Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/AvUrw9iJEzPu8eC_ABC3RnwboZo.roa
File: AvUrw9iJEzPu8eC_ABC3RnwboZo.roa (raw, json)
Hash identifier: 4whO+DNVlNzBI0HmeOxp3mbNXso06bQLtXHe8ExMjsg=
Subject key identifier: 02:F5:2B:C3:D8:89:13:33:EE:F1:E0:BF:00:10:B7:46:7C:1B:A1:9A
Certificate issuer: /CN=14d4a7766881a4313009b542cc284241982b9e29
Certificate serial: B67E
Authority key identifier: 14:D4:A7:76:68:81:A4:31:30:09:B5:42:CC:28:42:41:98:2B:9E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNSndmiBpDEwCbVCzChCQZgrnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/AvUrw9iJEzPu8eC_ABC3RnwboZo.roa
Signing time: Fri 18 Feb 2022 12:04:02 +0000
ROA not before: Fri 18 Feb 2022 12:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59460
IP address blocks: 194.146.4.0/24 maxlen: 24
194.146.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46718 (0xb67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4a7766881a4313009b542cc284241982b9e29
Validity
Not Before: Feb 18 12:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f52bc3d8891333eef1e0bf0010b7467c1ba19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:09:fb:a1:ff:f1:ef:0b:73:ba:b5:dd:81:
1e:7a:21:16:26:31:c3:23:3e:9d:3c:e9:06:ea:79:
db:75:5c:b8:bd:cb:0e:65:0d:68:90:ad:09:05:a8:
c2:e5:c8:ac:d2:54:5d:61:3f:f8:9c:45:91:4d:17:
de:dc:9c:b7:bd:8b:04:98:7e:6e:87:2d:8a:81:00:
15:08:7d:7a:ba:81:91:83:a7:d3:b8:2f:b9:7c:c7:
1c:5a:84:be:36:58:c6:f3:5c:8b:02:64:1b:81:47:
f7:be:3f:e9:79:81:6f:fb:6d:10:bc:90:1f:b5:12:
f7:c4:a1:2d:d5:e3:a0:7a:33:b6:9e:3e:12:0d:d0:
ee:ce:ee:b9:ca:0b:f5:e3:d6:e4:21:71:dc:6a:3a:
e8:02:bc:37:2d:dc:74:4c:a7:2e:a8:79:4d:19:ec:
93:ed:5e:e1:ca:be:86:05:01:4e:50:8d:85:9c:10:
7c:71:a8:ee:48:67:d6:ad:d9:08:79:e4:c4:7f:f3:
68:6d:20:82:50:1f:2f:e8:16:73:f4:e3:8e:dd:5f:
b5:a8:1e:bc:ca:ad:c4:33:cd:39:e6:7f:f2:21:a3:
48:01:23:3a:3c:96:3c:cb:12:14:c2:3d:0c:71:21:
a6:e0:38:bb:0d:5a:3f:36:96:88:9a:30:56:1f:95:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:2B:C3:D8:89:13:33:EE:F1:E0:BF:00:10:B7:46:7C:1B:A1:9A
X509v3 Authority Key Identifier:
keyid:14:D4:A7:76:68:81:A4:31:30:09:B5:42:CC:28:42:41:98:2B:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNSndmiBpDEwCbVCzChCQZgrnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/AvUrw9iJEzPu8eC_ABC3RnwboZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/FNSndmiBpDEwCbVCzChCQZgrnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.4.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d2:c0:cd:6f:25:ba:b2:23:29:a7:31:d0:df:f8:68:83:63:
86:2d:9c:59:8b:94:54:e0:07:d6:c0:57:2b:6a:70:3e:27:0f:
22:02:66:1c:81:50:fb:d7:5e:2a:f6:3a:fe:18:47:dc:7d:95:
45:01:6c:41:3a:18:76:d4:cd:7d:88:91:43:cd:3a:cb:ce:e2:
bd:7c:a2:4a:83:0e:98:07:68:65:4b:bc:21:a5:5c:f6:dc:54:
32:87:5b:61:72:2f:87:62:a7:1b:ea:3a:0b:ce:77:e4:be:f6:
9b:e2:e9:00:90:2e:4a:4e:8e:13:a4:4d:01:df:c4:d6:6c:cd:
a6:f5:41:e9:17:ce:2f:e7:4a:72:95:36:9a:d2:2e:6f:4e:3b:
86:f0:42:e1:bc:e2:9a:7a:c8:1b:fd:1f:a2:ee:47:b8:55:4f:
53:2a:a6:22:5e:70:e2:5f:35:9d:e9:61:52:3b:7c:20:dc:70:
9e:6e:e1:71:2f:56:7a:74:be:fc:0e:86:4d:9c:25:47:d6:ba:
d9:52:3f:9a:bc:c5:cf:cf:8d:2b:48:1f:60:7e:1b:5b:b2:c0:
95:4f:8e:d0:45:90:7a:75:51:c4:a0:29:c5:9f:48:91:54:58:
db:eb:45:04:ad:9a:1d:4f:44:32:5b:f8:1e:e0:b7:9d:21:41:
3d:73:a9:ca
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDALZ+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
ZDRhNzc2Njg4MWE0MzEzMDA5YjU0MmNjMjg0MjQxOTgyYjllMjkwHhcNMjIwMjE4
MTIwNDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMmY1MmJjM2Q4ODkx
MzMzZWVmMWUwYmYwMDEwYjc0NjdjMWJhMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr0EJ+6H/8e8Lc7q13YEeeiEWJjHDIz6dPOkG6nnbdVy4vcsO
ZQ1okK0JBajC5cis0lRdYT/4nEWRTRfe3Jy3vYsEmH5uhy2KgQAVCH16uoGRg6fT
uC+5fMccWoS+NljG81yLAmQbgUf3vj/peYFv+20QvJAftRL3xKEt1eOgejO2nj4S
DdDuzu65ygv149bkIXHcajroArw3Ldx0TKcuqHlNGeyT7V7hyr6GBQFOUI2FnBB8
cajuSGfWrdkIeeTEf/NobSCCUB8v6BZz9OOO3V+1qB68yq3EM8055n/yIaNIASM6
PJY8yxIUwj0McSGm4Di7DVo/NpaImjBWH5WXxwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAL1K8PYiRMz7vHgvwAQt0Z8G6GaMB8GA1UdIwQYMBaAFBTUp3ZogaQxMAm1
QswoQkGYK54pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Rk5TbmRtaUJwREV3Q2JWQ3pDaENRWmdybmlrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82MC9kYWRhZTYtZjFkYy00YTE3LWIyY2EtMzlmNzY3MmM2MTVjLzEv
QXZVcnc5aUpFelB1OGVDX0FCQzNSbndib1pvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9k
YWRhZTYtZjFkYy00YTE3LWIyY2EtMzlmNzY3MmM2MTVjLzEvRk5TbmRtaUJwREV3
Q2JWQ3pDaENRWmdybmlrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpIEMA0GCSqGSIb3DQEBCwUAA4IB
AQBW0sDNbyW6siMppzHQ3/hog2OGLZxZi5RU4AfWwFcranA+Jw8iAmYcgVD7114q
9jr+GEfcfZVFAWxBOhh21M19iJFDzTrLzuK9fKJKgw6YB2hlS7whpVz23FQyh1th
ci+HYqcb6joLznfkvvab4ukAkC5KTo4TpE0B38TWbM2m9UHpF84v50pylTaa0i5v
TjuG8ELhvOKaesgb/R+i7ke4VU9TKqYiXnDiXzWd6WFSO3wg3HCebuFxL1Z6dL78
DoZNnCVH1rrZUj+avMXPz40rSB9gfhtbssCVT47QRZB6dVHEoCnFn0iRVFjb60UE
rZodT0QyW/ge4LedIUE9c6nK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:08 2025 by rpki-client