Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/d8xWYMHeClrU33CgV2s11eH61V0.roa
File: d8xWYMHeClrU33CgV2s11eH61V0.roa (raw, json)
Hash identifier: 8chXG4dFSYtSojZITNtLa8ddcnE3rD2LCrerqxvVV3w=
Subject key identifier: 77:CC:56:60:C1:DE:0A:5A:D4:DF:70:A0:57:6B:35:D5:E1:FA:D5:5D
Certificate issuer: /CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Certificate serial: 6996F1
Authority key identifier: 81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/d8xWYMHeClrU33CgV2s11eH61V0.roa
Signing time: Sat 01 Jan 2022 01:03:10 +0000
ROA not before: Sat 01 Jan 2022 01:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6919921 (0x6996f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Validity
Not Before: Jan 1 01:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77cc5660c1de0a5ad4df70a0576b35d5e1fad55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:55:f1:b2:79:07:63:74:bf:60:10:ae:16:
e3:79:6c:b1:5e:08:91:8d:c0:fc:6c:e9:45:43:0f:
af:23:c5:22:0a:93:c9:45:bc:8b:f9:87:e3:37:04:
2b:6b:20:76:9c:97:40:b6:fd:1b:f1:25:91:97:be:
c3:19:46:d8:27:ac:b0:a1:cf:84:71:f1:be:89:06:
77:c4:98:7d:2b:fe:d7:e0:94:49:89:63:a6:87:73:
6a:b0:5d:57:d5:ac:33:9c:78:7d:28:c3:a1:93:16:
56:8d:2c:f5:29:04:31:b1:ac:63:73:1e:1b:7e:29:
f8:52:e8:01:90:0a:73:29:ab:a6:34:95:b6:1a:29:
3e:de:a7:7e:ec:55:b4:5e:a1:02:db:18:97:88:6a:
26:08:94:9f:a7:34:e9:59:4e:a2:cd:18:a0:8b:ec:
c3:d9:1d:36:a0:8b:48:26:a9:a7:26:e8:58:f0:33:
bb:8c:93:06:50:6f:6f:2f:b3:7c:ae:2d:a5:0b:17:
61:51:66:63:d4:2c:8b:17:09:35:21:d0:93:a0:3a:
4f:72:d8:31:be:63:b3:67:e0:a1:18:a5:27:89:f1:
b5:8a:d4:94:30:4d:69:0e:26:85:eb:51:59:04:14:
16:15:68:02:8b:b9:8d:8c:a2:15:5f:23:1c:f0:bf:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:56:60:C1:DE:0A:5A:D4:DF:70:A0:57:6B:35:D5:E1:FA:D5:5D
X509v3 Authority Key Identifier:
keyid:81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/d8xWYMHeClrU33CgV2s11eH61V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c9:6b:61:08:72:2f:7f:fd:fa:b2:f3:cf:1b:be:d0:2c:cc:
1a:b0:45:5e:69:f0:7b:dc:28:b9:a5:70:29:1e:1b:86:3e:18:
1e:74:5e:73:16:10:d5:6d:25:fe:e3:32:be:35:10:b6:73:7b:
8d:18:64:97:fa:e3:66:6e:a3:1d:da:46:d6:81:c5:50:72:d1:
bb:26:1f:a3:58:bc:d3:95:81:98:8e:1c:35:8c:63:42:1a:44:
71:ae:08:bd:dd:70:83:4f:50:3a:84:32:9e:4f:26:6a:ce:fc:
24:fb:4b:c2:a2:1b:54:14:dc:36:1e:b8:c8:57:a5:16:44:73:
10:1a:3c:d6:b4:c4:4d:30:43:35:b0:12:5c:d5:b2:4f:3e:20:
9f:81:74:ac:f4:ae:70:a7:e5:b4:f4:d2:fd:66:0a:3c:6d:9f:
da:9f:66:c1:38:db:2e:7a:eb:40:02:74:c3:82:4f:22:33:f3:
f6:08:43:17:0d:e1:c9:02:95:93:8d:48:79:8a:56:56:64:50:
4b:1c:aa:0e:bf:ee:6c:dd:e0:71:b0:0b:4d:44:8a:bf:27:f5:
72:3b:5d:d2:ab:1c:9d:1f:f7:cf:16:c5:2d:b1:56:61:8d:04:
5b:3d:c3:75:68:7e:d8:71:58:10:df:f4:84:2d:d2:c6:ad:d9:
aa:be:e9:cb
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDaZbxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgx
N2Y4ZThmMzFhMDMzODliM2Q2OTFlZjVhMDBlODJlOTg5ZTM1MGYwHhcNMjIwMTAx
MDEwMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3N2NjNTY2MGMxZGUw
YTVhZDRkZjcwYTA1NzZiMzVkNWUxZmFkNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7X5V8bJ5B2N0v2AQrhbjeWyxXgiRjcD8bOlFQw+vI8UiCpPJ
RbyL+YfjNwQrayB2nJdAtv0b8SWRl77DGUbYJ6ywoc+EcfG+iQZ3xJh9K/7X4JRJ
iWOmh3NqsF1X1awznHh9KMOhkxZWjSz1KQQxsaxjcx4bfin4UugBkApzKaumNJW2
Gik+3qd+7FW0XqEC2xiXiGomCJSfpzTpWU6izRigi+zD2R02oItIJqmnJuhY8DO7
jJMGUG9vL7N8ri2lCxdhUWZj1CyLFwk1IdCToDpPctgxvmOzZ+ChGKUnifG1itSU
ME1pDiaF61FZBBQWFWgCi7mNjKIVXyMc8L+OxQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHfMVmDB3gpa1N9woFdrNdXh+tVdMB8GA1UdIwQYMBaAFIF/jo8xoDOJs9aR
71oA6C6YnjUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Z1gtT2p6R2dNNG16MXBIdldnRG9McGllTlE4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zNC9hNjZiM2ItOGMzYS00NDQ2LTgxMGUtMDY3YWVjODVjYTY3LzEv
ZDh4V1lNSGVDbHJVMzNDZ1YyczExZUg2MVYwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9h
NjZiM2ItOGMzYS00NDQ2LTgxMGUtMDY3YWVjODVjYTY3LzEvZ1gtT2p6R2dNNG16
MXBIdldnRG9McGllTlE4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPQMA0GCSqGSIb3DQEBCwUAA4IB
AQBeyWthCHIvf/36svPPG77QLMwasEVeafB73Ci5pXApHhuGPhgedF5zFhDVbSX+
4zK+NRC2c3uNGGSX+uNmbqMd2kbWgcVQctG7Jh+jWLzTlYGYjhw1jGNCGkRxrgi9
3XCDT1A6hDKeTyZqzvwk+0vCohtUFNw2HrjIV6UWRHMQGjzWtMRNMEM1sBJc1bJP
PiCfgXSs9K5wp+W09NL9Zgo8bZ/an2bBONsueutAAnTDgk8iM/P2CEMXDeHJApWT
jUh5ilZWZFBLHKoOv+5s3eBxsAtNRIq/J/VyO13SqxydH/fPFsUtsVZhjQRbPcN1
aH7YcVgQ3/SELdLGrdmqvunL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:22 2024 by rpki-client on console-ams.rpki-client.org