:e1:e6:79:d8:
14:25:82:e3:1a:5d:2b:af:8a:10:b3:7f:e2:fc:e1:b5:12:90:
03:4c:b6:76:32:3a:fe:48:8b:c0:8e:1e:8a:a1:51:01:96:9f:
aa:e0:52:60:22:83:11:e2:d9:64:be:ae:dd:49:c4:01:67:71:
1c:68:0b:f3:78:ce:73:fa:53:7e:89:7e:78:e8:9f:98:5a:9a:
a6:62:00:b9:51:48:dd:12:3c:c1:b3:a1:8f:62:ce:74:bc:51:
91:c2:24:54:d8:ca:b1:26:9a:d7:ec:cc:91:c1:3a:96:b1:8b:
7a:c6:da:34:e8:c3:2c:67:09:47:b8:40:eb:6f:ad:3e:6a:b0:
d4:e7:51:3c:62:d7:b5:80:76:be:e8:b4:81:77:6f:c9:d7:ca:
5c:29:31:a7:d9:80:d2:ba:a8:c1:24:31:e0:e2:22:07:3f:22:
e0:96:fb:e9:ed:5e:db:00:de:70:4f:05:f3:7c:ae:89:30:0f:
48:d3:0b:f5:03:2f:4b:8d:01:23:04:41:54:a6:d3:64:4d:f7:
43:03:cf:64:ac:15:f1:05:58:eb:e0:4c:13:a5:10:9e:0b:2d:
d7:0c:a7:55
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDG7oxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
YjU1ODY5OTIwNzI5NzQzODA5MGNiZWUxOWYwMjJiNmVlYWI5ODIwHhcNMjIwMTAx
MDIwMjEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNmEwNmZiNWE3MzMw
ZjZkZDMwODJkYWQyYTkyZGM3YWEyMDNjMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmPr8K1I31dhv+HjbHeue9kUE42wM1MIe1P+ujO4DBGFyOa6Q
l9sVlRlQrAY6EJ0SX8nxUNglltHH8ATWclFiE9fy34cnI/x3YqH4iCVyWuw/AtSU
G0TVEhGvB8JP3cgAf34tskA5HmQ1ocPoG2htUl9jJidzPeFzhcbTdWZsL/8fHJ7I
43LkTggbu1oE5bZQXl1Kv2C3NsvxM0TeCOsb3EEURiAVhO7mgoJejz5ccehT1uCQ
Eu7FYF0fSDxIeOBfoR/5kMUF0yYsbW+uUSlJNpa81wnD68PuXbsJG8l+pRtIeXCI
qyflpTstRks7hACo9NfY6kxGL0su3UuZhSFFUQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNagb7WnMw9t0wgtrSqS3HqiA8N3MB8GA1UdIwQYMBaAFKu1WGmSByl0OAkM
vuGfAitu6rmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cTdWWWFaSUhLWFE0Q1F5LTRaOENLMjdxdVlJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wZS85Nzc2NjctYTE2NS00OTVjLWE4OWUtOWJlOGZiNDdhNTIyLzEv
MXFCdnRhY3pEMjNUQ0MydEtwTGNlcUlEdzNjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85
Nzc2NjctYTE2NS00OTVjLWE4OWUtOWJlOGZiNDdhNTIyLzEvcTdWWWFaSUhLWFE0
Q1F5LTRaOENLMjdxdVlJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNbMA0GCSqGSIb3DQEBCwUAA4IB
AQAB13uq+MW81+vHP48F65Db4CAtp18jWkWptcLvmJFeROHmedgUJYLjGl0rr4oQ
s3/i/OG1EpADTLZ2Mjr+SIvAjh6KoVEBlp+q4FJgIoMR4tlkvq7dScQBZ3EcaAvz
eM5z+lN+iX546J+YWpqmYgC5UUjdEjzBs6GPYs50vFGRwiRU2MqxJprX7MyRwTqW
sYt6xto06MMsZwlHuEDrb60+arDU51E8Yte1gHa+6LSBd2/J18pcKTGn2YDSuqjB
JDHg4iIHPyLglvvp7V7bAN5wTwXzfK6JMA9I0wv1Ay9LjQEjBEFUptNkTfdDA89k
rBXxBVjr4EwTpRCeCy3XDKdV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org