Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/rIWk3Ukt5fnjJTkWvw6f66aI_BE.roa
File: rIWk3Ukt5fnjJTkWvw6f66aI_BE.roa (raw, json)
Hash identifier: 3j4gRjwfVY/p415v8G6hy1Q4zMCLknpvmfXasvoD5k4=
Subject key identifier: AC:85:A4:DD:49:2D:E5:F9:E3:25:39:16:BF:0E:9F:EB:A6:88:FC:11
Certificate issuer: /CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
Certificate serial: 01856DB8704898E0772AF239D2062EAAE353
Authority key identifier: F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/rIWk3Ukt5fnjJTkWvw6f66aI_BE.roa
Signing time: Sun 01 Jan 2023 14:24:41 +0000
ROA not before: Sun 01 Jan 2023 14:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:70:48:98:e0:77:2a:f2:39:d2:06:2e:aa:e3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
Validity
Not Before: Jan 1 14:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac85a4dd492de5f9e3253916bf0e9feba688fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:3b:6b:b5:9a:b7:e9:50:69:a4:27:62:7e:
8d:8a:5d:1e:7b:96:4a:05:24:07:93:05:b2:87:29:
98:4c:29:29:d1:11:17:fe:1a:aa:4e:38:0d:86:e7:
4b:f4:47:b6:6d:a1:88:db:ac:79:f6:12:b3:8d:db:
82:8a:8a:3c:c8:5a:42:d0:30:d1:3a:9b:be:d1:47:
c8:f8:f0:9a:42:71:60:e7:7b:e4:0c:b0:73:76:ec:
d9:da:46:03:56:29:86:1e:db:b5:e5:39:be:67:5b:
e8:9b:f3:01:e9:cc:bf:b3:64:c4:ab:1d:44:c3:7d:
29:4f:4c:7a:69:c5:3f:51:30:63:93:9b:31:2f:5e:
b0:81:c1:cf:56:8d:be:97:46:cb:10:26:a5:bb:00:
14:3d:57:3c:f9:72:8c:ff:2f:12:76:16:ba:61:c4:
56:eb:1e:ae:d3:2d:2e:d2:70:af:ac:32:5f:34:98:
ee:7b:35:e3:39:74:fd:90:6c:2b:21:ca:8f:86:21:
65:da:b3:fe:52:e9:e0:3b:b0:94:2d:d7:bb:27:c9:
ee:e7:2d:99:71:0d:b1:4e:cb:09:a4:1a:72:6a:dd:
1d:0d:b1:6e:64:1c:37:08:1a:f3:3c:2b:73:cf:b5:
45:dc:16:25:69:b0:d7:7c:6c:9f:1c:ac:6c:fe:cc:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:A4:DD:49:2D:E5:F9:E3:25:39:16:BF:0E:9F:EB:A6:88:FC:11
X509v3 Authority Key Identifier:
keyid:F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/rIWk3Ukt5fnjJTkWvw6f66aI_BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.194.0/24
Signature Algorithm: sha256WithRSAEncryption
92:10:c4:53:c9:7c:b8:60:34:43:66:ed:97:e8:fe:45:7b:a8:
aa:de:91:58:83:e0:2b:1b:70:f5:56:7e:40:81:ef:1d:09:0b:
d0:19:85:f9:5d:c2:07:81:f1:f8:e6:ff:e0:78:04:e5:76:b9:
e8:8b:14:81:46:c3:7b:0d:c5:a6:66:78:9c:c2:ef:f4:be:b3:
1e:25:38:7f:09:e7:cd:ea:76:e3:1a:2a:d2:a3:57:69:06:96:
1b:21:73:f4:26:26:ed:1c:e7:21:3e:dd:74:6e:82:60:55:91:
be:9d:66:df:02:ae:4b:e9:7d:4f:3b:11:48:61:16:db:d9:80:
f3:54:99:be:b4:81:a0:7a:e3:8e:13:65:b4:20:f6:70:35:9a:
14:85:80:0c:91:c9:2f:33:c2:34:27:00:ce:44:6a:54:23:59:
2f:df:19:fb:82:85:4c:e7:b7:77:2a:2e:a6:e1:d9:b6:21:a7:
b4:68:79:e1:4e:fe:29:db:9d:4c:75:d9:35:3c:96:2f:01:0c:
7c:94:ab:8f:97:1d:1d:0d:9e:c9:88:43:27:59:e6:4a:86:fd:
e5:ac:0e:d6:66:42:3f:8a:35:2d:6f:24:d4:9e:ee:44:35:d0:
6e:9b:e8:88:99:0a:9e:cd:e0:fb:cc:f5:01:70:03:87:24:14:
df:6d:e3:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtuHBImOB3KvI50gYuquNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwN2QxMGUyZjY3YmQyMDdlZjVlNTdkMDUzMTQ0NmJhNzRj
YTFiMzUwHhcNMjMwMTAxMTQyNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzg1YTRkZDQ5MmRlNWY5ZTMyNTM5MTZiZjBlOWZlYmE2ODhmYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10U7a7Wat+lQaaQnYn6Nil0ee5ZK
BSQHkwWyhymYTCkp0REX/hqqTjgNhudL9Ee2baGI26x59hKzjduCioo8yFpC0DDR
Opu+0UfI+PCaQnFg53vkDLBzduzZ2kYDVimGHtu15Tm+Z1vom/MB6cy/s2TEqx1E
w30pT0x6acU/UTBjk5sxL16wgcHPVo2+l0bLECaluwAUPVc8+XKM/y8Sdha6YcRW
6x6u0y0u0nCvrDJfNJjuezXjOXT9kGwrIcqPhiFl2rP+UungO7CULde7J8nu5y2Z
cQ2xTssJpBpyat0dDbFuZBw3CBrzPCtzz7VF3BYlabDXfGyfHKxs/szjuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyFpN1JLeX54yU5Fr8On+umiPwRMB8GA1UdIwQY
MBaAFPB9EOL2e9IH715X0FMURrp0yhs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEgwUTR2WjcwZ2Z2WGxmUVV4Ukd1blRLR3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84N2QyNDctYjA1YS00ZDYwLThiYTct
OWY0NTA5YzJkZGM1LzEvcklXazNVa3Q1Zm5qSlRrV3Z3NmY2NmFJX0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84N2QyNDctYjA1YS00ZDYwLThiYTctOWY0NTA5YzJkZGM1
LzEvOEgwUTR2WjcwZ2Z2WGxmUVV4Ukd1blRLR3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPCMA0G
CSqGSIb3DQEBCwUAA4IBAQCSEMRTyXy4YDRDZu2X6P5Fe6iq3pFYg+ArG3D1Vn5A
ge8dCQvQGYX5XcIHgfH45v/geATldrnoixSBRsN7DcWmZnicwu/0vrMeJTh/CefN
6nbjGirSo1dpBpYbIXP0JibtHOchPt10boJgVZG+nWbfAq5L6X1POxFIYRbb2YDz
VJm+tIGgeuOOE2W0IPZwNZoUhYAMkckvM8I0JwDORGpUI1kv3xn7goVM57d3Ki6m
4dm2Iae0aHnhTv4p251Mddk1PJYvAQx8lKuPlx0dDZ7JiEMnWeZKhv3lrA7WZkI/
ijUtbyTUnu5ENdBum+iImQqezeD7zPUBcAOHJBTfbePi
-----END CERTIFICATE-----
Generated at Fri Nov 17 16:04:37 2023 by rpki-client on console-ams.rpki-client.org