Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/GTb9HkL_rIQxxngR5oWpTeq76Bk.roa
File: GTb9HkL_rIQxxngR5oWpTeq76Bk.roa (raw, json)
Hash identifier: FwwCqN7q5JVnggKACX4NDYI8Zf2HJkEWe9dEIUhYwe8=
Subject key identifier: 19:36:FD:1E:42:FF:AC:84:31:C6:78:11:E6:85:A9:4D:EA:BB:E8:19
Certificate issuer: /CN=af081823867d6ecba577cda401748ddfe6832a6d
Certificate serial: 69115B
Authority key identifier: AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwgYI4Z9bsuld82kAXSN3-aDKm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/GTb9HkL_rIQxxngR5oWpTeq76Bk.roa
Signing time: Sat 01 Jan 2022 03:01:50 +0000
ROA not before: Sat 01 Jan 2022 03:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6885723 (0x69115b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af081823867d6ecba577cda401748ddfe6832a6d
Validity
Not Before: Jan 1 03:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1936fd1e42ffac8431c67811e685a94deabbe819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:5c:4e:e2:32:35:49:87:1d:78:aa:ca:2c:
08:09:e3:d4:77:d1:28:30:bb:61:51:47:ad:95:71:
73:e0:a8:0f:da:cf:da:1f:12:fd:c7:8d:cf:25:93:
3f:a6:f9:30:00:93:64:ac:ff:ee:1a:44:3d:33:27:
ac:fa:75:8d:ef:3a:69:f5:af:db:e6:2d:2f:2f:34:
53:00:2b:87:1f:f6:25:54:b2:08:20:f1:d9:c6:71:
d3:43:aa:33:1d:9f:84:10:9b:f5:d4:1a:ae:f7:a6:
97:48:e9:9e:18:22:68:0e:c9:74:4f:23:60:db:71:
1a:94:d7:0f:52:97:53:1b:cf:dc:91:18:c7:bf:ed:
9b:67:ee:b9:61:e1:13:73:cc:7f:6e:f1:8c:b6:db:
0c:e9:13:64:ca:e7:76:a0:a4:18:e0:7f:fd:22:23:
93:2f:02:af:57:ce:cb:9f:f0:2b:d2:d3:4c:9f:12:
df:c2:3c:d8:0c:54:ab:6e:5f:f9:70:6e:24:95:5a:
92:62:77:d4:1e:b7:ee:fb:58:e1:dc:59:a4:a9:35:
6a:a5:12:dc:81:66:2f:de:b4:1a:34:7f:81:d6:1d:
99:1f:e6:d3:cf:3a:68:11:8e:24:ba:66:76:31:42:
dc:fb:bc:26:3c:51:dc:f4:a4:cf:18:e9:3c:b5:2f:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:FD:1E:42:FF:AC:84:31:C6:78:11:E6:85:A9:4D:EA:BB:E8:19
X509v3 Authority Key Identifier:
keyid:AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwgYI4Z9bsuld82kAXSN3-aDKm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/GTb9HkL_rIQxxngR5oWpTeq76Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/rwgYI4Z9bsuld82kAXSN3-aDKm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.10.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6c:fe:c7:a0:14:8c:66:75:c7:91:56:1c:d7:2b:8f:fd:92:
8a:28:4a:dd:50:a0:cf:3e:30:a7:40:60:53:68:c1:29:98:cb:
b8:6a:83:fb:a2:20:dc:04:8b:87:59:f2:6c:bc:43:6b:d9:84:
e6:c4:02:b0:cf:b6:3e:d6:53:b2:9d:31:36:71:8c:3f:a6:93:
94:ec:58:a7:f3:ac:3d:28:d1:fb:22:1b:a9:e9:2a:2e:d6:0c:
d1:1b:08:37:b9:9c:74:bc:3f:30:e0:b5:92:aa:f8:41:32:1e:
c5:d8:da:18:2a:1c:a1:3c:57:2e:88:46:ea:a8:1f:c7:68:aa:
ff:7f:ae:bd:43:c1:ef:51:f5:e9:9e:80:78:4e:ce:22:f6:64:
81:bc:d0:42:7d:ea:75:9c:8f:6f:8a:26:35:d7:66:f0:7e:5d:
fa:84:85:bc:1c:96:a6:2a:a5:8d:34:ef:62:b7:00:ac:40:1e:
4f:38:9f:d1:7a:e3:19:37:27:10:e5:35:4b:bd:76:39:51:a9:
eb:51:dc:9f:58:bc:af:cd:32:48:d2:09:ca:db:ec:f7:b2:b3:
1d:eb:9f:a9:1b:a4:4f:80:23:89:fc:ce:89:26:dc:ef:29:40:
69:74:3b:54:5f:70:5f:46:86:40:b5:47:b8:92:64:60:19:62:
34:8e:14:93
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDaRFbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm
MDgxODIzODY3ZDZlY2JhNTc3Y2RhNDAxNzQ4ZGRmZTY4MzJhNmQwHhcNMjIwMTAx
MDMwMTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxOTM2ZmQxZTQyZmZh
Yzg0MzFjNjc4MTFlNjg1YTk0ZGVhYmJlODE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA065cTuIyNUmHHXiqyiwICePUd9EoMLthUUetlXFz4KgP2s/a
HxL9x43PJZM/pvkwAJNkrP/uGkQ9Myes+nWN7zpp9a/b5i0vLzRTACuHH/YlVLII
IPHZxnHTQ6ozHZ+EEJv11Bqu96aXSOmeGCJoDsl0TyNg23EalNcPUpdTG8/ckRjH
v+2bZ+65YeETc8x/bvGMttsM6RNkyud2oKQY4H/9IiOTLwKvV87Ln/Ar0tNMnxLf
wjzYDFSrbl/5cG4klVqSYnfUHrfu+1jh3FmkqTVqpRLcgWYv3rQaNH+B1h2ZH+bT
zzpoEY4kumZ2MULc+7wmPFHc9KTPGOk8tS9f7wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFBk2/R5C/6yEMcZ4EeaFqU3qu+gZMB8GA1UdIwQYMBaAFK8IGCOGfW7LpXfN
pAF0jd/mgyptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cndnWUk0Wjlic3VsZDgya0FYU04zLWFES20wLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82MS9jN2M0NmEtYjI5Yi00ZWMyLWFmODgtZGM3NjdlM2MxMDBmLzEv
R1RiOUhrTF9ySVF4eG5nUjVvV3BUZXE3NkJrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9j
N2M0NmEtYjI5Yi00ZWMyLWFmODgtZGM3NjdlM2MxMDBmLzEvcndnWUk0Wjlic3Vs
ZDgya0FYU04zLWFES20wLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMKMA0GCSqGSIb3DQEBCwUAA4IB
AQB3bP7HoBSMZnXHkVYc1yuP/ZKKKErdUKDPPjCnQGBTaMEpmMu4aoP7oiDcBIuH
WfJsvENr2YTmxAKwz7Y+1lOynTE2cYw/ppOU7Fin86w9KNH7Ihup6Sou1gzRGwg3
uZx0vD8w4LWSqvhBMh7F2NoYKhyhPFcuiEbqqB/HaKr/f669Q8HvUfXpnoB4Ts4i
9mSBvNBCfep1nI9viiY112bwfl36hIW8HJamKqWNNO9itwCsQB5POJ/ReuMZNycQ
5TVLvXY5UanrUdyfWLyvzTJI0gnK2+z3srMd65+pG6RPgCOJ/M6JJtzvKUBpdDtU
X3BfRoZAtUe4kmRgGWI0jhST
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:51 2025 by rpki-client