Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/FJnvgUpRG3PdwQPJ6vPnEwY8EOc.roa
File: FJnvgUpRG3PdwQPJ6vPnEwY8EOc.roa (raw, json)
Hash identifier: jQ1Iilt3+g4SC0r9eNEcbHGatFeaJF5gEufa8DuE8vI=
Subject key identifier: 14:99:EF:81:4A:51:1B:73:DD:C1:03:C9:EA:F3:E7:13:06:3C:10:E7
Certificate issuer: /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial: 0185CDEDFC6636978A2C46BC6D8D06C3E313
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/FJnvgUpRG3PdwQPJ6vPnEwY8EOc.roa
Signing time: Fri 20 Jan 2023 06:46:43 +0000
ROA not before: Fri 20 Jan 2023 06:46:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 146.19.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:ed:fc:66:36:97:8a:2c:46:bc:6d:8d:06:c3:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Validity
Not Before: Jan 20 06:46:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1499ef814a511b73ddc103c9eaf3e713063c10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:01:d7:be:0a:02:04:3e:0d:0f:86:51:48:
f5:be:25:3a:97:77:a6:db:d1:ce:71:03:63:15:32:
5f:55:c6:4a:b3:ba:ae:d2:ab:32:4d:10:ec:d4:a6:
a1:d1:8c:c9:33:69:ef:e8:8e:68:05:20:fa:4b:8a:
87:0b:11:42:41:ac:62:3e:19:a8:e9:6d:6e:a7:ba:
b7:84:7a:11:ef:17:12:e7:21:54:2b:d6:29:5e:1b:
fe:8d:c2:85:8a:49:66:92:0a:c4:2a:0c:0d:91:1c:
5b:0b:59:71:fc:91:bd:73:af:21:5d:55:8c:f1:de:
8f:31:99:ca:17:d1:f9:1f:41:cf:b5:15:2a:74:9b:
fc:d8:27:bd:15:44:b1:13:55:b1:7b:28:0f:d5:13:
ee:b2:66:87:37:f5:72:a4:c8:50:7b:69:9a:b3:7e:
c0:57:d7:e4:b6:c1:17:7f:a3:c7:6f:77:b6:bc:d5:
95:6c:b9:d0:52:d4:0f:8c:32:ca:30:a0:96:b3:76:
0d:0c:2c:b9:bc:ce:ae:04:14:2d:20:bf:47:36:50:
4b:9f:e6:95:e0:95:8e:c1:c4:ca:70:f5:c8:1a:d8:
dc:0b:8e:57:e5:19:28:95:d2:53:00:86:01:89:67:
9f:85:7a:d8:1a:84:d4:54:c1:0d:2e:5b:8a:e8:01:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:EF:81:4A:51:1B:73:DD:C1:03:C9:EA:F3:E7:13:06:3C:10:E7
X509v3 Authority Key Identifier:
keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/FJnvgUpRG3PdwQPJ6vPnEwY8EOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.135.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:c6:f9:a8:da:1f:b9:5a:88:4c:e5:81:a5:7c:5e:56:d3:
a1:ee:c1:96:fd:a9:d5:3e:7d:d7:61:a5:b1:1a:46:97:59:35:
97:c1:b8:b7:8a:0e:ce:e4:71:dd:54:db:6e:9d:c9:d9:bd:18:
ea:97:c9:f7:39:2e:b0:1f:ee:5e:3e:d8:d9:c7:07:a9:91:6f:
f0:33:54:0f:b6:0d:3e:35:6d:e2:ad:96:0f:1a:4d:3e:75:c3:
65:dc:29:fd:77:2d:b6:49:26:2f:ef:af:36:5d:5a:d4:0f:fd:
4e:cc:e0:57:1a:1d:a4:40:3a:d5:fd:aa:7d:5e:32:ae:c6:19:
71:af:99:c1:c3:42:1b:5d:6b:f1:42:0b:f1:4c:02:ad:25:f2:
29:53:65:21:ae:8d:ba:0d:69:ef:13:3e:fb:32:73:59:bf:93:
c2:f6:8f:b4:62:91:a6:d4:e1:31:25:14:58:2a:ad:cf:d5:70:
17:00:12:f3:22:9d:b9:b4:36:db:9b:6b:f1:69:67:82:4f:fb:
43:fe:fb:f3:9c:36:4d:3b:9d:bc:74:37:85:60:11:f2:61:53:
7c:d9:50:4e:ca:68:b2:a1:3c:88:e6:27:e0:25:80:13:7c:3a:
40:8a:87:73:0a:29:b0:6f:0d:e7:39:74:ee:40:ba:ce:b2:7b:
d4:31:0e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXN7fxmNpeKLEa8bY0Gw+MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmI0NWQ0NjI1MDMyMWYyZDY4MDFlMWNjZDg4ODYxYWZk
NmQ1MmUwHhcNMjMwMTIwMDY0NjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk5ZWY4MTRhNTExYjczZGRjMTAzYzllYWYzZTcxMzA2M2MxMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwMB174KAgQ+DQ+GUUj1viU6l3em
29HOcQNjFTJfVcZKs7qu0qsyTRDs1Kah0YzJM2nv6I5oBSD6S4qHCxFCQaxiPhmo
6W1up7q3hHoR7xcS5yFUK9YpXhv+jcKFiklmkgrEKgwNkRxbC1lx/JG9c68hXVWM
8d6PMZnKF9H5H0HPtRUqdJv82Ce9FUSxE1WxeygP1RPusmaHN/VypMhQe2mas37A
V9fktsEXf6PHb3e2vNWVbLnQUtQPjDLKMKCWs3YNDCy5vM6uBBQtIL9HNlBLn+aV
4JWOwcTKcPXIGtjcC45X5RkoldJTAIYBiWefhXrYGoTUVMENLluK6AF7sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSZ74FKURtz3cEDyerz5xMGPBDnMB8GA1UdIwQY
MBaAFAMrRdRiUDIfLWgB4czYiGGv1tUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXl0RjFHSlFNaDh0YUFIaHpOaUlZYV9XMVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81ZTMyMGEtMmZiNi00YzFmLWFiOGMt
NTgyNDc1MjdhMTgwLzEvRkpudmdVcFJHM1Bkd1FQSjZ2UG5Fd1k4RU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81ZTMyMGEtMmZiNi00YzFmLWFiOGMtNTgyNDc1MjdhMTgw
LzEvQXl0RjFHSlFNaDh0YUFIaHpOaUlZYV9XMVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOHMA0G
CSqGSIb3DQEBCwUAA4IBAQAWiMb5qNofuVqITOWBpXxeVtOh7sGW/anVPn3XYaWx
GkaXWTWXwbi3ig7O5HHdVNtuncnZvRjql8n3OS6wH+5ePtjZxwepkW/wM1QPtg0+
NW3irZYPGk0+dcNl3Cn9dy22SSYv7682XVrUD/1OzOBXGh2kQDrV/ap9XjKuxhlx
r5nBw0IbXWvxQgvxTAKtJfIpU2Uhro26DWnvEz77MnNZv5PC9o+0YpGm1OExJRRY
Kq3P1XAXABLzIp25tDbbm2vxaWeCT/tD/vvznDZNO528dDeFYBHyYVN82VBOymiy
oTyI5ifgJYATfDpAiodzCimwbw3nOXTuQLrOsnvUMQ4z
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:22 2025 by rpki-client