Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/h37DtqYtrXsmQWr1TqhB4oMJ-6I.roa
File: h37DtqYtrXsmQWr1TqhB4oMJ-6I.roa (raw, json)
Hash identifier: 8bsK1A5wO6yMo0SV1UdHFuIh/zgqEIOd0rI13Ib8jl4=
Subject key identifier: 87:7E:C3:B6:A6:2D:AD:7B:26:41:6A:F5:4E:A8:41:E2:83:09:FB:A2
Certificate issuer: /CN=c43256a81911d13cd80c53673e0517ff225c6d08
Certificate serial: 036C012F
Authority key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/h37DtqYtrXsmQWr1TqhB4oMJ-6I.roa
Signing time: Mon 31 Jan 2022 11:48:32 +0000
ROA not before: Mon 31 Jan 2022 11:48:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 193.239.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57409839 (0x36c012f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Validity
Not Before: Jan 31 11:48:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=877ec3b6a62dad7b26416af54ea841e28309fba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:81:1e:96:ff:72:04:d4:12:e1:19:4e:d7:
10:e3:b3:75:25:c7:a6:d0:1d:a9:35:e6:a3:79:91:
c8:e9:d5:0c:4e:76:cf:15:b7:66:c9:6b:82:68:76:
e3:0f:c9:1c:ad:72:82:4b:f8:4f:22:8c:d8:1a:e5:
87:c0:20:a0:c2:5c:c2:b7:72:91:09:5d:aa:71:03:
4f:22:37:a8:5c:2f:e8:e8:47:80:85:1d:c2:32:a3:
12:f0:8a:2b:17:a3:bb:6c:b7:8d:92:be:a5:77:4a:
1b:f7:8d:c6:79:36:6d:eb:e9:a6:31:0a:77:4f:72:
d5:d7:57:4a:f8:e1:39:37:93:61:8a:90:3e:31:29:
0c:90:bf:58:1f:a2:a4:62:59:42:d5:09:8c:5e:e9:
9c:2a:b9:44:ad:a1:95:08:1e:c2:47:5e:00:29:a2:
3f:7e:f1:41:43:4a:bc:82:f7:cf:21:1a:ca:08:c1:
89:46:cc:b9:21:9f:ad:39:76:0b:39:8c:fe:58:51:
b9:24:92:55:28:28:b0:c1:31:cc:4e:c7:91:34:c3:
5b:a8:4c:61:20:02:6f:df:bc:07:f1:f1:17:4b:dd:
fa:01:28:38:c9:49:b5:79:70:3f:66:25:8e:a1:ba:
85:22:da:c0:14:96:24:95:8f:9d:07:0d:6a:d5:61:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:C3:B6:A6:2D:AD:7B:26:41:6A:F5:4E:A8:41:E2:83:09:FB:A2
X509v3 Authority Key Identifier:
keyid:C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/h37DtqYtrXsmQWr1TqhB4oMJ-6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1d:5e:35:e5:1b:0d:49:2a:fb:66:22:97:e2:a7:c1:45:4e:
95:6f:6a:1a:ff:a6:bf:a4:e4:34:78:ed:29:c3:7b:07:ff:b8:
e6:fe:57:2e:51:fc:21:f4:d4:db:09:d4:c7:17:0a:20:d3:67:
28:da:6b:1d:b2:fd:bb:29:e5:30:33:fc:8b:5c:9c:c0:56:75:
af:44:0d:24:d6:82:6b:c2:1c:b9:89:66:e3:e2:96:16:8f:0a:
8d:da:5a:f5:82:f6:2b:7d:9e:99:53:58:6c:ec:93:e4:ec:3c:
f8:f3:fc:5e:07:7d:61:32:c4:f2:58:47:3b:c2:35:f0:94:b5:
20:54:c6:67:d6:68:ec:14:d0:af:36:e3:0f:3f:ad:82:74:ce:
a1:26:0a:c2:90:89:d4:e8:00:96:c0:29:a8:d9:54:b8:46:0b:
ac:32:66:b3:f1:57:4d:38:a6:40:86:88:7e:e6:02:73:1d:1d:
9a:ff:3c:4f:65:48:c9:dd:38:fe:26:fe:dc:f3:68:cd:ca:6f:
c9:5b:a9:77:6f:62:d4:2b:5a:8a:64:1c:94:be:f1:58:fa:f7:
cc:bf:31:b6:af:4b:ce:c3:17:d1:b5:14:6b:62:95:cf:b8:0d:
53:a3:ea:c7:b1:72:25:57:fb:2d:94:d2:05:45:07:c3:73:0c:
18:ec:7e:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2wBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDMyNTZhODE5MTFkMTNjZDgwYzUzNjczZTA1MTdmZjIyNWM2ZDA4MB4XDTIyMDEz
MTExNDgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODc3ZWMzYjZhNjJk
YWQ3YjI2NDE2YWY1NGVhODQxZTI4MzA5ZmJhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6MgR6W/3IE1BLhGU7XEOOzdSXHptAdqTXmo3mRyOnVDE52
zxW3Zslrgmh24w/JHK1ygkv4TyKM2Brlh8AgoMJcwrdykQldqnEDTyI3qFwv6OhH
gIUdwjKjEvCKKxeju2y3jZK+pXdKG/eNxnk2bevppjEKd09y1ddXSvjhOTeTYYqQ
PjEpDJC/WB+ipGJZQtUJjF7pnCq5RK2hlQgewkdeACmiP37xQUNKvIL3zyEaygjB
iUbMuSGfrTl2CzmM/lhRuSSSVSgosMExzE7HkTTDW6hMYSACb9+8B/HxF0vd+gEo
OMlJtXlwP2YljqG6hSLawBSWJJWPnQcNatVhJocCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSHfsO2pi2teyZBavVOqEHigwn7ojAfBgNVHSMEGDAWgBTEMlaoGRHRPNgM
U2c+BRf/IlxtCDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hESldxQmtSMFR6WURGTm5QZ1VYX3lKY2JRZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvZjVkM2ZiLWM4YzctNDJlNC05ZmY4LTYwMThmYWY0NjRmYi8x
L2gzN0R0cVl0clhzbVFXcjFUcWhCNG9NSi02SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
ZjVkM2ZiLWM4YzctNDJlNC05ZmY4LTYwMThmYWY0NjRmYi8xL3hESldxQmtSMFR6
WURGTm5QZ1VYX3lKY2JRZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHvkjANBgkqhkiG9w0BAQsFAAOC
AQEAXR1eNeUbDUkq+2Yil+KnwUVOlW9qGv+mv6TkNHjtKcN7B/+45v5XLlH8IfTU
2wnUxxcKINNnKNprHbL9uynlMDP8i1ycwFZ1r0QNJNaCa8IcuYlm4+KWFo8Kjdpa
9YL2K32emVNYbOyT5Ow8+PP8Xgd9YTLE8lhHO8I18JS1IFTGZ9Zo7BTQrzbjDz+t
gnTOoSYKwpCJ1OgAlsApqNlUuEYLrDJms/FXTTimQIaIfuYCcx0dmv88T2VIyd04
/ib+3PNozcpvyVupd29i1CtaimQclL7xWPr3zL8xtq9LzsMX0bUUa2KVz7gNU6Pq
x7FyJVf7LZTSBUUHw3MMGOx+Jg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:41 2023 by rpki-client on console-ams.rpki-client.org