Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/w2pDqJj2jo5h1mQKsyI4BpxPvsY.roa
File: w2pDqJj2jo5h1mQKsyI4BpxPvsY.roa (raw, json)
Hash identifier: 5Ihgjd8QMY8L24BmVS3OGv5ZEb3UJu4jR1iTpyzDbbI=
Subject key identifier: C3:6A:43:A8:98:F6:8E:8E:61:D6:64:0A:B3:22:38:06:9C:4F:BE:C6
Certificate issuer: /CN=78745e4f905eb4e85b34d95a516ba84f9224d645
Certificate serial: 01856F9DD3FE9BC5A026AA51F939E931E41C
Authority key identifier: 78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/w2pDqJj2jo5h1mQKsyI4BpxPvsY.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d3:fe:9b:c5:a0:26:aa:51:f9:39:e9:31:e4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78745e4f905eb4e85b34d95a516ba84f9224d645
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c36a43a898f68e8e61d6640ab32238069c4fbec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:95:09:8e:e6:1c:84:d7:aa:c8:a2:18:81:
e2:27:38:50:eb:c8:ba:cf:b1:80:e3:e1:d0:a2:9f:
4d:a1:94:d1:67:61:74:e7:9b:da:e1:7d:16:bf:91:
35:3d:69:4a:ff:fb:e0:3e:ec:3b:ce:30:f1:5a:3e:
0e:24:63:20:4d:35:f9:33:ba:3c:cd:73:9e:e2:7a:
7b:b3:4c:5b:c3:d0:56:b3:99:21:03:92:7e:0c:c1:
12:4c:98:8c:47:2a:c2:20:8b:a3:dd:16:bd:33:4b:
95:72:10:e3:c4:5c:56:ef:4f:53:4e:7c:06:66:75:
99:f8:f3:ae:d1:0d:de:54:dc:db:f7:c1:e2:03:eb:
4b:dd:7f:6e:0d:7d:b9:84:12:10:e9:e6:3a:df:47:
3a:8c:bc:7f:35:1e:71:2b:ca:64:95:7a:46:61:06:
22:88:24:d7:49:46:38:db:ac:86:d4:fa:f5:ec:66:
d0:9f:de:89:12:00:7c:16:04:f0:3b:1e:36:8b:48:
4f:3f:29:73:2d:5c:5b:5d:cd:35:95:90:dd:3b:53:
51:ce:eb:6c:32:b5:2b:ed:d2:a3:79:ac:8f:01:aa:
93:ee:bc:5a:67:6c:6a:a0:28:00:ab:6c:cb:4e:3b:
89:a6:39:a5:00:76:9b:d6:3d:fd:16:c4:39:ef:2f:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:43:A8:98:F6:8E:8E:61:D6:64:0A:B3:22:38:06:9C:4F:BE:C6
X509v3 Authority Key Identifier:
keyid:78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/w2pDqJj2jo5h1mQKsyI4BpxPvsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/eHReT5BetOhbNNlaUWuoT5Ik1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.31.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b3:c3:35:6b:92:62:62:54:80:7c:52:d9:48:1c:9a:08:d1:
62:cd:04:2a:79:cf:31:64:b4:3b:88:4a:4b:be:98:5f:fe:28:
c4:31:5d:56:ec:46:90:97:1c:2c:9b:8a:ba:b7:49:ad:00:14:
ff:43:f9:87:85:ea:7b:47:25:f8:52:6f:07:10:9e:de:16:e1:
9a:b4:27:0a:00:f9:2f:9b:3d:1e:ed:33:3c:d8:5f:92:1a:41:
5a:57:1e:c9:e3:76:d5:d1:b9:38:60:c9:4c:12:e2:b8:a4:5a:
34:14:11:86:e1:5c:1b:83:82:1e:97:cc:28:cf:ac:3e:46:5b:
cb:fd:35:72:d0:51:14:32:44:74:5d:a6:b1:e7:f4:4a:a0:46:
32:9d:5e:b6:d1:b2:64:28:cb:d6:49:5b:3d:60:d2:2b:a7:b9:
c8:44:43:f5:51:02:e9:d2:08:cf:29:cc:87:8d:a7:d2:15:f8:
1a:78:46:bb:df:2a:e8:ad:fd:3b:b8:8d:35:19:d3:8b:ee:8d:
ba:87:fb:0b:fb:65:8d:c5:29:f3:3b:e1:05:29:7b:43:43:36:
f9:b3:3a:b3:e0:ee:3f:58:71:f3:b9:47:86:53:48:6e:07:5d:
a0:12:33:2b:37:be:bf:0f:03:3f:9c:92:96:4c:86:4e:05:c3:
00:f3:24:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvndP+m8WgJqpR+TnpMeQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzQ1ZTRmOTA1ZWI0ZTg1YjM0ZDk1YTUxNmJhODRmOTIy
NGQ2NDUwHhcNMjMwMTAxMjMxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzZhNDNhODk4ZjY4ZThlNjFkNjY0MGFiMzIyMzgwNjljNGZiZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OKVCY7mHITXqsiiGIHiJzhQ68i6
z7GA4+HQop9NoZTRZ2F055va4X0Wv5E1PWlK//vgPuw7zjDxWj4OJGMgTTX5M7o8
zXOe4np7s0xbw9BWs5khA5J+DMESTJiMRyrCIIuj3Ra9M0uVchDjxFxW709TTnwG
ZnWZ+POu0Q3eVNzb98HiA+tL3X9uDX25hBIQ6eY630c6jLx/NR5xK8pklXpGYQYi
iCTXSUY426yG1Pr17GbQn96JEgB8FgTwOx42i0hPPylzLVxbXc01lZDdO1NRzuts
MrUr7dKjeayPAaqT7rxaZ2xqoCgAq2zLTjuJpjmlAHab1j39FsQ57y+AXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNqQ6iY9o6OYdZkCrMiOAacT77GMB8GA1UdIwQY
MBaAFHh0Xk+QXrToWzTZWlFrqE+SJNZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhSZVQ1QmV0T2hiTk5sYVVXdW9UNUlrMWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9kYWQ5MmUtMjY3ZC00NWRlLTg2ZDAt
NDJhNjMyMmU3NzcxLzEvdzJwRHFKajJqbzVoMW1RS3N5STRCcHhQdnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9kYWQ5MmUtMjY3ZC00NWRlLTg2ZDAtNDJhNjMyMmU3Nzcx
LzEvZUhSZVQ1QmV0T2hiTk5sYVVXdW9UNUlrMWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMfMA0G
CSqGSIb3DQEBCwUAA4IBAQBDs8M1a5JiYlSAfFLZSByaCNFizQQqec8xZLQ7iEpL
vphf/ijEMV1W7EaQlxwsm4q6t0mtABT/Q/mHhep7RyX4Um8HEJ7eFuGatCcKAPkv
mz0e7TM82F+SGkFaVx7J43bV0bk4YMlMEuK4pFo0FBGG4Vwbg4Iel8woz6w+RlvL
/TVy0FEUMkR0Xaax5/RKoEYynV620bJkKMvWSVs9YNIrp7nIREP1UQLp0gjPKcyH
jafSFfgaeEa73yrorf07uI01GdOL7o26h/sL+2WNxSnzO+EFKXtDQzb5szqz4O4/
WHHzuUeGU0huB12gEjMrN76/DwM/nJKWTIZOBcMA8yQt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:26 2024 by rpki-client on console-ams.rpki-client.org