Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/bw_0lWp2FZLkEu4_5FqXZmTjvws.roa
File: bw_0lWp2FZLkEu4_5FqXZmTjvws.roa (raw, json)
Hash identifier: beYs9iSbqty7sjZ+elXLTrKW2KWPemFi3702/MVOZTQ=
Subject key identifier: 6F:0F:F4:95:6A:76:15:92:E4:12:EE:3F:E4:5A:97:66:64:E3:BF:0B
Certificate issuer: /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial: 0186CBD6206491AF203F3AEC4EB1C6A2B02A
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/bw_0lWp2FZLkEu4_5FqXZmTjvws.roa
Signing time: Fri 10 Mar 2023 14:04:13 +0000
ROA not before: Fri 10 Mar 2023 14:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:d6:20:64:91:af:20:3f:3a:ec:4e:b1:c6:a2:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
Validity
Not Before: Mar 10 14:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f0ff4956a761592e412ee3fe45a976664e3bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:5b:df:23:ca:ae:1a:51:6c:69:2d:bd:8c:
2d:53:0d:dc:c6:4e:26:7b:26:d9:5e:98:cd:91:69:
18:30:84:7b:d3:d4:ad:37:68:52:ea:21:20:11:6f:
5a:63:fb:af:1a:b3:fd:f0:c2:71:98:c6:9b:74:a2:
25:bb:1b:a2:de:6c:e8:44:d3:3a:0b:31:1c:06:9c:
4a:b9:26:5a:a1:98:5e:e6:b1:1b:38:8f:36:05:f5:
de:00:fe:85:f2:d2:ea:7b:b1:72:99:c6:d8:c8:1f:
f4:22:0d:dc:e1:fe:32:ae:74:30:54:b1:31:25:b9:
32:07:7e:d3:2c:77:a2:64:80:a0:78:c7:55:0c:c0:
53:85:f6:c8:3f:6c:d3:58:46:28:6a:10:26:5d:18:
88:90:d9:c4:6b:57:6e:38:ad:f7:6a:26:ef:9c:c5:
c8:7e:9c:e0:44:ed:bf:db:6d:54:76:fb:6f:69:c8:
60:24:91:b3:a0:3d:84:4e:a0:58:5d:b2:e0:2b:41:
6d:0e:36:29:e9:b0:16:0c:d2:b9:8d:e2:a2:20:cd:
e5:89:99:22:97:2e:02:cb:a9:71:48:20:e2:ac:9d:
7a:bb:3c:da:0e:d7:a4:b4:ac:b0:e1:d0:27:0b:03:
a0:a7:e6:89:a9:d5:c3:ca:af:15:95:13:e1:ba:f4:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:F4:95:6A:76:15:92:E4:12:EE:3F:E4:5A:97:66:64:E3:BF:0B
X509v3 Authority Key Identifier:
keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/bw_0lWp2FZLkEu4_5FqXZmTjvws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f5:58:d5:f2:ad:fd:3c:21:da:15:11:a8:ff:2d:58:70:f9:
e8:11:65:11:99:92:5b:3e:fb:8b:6f:a4:83:cc:42:96:17:49:
ac:86:b7:fc:27:46:ca:84:d1:73:5c:4d:98:3d:e7:d8:01:0e:
0c:99:13:8e:2d:74:db:b5:e2:fe:99:8a:8c:0c:17:7a:37:5e:
83:cb:70:15:34:d2:eb:43:76:6d:ff:7d:e8:87:a1:8f:cb:3e:
b5:9f:4c:84:b1:ec:37:ed:56:52:ff:45:bf:c7:7b:af:71:7f:
64:b1:66:72:ae:71:0e:bd:5c:3d:48:f4:2f:f3:f9:0b:47:4e:
44:83:04:9f:79:34:e2:85:31:dd:58:cf:c8:31:79:00:48:5c:
b6:6f:ac:30:c3:e9:a1:50:65:6d:36:92:96:f7:7a:67:23:e7:
48:68:9d:39:e3:e6:b7:28:70:34:94:f0:14:49:c8:91:ea:5b:
e9:3f:ce:08:74:b8:ff:52:ff:d5:75:a0:d4:6a:1a:4b:42:52:
40:98:46:08:3c:1c:3d:3c:11:ac:7f:c8:9d:93:09:7a:34:62:
c9:29:d5:1a:ca:05:24:b3:15:65:af:ba:cb:21:9a:ff:67:64:
cc:8a:28:79:7d:fc:bb:dd:05:96:ab:75:c3:f2:c0:3c:fc:1e:
25:38:fa:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbL1iBkka8gPzrsTrHGorAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGJiYTZkMmUxMTE3MTMzNTQxN2NhYTc1ODE4OWYwY2Y0
N2E0NDQwHhcNMjMwMzEwMTQwNDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjBmZjQ5NTZhNzYxNTkyZTQxMmVlM2ZlNDVhOTc2NjY0ZTNiZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu9b3yPKrhpRbGktvYwtUw3cxk4m
eybZXpjNkWkYMIR709StN2hS6iEgEW9aY/uvGrP98MJxmMabdKIluxui3mzoRNM6
CzEcBpxKuSZaoZhe5rEbOI82BfXeAP6F8tLqe7FymcbYyB/0Ig3c4f4yrnQwVLEx
JbkyB37TLHeiZICgeMdVDMBThfbIP2zTWEYoahAmXRiIkNnEa1duOK33aibvnMXI
fpzgRO2/221UdvtvachgJJGzoD2ETqBYXbLgK0FtDjYp6bAWDNK5jeKiIM3liZki
ly4Cy6lxSCDirJ16uzzaDtektKyw4dAnCwOgp+aJqdXDyq8VlRPhuvS11QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8P9JVqdhWS5BLuP+Ral2Zk478LMB8GA1UdIwQY
MBaAFJ4Lum0uERcTNUF8qnWBifDPR6REMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmd1NmJTNFJGeE0xUVh5cWRZR0o4TTlIcEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wNjQ2MmQtNWFhMy00ZDZkLWIyMTkt
ODBkODdmYTVlYWUyLzEvYndfMGxXcDJGWkxrRXU0XzVGcVhabVRqdndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wNjQ2MmQtNWFhMy00ZDZkLWIyMTktODBkODdmYTVlYWUy
LzEvbmd1NmJTNFJGeE0xUVh5cWRZR0o4TTlIcEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPNMA0G
CSqGSIb3DQEBCwUAA4IBAQAi9VjV8q39PCHaFRGo/y1YcPnoEWURmZJbPvuLb6SD
zEKWF0mshrf8J0bKhNFzXE2YPefYAQ4MmROOLXTbteL+mYqMDBd6N16Dy3AVNNLr
Q3Zt/33oh6GPyz61n0yEsew37VZS/0W/x3uvcX9ksWZyrnEOvVw9SPQv8/kLR05E
gwSfeTTihTHdWM/IMXkASFy2b6www+mhUGVtNpKW93pnI+dIaJ054+a3KHA0lPAU
SciR6lvpP84IdLj/Uv/VdaDUahpLQlJAmEYIPBw9PBGsf8idkwl6NGLJKdUaygUk
sxVlr7rLIZr/Z2TMiih5ffy73QWWq3XD8sA8/B4lOPqb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:32 2024 by rpki-client on console-ams.rpki-client.org