Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/146lwioGMC2RvQpnBXQ3IYtnt14.roa
File: 146lwioGMC2RvQpnBXQ3IYtnt14.roa (raw, json)
Hash identifier: INU4ARax0xelF3F/SOGuUnzKkRhfZyx9di1jeMgvnKw=
Subject key identifier: D7:8E:A5:C2:2A:06:30:2D:91:BD:0A:67:05:74:37:21:8B:67:B7:5E
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018B9FE8CD9B3520704A9CF8F890F6F50CBE
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/146lwioGMC2RvQpnBXQ3IYtnt14.roa
Signing time: Sun 05 Nov 2023 14:35:16 +0000
ROA not before: Sun 05 Nov 2023 14:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9f:e8:cd:9b:35:20:70:4a:9c:f8:f8:90:f6:f5:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 5 14:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d78ea5c22a06302d91bd0a67057437218b67b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:c4:27:c6:fd:43:ff:81:3f:d9:76:7b:fa:
45:23:fd:db:79:33:0e:92:df:95:3e:7a:1a:8f:e5:
b7:14:96:75:1b:5f:b3:8f:73:02:82:e3:dc:fe:6c:
a9:46:d3:62:e4:6d:28:2e:e8:ac:22:e7:7c:dc:cf:
35:fa:9f:50:83:50:34:6f:03:4d:80:e7:f3:8a:60:
ea:13:f4:c1:d3:6a:df:8b:a6:05:2b:aa:9e:b1:49:
f4:3b:a8:53:64:ce:53:eb:eb:cd:86:90:15:f3:3d:
b6:16:c2:11:38:6f:00:c8:cd:24:ba:cb:a8:40:36:
28:07:03:96:7f:1b:d8:8b:cf:f4:cf:41:92:60:ae:
4d:25:f5:aa:ab:de:eb:73:f4:a3:48:bf:32:45:81:
b2:ba:c5:e6:f5:cd:7f:3a:4b:15:b0:21:5a:af:00:
c3:88:9f:e0:cd:0a:18:65:09:77:98:45:ef:7f:d9:
f3:47:4a:0a:ff:37:9d:e6:3b:16:79:0d:46:e7:c4:
46:b7:12:05:62:64:f9:26:52:d8:71:3e:12:1c:67:
ae:37:01:26:d3:d9:8d:77:6a:35:1a:85:9f:57:15:
fa:06:d1:4b:bc:cc:bf:4f:ca:5c:08:67:8d:f2:20:
5c:27:ff:84:ae:5d:14:46:7b:5e:23:ed:9e:1f:8b:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:A5:C2:2A:06:30:2D:91:BD:0A:67:05:74:37:21:8B:67:B7:5E
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/146lwioGMC2RvQpnBXQ3IYtnt14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.243.0/24
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
da:d5:a4:91:98:3a:9c:9c:11:dc:1d:86:57:2d:c2:4e:09:e3:
28:79:1a:be:ab:d9:2c:d3:23:da:19:7e:1c:a7:38:64:ea:13:
19:31:32:bb:9c:7f:ef:40:07:48:60:33:2b:39:18:41:bd:98:
b7:e5:05:e7:f0:27:b6:3a:17:2b:f0:ed:5b:7a:62:35:ac:3b:
e8:6d:01:da:9e:b6:4c:5d:cf:14:bb:6f:39:2b:cc:8f:6a:36:
03:5e:4d:d5:96:87:31:e9:2c:3a:c2:6a:83:30:58:ab:08:e3:
6d:0e:49:4f:bd:05:5e:51:1d:41:32:11:ff:e5:54:ee:08:b7:
91:c2:33:76:e6:4a:45:7e:a4:58:41:76:b5:42:a8:53:61:f3:
22:37:6f:14:d8:0e:dc:b8:90:82:d1:e2:8c:6e:51:ab:e9:e5:
f4:27:5c:0e:e6:9c:21:10:d7:68:71:05:80:f9:c0:d0:04:b2:
df:8e:e7:4e:5f:dd:9d:79:76:0f:2b:21:b7:97:29:41:b2:29:
0d:e8:d9:fb:3e:9d:11:5f:1e:eb:51:3a:bb:29:12:82:b3:b8:
2e:6f:d9:f2:34:aa:bf:cb:dd:64:db:aa:2d:4e:ed:06:55:bc:
ce:3b:43:c0:33:06:b6:fa:d7:0f:41:42:70:37:e4:38:6f:25:
03:13:0b:73
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYuf6M2bNSBwSpz4+JD29Qy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjMxMTA1MTQzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzhlYTVjMjJhMDYzMDJkOTFiZDBhNjcwNTc0MzcyMThiNjdiNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4bEJ8b9Q/+BP9l2e/pFI/3beTMO
kt+VPnoaj+W3FJZ1G1+zj3MCguPc/mypRtNi5G0oLuisIud83M81+p9Qg1A0bwNN
gOfzimDqE/TB02rfi6YFK6qesUn0O6hTZM5T6+vNhpAV8z22FsIROG8AyM0kusuo
QDYoBwOWfxvYi8/0z0GSYK5NJfWqq97rc/SjSL8yRYGyusXm9c1/OksVsCFarwDD
iJ/gzQoYZQl3mEXvf9nzR0oK/zed5jsWeQ1G58RGtxIFYmT5JlLYcT4SHGeuNwEm
09mNd2o1GoWfVxX6BtFLvMy/T8pcCGeN8iBcJ/+Erl0URnteI+2eH4sE1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNeOpcIqBjAtkb0KZwV0NyGLZ7deMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvMTQ2bHdpb0dNQzJSdlFwbkJYUTNJWXRudDE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW5N5AwQA
1HTzAwQA1HT1MA0GCSqGSIb3DQEBCwUAA4IBAQDa1aSRmDqcnBHcHYZXLcJOCeMo
eRq+q9ks0yPaGX4cpzhk6hMZMTK7nH/vQAdIYDMrORhBvZi35QXn8Ce2Ohcr8O1b
emI1rDvobQHanrZMXc8Uu285K8yPajYDXk3Vlocx6Sw6wmqDMFirCONtDklPvQVe
UR1BMhH/5VTuCLeRwjN25kpFfqRYQXa1QqhTYfMiN28U2A7cuJCC0eKMblGr6eX0
J1wO5pwhENdocQWA+cDQBLLfjudOX92deXYPKyG3lylBsikN6Nn7Pp0RXx7rUTq7
KRKCs7gub9nyNKq/y91k26otTu0GVbzOO0PAMwa2+tcPQUJwN+Q4byUDEwtz
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:23 2025 by rpki-client