Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/WTo5_lw99hCTzLdqaP5dYuPjg3g.roa
File: WTo5_lw99hCTzLdqaP5dYuPjg3g.roa (raw, json)
Hash identifier: 56JmQV5wwaXYaklo1sp0/wH/cR5cPjc0oaSggTYNvn4=
Subject key identifier: 59:3A:39:FE:5C:3D:F6:10:93:CC:B7:6A:68:FE:5D:62:E3:E3:83:78
Certificate issuer: /CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Certificate serial: 0183F261AFF0E91BA1138FDF92037F2F55AB
Authority key identifier: A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/WTo5_lw99hCTzLdqaP5dYuPjg3g.roa
Signing time: Wed 19 Oct 2022 22:33:51 +0000
ROA not before: Wed 19 Oct 2022 22:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 146.19.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:61:af:f0:e9:1b:a1:13:8f:df:92:03:7f:2f:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2dbf3dece882fad8a237468e08fd7beb1cafa39
Validity
Not Before: Oct 19 22:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593a39fe5c3df61093ccb76a68fe5d62e3e38378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:d7:62:2d:c3:92:82:37:d4:4b:84:a0:45:
f0:4d:3c:39:e7:e2:5c:be:54:3b:43:f2:e3:f7:42:
bd:2c:3b:85:6e:35:31:24:76:db:b5:26:de:6d:87:
10:b3:f0:8a:46:31:52:5f:7b:af:8c:e3:41:16:c6:
df:09:b7:38:9f:81:87:07:aa:a5:cb:aa:ea:9a:20:
4b:b8:6b:e7:2f:5a:f5:44:81:06:6c:ac:24:80:e3:
83:55:df:ab:ee:7d:6a:f6:4f:25:5e:d9:73:4d:67:
8c:9b:d1:c5:aa:37:83:ed:fd:8a:01:15:cc:bb:d8:
db:e5:94:94:38:d6:2d:d3:4e:1a:9d:e6:d6:7e:f7:
56:1f:71:fe:0c:f5:e6:76:07:c5:ca:72:bd:2a:2c:
6a:a7:66:26:fc:3c:3b:43:37:8c:2c:90:d0:fb:92:
cf:53:cf:aa:f7:f8:c6:6a:dc:45:c4:84:17:3d:82:
4f:c2:5e:aa:08:01:f5:20:49:18:13:9d:ec:f2:78:
a8:b5:f7:f2:cc:44:f7:11:94:29:0b:24:af:cb:25:
c5:c3:ae:2f:79:39:97:d2:5c:fc:de:a6:55:d7:02:
e8:80:d5:ba:cf:38:6f:72:e1:b4:5b:5a:03:cb:9c:
ac:46:18:12:92:b0:5e:bd:7f:94:c4:65:4e:bf:85:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:39:FE:5C:3D:F6:10:93:CC:B7:6A:68:FE:5D:62:E3:E3:83:78
X509v3 Authority Key Identifier:
keyid:A2:DB:F3:DE:CE:88:2F:AD:8A:23:74:68:E0:8F:D7:BE:B1:CA:FA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otvz3s6IL62KI3Ro4I_XvrHK-jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/WTo5_lw99hCTzLdqaP5dYuPjg3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c87266-0d64-449c-ba46-0b617fe7c123/1/otvz3s6IL62KI3Ro4I_XvrHK-jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
85:88:cb:38:73:ca:ee:eb:25:c7:b0:e2:d8:3e:b9:49:17:70:
01:78:6a:1b:33:81:d8:d9:91:78:e9:7d:36:4b:07:e0:2a:8b:
e6:a2:7f:08:02:77:92:09:7c:7a:ab:2d:6e:f6:2d:4d:15:06:
83:a6:26:63:56:32:7b:24:f7:d7:44:1a:2b:11:ca:63:1d:94:
b2:e1:c3:5c:90:2f:72:52:fc:83:1e:1f:60:80:9e:19:a3:29:
b7:ba:b7:c3:64:2b:a5:42:a8:9e:40:29:c6:d5:68:c6:93:35:
1a:36:1e:c9:21:52:ad:8a:57:5e:2d:0f:d7:59:56:c2:82:fa:
d1:f7:e2:ac:28:0a:10:e2:ec:c2:4a:41:62:24:90:83:73:66:
5b:47:0c:fb:71:e8:cf:d7:6b:b0:03:3f:d4:a4:ca:cb:ed:13:
fe:70:6f:3e:cf:62:52:cd:cc:08:9c:56:89:6f:b0:dd:40:c0:
ab:82:11:26:68:2e:7e:13:98:95:a4:81:51:10:ad:66:82:ac:
60:d8:dd:ff:9c:f1:77:a6:ff:03:ea:f1:b2:7c:ed:e0:b8:e8:
a5:d3:32:a5:ca:d4:32:4e:1f:06:07:50:16:72:ca:28:66:91:
10:7e:63:a8:c3:bd:3f:b5:1a:80:a4:3e:d0:7a:fe:f0:33:0e:
ba:0b:ae:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPyYa/w6RuhE4/fkgN/L1WrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGJmM2RlY2U4ODJmYWQ4YTIzNzQ2OGUwOGZkN2JlYjFj
YWZhMzkwHhcNMjIxMDE5MjIzMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTNhMzlmZTVjM2RmNjEwOTNjY2I3NmE2OGZlNWQ2MmUzZTM4Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6jXYi3DkoI31EuEoEXwTTw55+Jc
vlQ7Q/Lj90K9LDuFbjUxJHbbtSbebYcQs/CKRjFSX3uvjONBFsbfCbc4n4GHB6ql
y6rqmiBLuGvnL1r1RIEGbKwkgOODVd+r7n1q9k8lXtlzTWeMm9HFqjeD7f2KARXM
u9jb5ZSUONYt004anebWfvdWH3H+DPXmdgfFynK9Kixqp2Ym/Dw7QzeMLJDQ+5LP
U8+q9/jGatxFxIQXPYJPwl6qCAH1IEkYE53s8niotffyzET3EZQpCySvyyXFw64v
eTmX0lz83qZV1wLogNW6zzhvcuG0W1oDy5ysRhgSkrBevX+UxGVOv4Xa9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFk6Of5cPfYQk8y3amj+XWLj44N4MB8GA1UdIwQY
MBaAFKLb897OiC+tiiN0aOCP176xyvo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3R2ejNzNklMNjJLSTNSbzRJX1h2ckhLLWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jODcyNjYtMGQ2NC00NDljLWJhNDYt
MGI2MTdmZTdjMTIzLzEvV1RvNV9sdzk5aENUekxkcWFQNWRZdVBqZzNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jODcyNjYtMGQ2NC00NDljLWJhNDYtMGI2MTdmZTdjMTIz
LzEvb3R2ejNzNklMNjJLSTNSbzRJX1h2ckhLLWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMJMA0G
CSqGSIb3DQEBCwUAA4IBAQCFiMs4c8ru6yXHsOLYPrlJF3ABeGobM4HY2ZF46X02
SwfgKovmon8IAneSCXx6qy1u9i1NFQaDpiZjVjJ7JPfXRBorEcpjHZSy4cNckC9y
UvyDHh9ggJ4Zoym3urfDZCulQqieQCnG1WjGkzUaNh7JIVKtildeLQ/XWVbCgvrR
9+KsKAoQ4uzCSkFiJJCDc2ZbRwz7cejP12uwAz/UpMrL7RP+cG8+z2JSzcwInFaJ
b7DdQMCrghEmaC5+E5iVpIFREK1mgqxg2N3/nPF3pv8D6vGyfO3guOil0zKlytQy
Th8GB1AWcsooZpEQfmOow70/tRqApD7Qev7wMw66C65t
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:51 2024 by rpki-client on console-ams.rpki-client.org