Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/nUW1err2qudk_d88igUsPouz1Vo.roa
File: nUW1err2qudk_d88igUsPouz1Vo.roa (raw, json)
Hash identifier: AovE4zFDwRkjrACOO0/gFO1m5ToxvWH6JXzhT4sAvhQ=
Subject key identifier: 9D:45:B5:7A:BA:F6:AA:E7:64:FD:DF:3C:8A:05:2C:3E:8B:B3:D5:5A
Certificate issuer: /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial: C225
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/nUW1err2qudk_d88igUsPouz1Vo.roa
Signing time: Thu 03 Feb 2022 16:56:17 +0000
ROA not before: Thu 03 Feb 2022 16:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 146.19.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49701 (0xc225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Validity
Not Before: Feb 3 16:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d45b57abaf6aae764fddf3c8a052c3e8bb3d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:f7:3b:58:21:07:dd:0f:2a:b1:4f:2d:85:
68:d1:8e:92:dc:a5:76:fd:00:06:5e:0a:cf:66:63:
e6:53:ce:2d:8d:82:0e:ab:fa:15:27:6d:ba:2e:70:
fc:08:73:03:40:ef:70:b8:53:ed:3d:72:78:c9:6a:
ad:90:95:42:2f:f2:85:4a:d8:69:0c:0c:db:64:3a:
b7:dc:a0:3d:83:85:ff:91:95:0e:21:e6:b7:04:55:
25:08:04:38:e2:81:59:97:93:54:7a:47:ee:ab:fc:
5f:32:4a:8f:36:04:3e:0e:33:d9:bc:ae:b7:6c:46:
c0:e1:03:1b:f8:3c:7e:e0:d7:fb:c4:eb:84:91:6e:
31:1c:de:4a:d2:90:95:91:37:2f:3d:10:db:57:5a:
16:e6:ae:78:f1:b6:c8:45:a0:81:35:fe:5c:13:69:
a4:f6:dd:71:54:58:57:9c:e2:d8:63:05:1f:3d:59:
0d:1d:be:30:dc:64:c6:72:8a:b7:62:66:04:19:65:
98:17:e6:2e:db:64:cb:b8:07:48:0a:ee:52:23:a3:
42:41:07:45:8b:49:28:68:fd:7b:cd:0a:df:15:28:
e0:c3:36:ea:0c:37:cb:d4:33:98:31:8d:d2:b4:2d:
e3:0e:6b:f7:fd:6b:83:e6:2f:94:03:bd:08:51:fe:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:B5:7A:BA:F6:AA:E7:64:FD:DF:3C:8A:05:2C:3E:8B:B3:D5:5A
X509v3 Authority Key Identifier:
keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/nUW1err2qudk_d88igUsPouz1Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:4c:f5:41:8f:2a:26:7a:9d:ad:b8:dc:a9:b6:1b:57:0d:9f:
c1:a5:a4:6c:27:b6:1e:57:09:19:08:93:08:e6:3e:52:41:44:
df:11:fd:de:81:f6:ab:b7:76:5f:40:73:50:10:47:5d:85:5c:
44:06:41:a2:b2:26:1a:f4:f3:6f:25:57:2f:de:d1:7c:87:34:
4b:51:b8:a1:d0:66:19:8c:36:3c:e4:8b:59:eb:e0:62:82:2c:
1a:06:0f:da:d4:be:3f:df:2d:a7:ce:91:ce:27:46:24:e0:9b:
ed:e9:7b:45:5d:18:c7:96:11:85:15:39:6f:49:c0:7c:48:fc:
e1:c5:dd:00:14:f0:d0:18:81:47:c9:a4:e7:c9:0a:96:c2:7a:
c6:74:b3:9e:e7:b4:70:85:74:da:cd:ef:18:95:7b:21:aa:40:
86:56:e7:87:ec:ed:1e:cc:7f:ed:62:4f:f5:2d:4f:d8:92:ec:
eb:6f:d3:ec:05:88:09:26:77:7b:0b:f3:34:fc:17:c0:97:3f:
f8:09:09:08:81:39:e3:52:ba:a6:38:c6:d8:8b:5c:90:72:bd:
64:68:f9:76:67:0f:8d:40:e8:94:d1:80:47:5c:97:82:88:77:
99:23:63:f9:52:7a:9c:a3:f4:5a:20:e7:94:14:f0:a9:73:69:
0a:11:5c:f3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAMIlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
NzczYTEzN2Q1YmZiNTg2OWY1N2RhYzdmMzU5ZWMyODE4MDQ3YTQwHhcNMjIwMjAz
MTY1NjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZDQ1YjU3YWJhZjZh
YWU3NjRmZGRmM2M4YTA1MmMzZThiYjNkNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtc73O1ghB90PKrFPLYVo0Y6S3KV2/QAGXgrPZmPmU84tjYIO
q/oVJ226LnD8CHMDQO9wuFPtPXJ4yWqtkJVCL/KFSthpDAzbZDq33KA9g4X/kZUO
Iea3BFUlCAQ44oFZl5NUekfuq/xfMkqPNgQ+DjPZvK63bEbA4QMb+Dx+4Nf7xOuE
kW4xHN5K0pCVkTcvPRDbV1oW5q548bbIRaCBNf5cE2mk9t1xVFhXnOLYYwUfPVkN
Hb4w3GTGcoq3YmYEGWWYF+Yu22TLuAdICu5SI6NCQQdFi0koaP17zQrfFSjgwzbq
DDfL1DOYMY3StC3jDmv3/WuD5i+UA70IUf5/wwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJ1FtXq69qrnZP3fPIoFLD6Ls9VaMB8GA1UdIwQYMBaAFB93OhN9W/tYafV9
rH81nsKBgEekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SDNjNkUzMWItMWhwOVgyc2Z6V2V3b0dBUjZRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zNi9hMTE0NzctN2QxMC00N2U5LThiNWMtN2I3MjQ0ZTY5YTkzLzEv
blVXMWVycjJxdWRrX2Q4OGlnVXNQb3V6MVZvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9h
MTE0NzctN2QxMC00N2U5LThiNWMtN2I3MjQ0ZTY5YTkzLzEvSDNjNkUzMWItMWhw
OVgyc2Z6V2V3b0dBUjZRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOAMA0GCSqGSIb3DQEBCwUAA4IB
AQDXTPVBjyomep2tuNypthtXDZ/BpaRsJ7YeVwkZCJMI5j5SQUTfEf3egfart3Zf
QHNQEEddhVxEBkGisiYa9PNvJVcv3tF8hzRLUbih0GYZjDY85ItZ6+BigiwaBg/a
1L4/3y2nzpHOJ0Yk4Jvt6XtFXRjHlhGFFTlvScB8SPzhxd0AFPDQGIFHyaTnyQqW
wnrGdLOe57RwhXTaze8YlXshqkCGVueH7O0ezH/tYk/1LU/Ykuzrb9PsBYgJJnd7
C/M0/BfAlz/4CQkIgTnjUrqmOMbYi1yQcr1kaPl2Zw+NQOiU0YBHXJeCiHeZI2P5
Unqco/RaIOeUFPCpc2kKEVzz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:47 2024 by rpki-client on console-ams.rpki-client.org