Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/1-41LI9_YknIcFMMlYfAdhr4lqDU.roa
File: 1-41LI9_YknIcFMMlYfAdhr4lqDU.roa (raw, json)
Hash identifier: i8Sqr2dPjikreVCdz4+QBizcJGPtJt5c4X4d/kUgDLU=
Subject key identifier: FB:8D:4B:23:DF:D8:92:72:1C:14:C3:25:61:F0:1D:86:BE:25:A8:35
Certificate issuer: /CN=35813179aa01b6d0d1248e8597c6f86cba862e47
Certificate serial: 01856BC118A8B124943961D91D0B7B0F34F6
Authority key identifier: 35:81:31:79:AA:01:B6:D0:D1:24:8E:85:97:C6:F8:6C:BA:86:2E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYExeaoBttDRJI6Fl8b4bLqGLkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/1-41LI9_YknIcFMMlYfAdhr4lqDU.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 146.19.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:18:a8:b1:24:94:39:61:d9:1d:0b:7b:0f:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35813179aa01b6d0d1248e8597c6f86cba862e47
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8d4b23dfd892721c14c32561f01d86be25a835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:d0:6e:ef:0e:20:d0:b7:5d:ef:ad:94:76:
06:65:f8:ca:03:70:a4:11:b9:b0:bb:a0:ea:0c:76:
66:12:7a:5d:3f:5a:3b:b4:15:0c:15:10:e4:0d:bd:
d1:94:ea:6a:8e:7d:d4:82:dc:dc:1f:a9:72:63:95:
11:51:32:10:50:d4:88:3f:c8:5e:cf:13:38:bd:c5:
fd:e6:ae:8e:db:8c:b7:69:15:8b:47:4f:18:e4:d3:
46:cc:71:0c:93:c8:76:cf:4f:e5:2c:c4:7a:e3:ff:
d7:d2:73:4b:7b:26:2e:bb:20:54:50:93:d8:97:99:
02:ba:d2:0e:cf:56:c2:71:71:86:c5:c4:0d:f1:bb:
c3:ab:01:dc:dc:27:28:b9:a0:db:3c:1c:63:7e:93:
6b:ec:8b:5b:14:35:98:63:10:85:fe:e3:b4:59:6b:
6d:9b:10:a0:1d:5b:ae:c8:f4:82:2d:ba:01:95:39:
3c:62:c1:9b:79:91:be:9b:7a:a8:74:e8:14:ec:6e:
3c:8e:62:cd:e4:b4:ff:1b:56:59:35:a1:e2:ad:20:
bb:4c:65:78:3a:01:07:2b:0e:14:41:2b:5d:f5:02:
17:62:15:21:91:3e:d5:7f:46:8b:9e:d0:60:48:cc:
a8:68:8f:42:50:bf:76:ee:71:f9:07:fd:f4:05:b4:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:4B:23:DF:D8:92:72:1C:14:C3:25:61:F0:1D:86:BE:25:A8:35
X509v3 Authority Key Identifier:
keyid:35:81:31:79:AA:01:B6:D0:D1:24:8E:85:97:C6:F8:6C:BA:86:2E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYExeaoBttDRJI6Fl8b4bLqGLkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/1-41LI9_YknIcFMMlYfAdhr4lqDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/86ca7d-f2d3-4fe2-8fab-93ea65f590dd/1/NYExeaoBttDRJI6Fl8b4bLqGLkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:b1:ac:65:09:35:db:79:2c:f7:57:f4:03:93:b5:a2:30:
22:19:00:7f:4c:3b:bd:12:f2:59:1f:ae:56:1a:dd:78:16:6f:
25:05:f7:ff:97:2a:8b:67:35:41:53:18:b4:6f:91:3b:72:23:
61:53:88:16:d9:f2:8f:a3:45:51:25:8e:23:72:96:3e:62:3d:
3e:d6:8b:94:d8:94:b8:2a:1e:a3:88:6d:2c:a1:44:a9:da:d8:
ec:1c:77:51:e7:ed:cf:c0:dc:97:c7:ed:4f:26:3c:f0:59:d0:
fd:59:ef:4a:a5:6d:86:f4:25:93:31:e8:03:24:c7:3f:f0:95:
93:8a:92:cb:a4:ec:34:82:e8:73:12:12:05:d4:c9:ab:e8:f7:
5b:03:ad:1d:9d:c8:b7:1e:4d:c4:53:c8:73:7d:85:d0:9f:71:
2e:b2:1f:3a:c3:33:8a:54:ac:bf:af:b4:d2:2e:bc:2e:ed:d6:
41:a4:4a:6d:e8:c1:ab:05:b3:12:f3:1b:39:85:d9:e6:ae:e3:
be:61:57:82:00:44:3f:dd:26:be:4b:5e:95:c7:28:3a:72:58:
a3:d3:0b:c6:da:1e:60:4f:e0:61:4f:98:70:3a:08:11:e3:a8:
9a:dd:cf:c4:29:cf:98:3f:a3:f9:fc:db:98:ce:68:a7:ec:99:
f0:ff:d5:73
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVrwRiosSSUOWHZHQt7DzT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ODEzMTc5YWEwMWI2ZDBkMTI0OGU4NTk3YzZmODZjYmE4
NjJlNDcwHhcNMjMwMTAxMDUxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjhkNGIyM2RmZDg5MjcyMWMxNGMzMjU2MWYwMWQ4NmJlMjVhODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBPQbu8OINC3Xe+tlHYGZfjKA3Ck
Ebmwu6DqDHZmEnpdP1o7tBUMFRDkDb3RlOpqjn3UgtzcH6lyY5URUTIQUNSIP8he
zxM4vcX95q6O24y3aRWLR08Y5NNGzHEMk8h2z0/lLMR64//X0nNLeyYuuyBUUJPY
l5kCutIOz1bCcXGGxcQN8bvDqwHc3CcouaDbPBxjfpNr7ItbFDWYYxCF/uO0WWtt
mxCgHVuuyPSCLboBlTk8YsGbeZG+m3qodOgU7G48jmLN5LT/G1ZZNaHirSC7TGV4
OgEHKw4UQStd9QIXYhUhkT7Vf0aLntBgSMyoaI9CUL927nH5B/30BbRXFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuNSyPf2JJyHBTDJWHwHYa+Jag1MB8GA1UdIwQY
MBaAFDWBMXmqAbbQ0SSOhZfG+Gy6hi5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTllFeGVhb0J0dERSSkk2Rmw4YjRiTHFHTGtjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84NmNhN2QtZjJkMy00ZmUyLThmYWIt
OTNlYTY1ZjU5MGRkLzEvMS00MUxJOV9Za25JY0ZNTWxZZkFkaHI0bHFEVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTIvODZjYTdkLWYyZDMtNGZlMi04ZmFiLTkzZWE2NWY1OTBk
ZC8xL05ZRXhlYW9CdHREUkpJNkZsOGI0YkxxR0xrYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT+DAN
BgkqhkiG9w0BAQsFAAOCAQEAb5exrGUJNdt5LPdX9AOTtaIwIhkAf0w7vRLyWR+u
VhrdeBZvJQX3/5cqi2c1QVMYtG+RO3IjYVOIFtnyj6NFUSWOI3KWPmI9PtaLlNiU
uCoeo4htLKFEqdrY7Bx3Ueftz8Dcl8ftTyY88FnQ/VnvSqVthvQlkzHoAyTHP/CV
k4qSy6TsNILocxISBdTJq+j3WwOtHZ3Itx5NxFPIc32F0J9xLrIfOsMzilSsv6+0
0i68Lu3WQaRKbejBqwWzEvMbOYXZ5q7jvmFXggBEP90mvktelccoOnJYo9MLxtoe
YE/gYU+YcDoIEeOomt3PxCnPmD+j+fzbmM5op+yZ8P/Vcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:51 2024 by rpki-client on console-fra.rpki-client.org