Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/amCM4REvgdwXKvb7acveQTx5HCo.roa
File: amCM4REvgdwXKvb7acveQTx5HCo.roa (raw, json)
Hash identifier: VtmVjcnwP9YlTCRm+1yyREZJbccl3neX17iD/jVIBpE=
Subject key identifier: 6A:60:8C:E1:11:2F:81:DC:17:2A:F6:FB:69:CB:DE:41:3C:79:1C:2A
Certificate issuer: /CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Certificate serial: 22D093E2
Authority key identifier: 57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/amCM4REvgdwXKvb7acveQTx5HCo.roa
Signing time: Sat 01 Jan 2022 10:56:31 +0000
ROA not before: Sat 01 Jan 2022 10:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51677
IP address blocks: 146.0.55.0/24 maxlen: 24
146.0.54.0/24 maxlen: 24
146.0.53.0/24 maxlen: 24
146.0.52.0/24 maxlen: 24
185.5.240.0/22 maxlen: 24
185.5.240.0/24 maxlen: 24
185.5.243.0/24 maxlen: 24
185.5.242.0/24 maxlen: 24
185.5.241.0/24 maxlen: 24
146.0.51.0/24 maxlen: 24
146.0.50.0/24 maxlen: 24
146.0.49.0/24 maxlen: 24
146.0.48.0/24 maxlen: 24
146.0.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584094690 (0x22d093e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Validity
Not Before: Jan 1 10:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a608ce1112f81dc172af6fb69cbde413c791c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:a6:7e:7e:59:8c:95:36:7a:91:93:5d:4f:
c7:66:d0:87:e2:98:df:44:4a:b6:32:f8:27:c6:57:
b1:8c:f3:98:b0:f9:2f:d2:a5:7c:a8:1f:92:34:c1:
fc:bd:d1:0d:7a:f1:f9:65:63:bf:99:a3:3b:d5:da:
f4:93:59:de:6f:db:ab:35:e6:3e:00:e5:dc:7b:36:
7f:ae:6c:3b:2a:b1:0d:19:33:e5:74:ce:8a:b4:27:
73:72:06:01:65:4e:4c:c2:fa:a4:e4:fc:f1:39:1d:
8b:4d:dc:f5:7d:15:28:3e:d9:d0:b8:3a:fc:0e:23:
5e:41:d7:6e:d5:b1:00:d9:d6:12:72:95:aa:6a:22:
91:e9:da:17:ca:56:1c:0f:b8:b6:93:fa:00:94:c4:
ee:4e:1b:62:b8:97:9a:f9:e7:4e:8d:80:ef:b1:1a:
06:44:e9:62:b8:2a:a0:41:f7:1a:41:f0:e1:67:4e:
61:3e:31:4f:8f:69:00:c7:3a:ac:83:6a:ca:69:ef:
5c:58:5e:be:bb:19:e0:c3:00:32:aa:7a:2f:03:3a:
ce:11:37:b6:68:e3:1f:16:83:88:eb:13:df:9e:79:
35:6a:f7:67:b9:54:04:5a:b6:a2:e3:7a:78:38:b6:
04:e3:bc:08:25:d5:e8:85:2c:f0:0d:6b:0d:59:c5:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:8C:E1:11:2F:81:DC:17:2A:F6:FB:69:CB:DE:41:3C:79:1C:2A
X509v3 Authority Key Identifier:
keyid:57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/amCM4REvgdwXKvb7acveQTx5HCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.48.0/21
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:e6:47:2a:23:21:95:b7:c3:8c:09:1e:60:d8:ec:dd:d4:4b:
82:95:56:8a:6b:0f:65:c9:86:c5:88:50:e8:50:16:75:d9:aa:
da:b3:c2:8d:78:70:39:08:39:e1:48:17:48:d1:ef:f0:d6:c1:
a0:05:36:6f:3a:11:75:33:03:99:49:79:25:f6:31:a1:78:06:
01:e6:f2:a8:46:4f:b6:0d:76:a4:4b:5c:3e:c9:59:22:9d:36:
03:83:d4:ef:f7:3f:33:7e:53:85:c7:9b:f4:09:bf:d2:6b:f4:
6d:b9:0f:8a:03:f1:05:65:91:34:9f:f5:fb:18:02:a7:47:21:
d8:05:57:62:a6:ea:fc:3e:c9:01:28:3e:35:64:85:62:e5:4e:
a4:ad:75:99:7d:bc:14:9f:60:dc:cf:ab:b1:e3:1c:b7:98:42:
c8:1a:68:f9:52:92:bd:75:03:be:ab:2a:4c:a3:3c:56:52:b1:
51:59:cc:0f:0e:67:b9:9d:d1:45:3c:99:19:f4:46:27:ba:1b:
84:96:73:79:8a:02:d9:35:8c:3c:58:66:6a:99:93:76:c9:05:
da:21:b5:d5:95:1e:ea:0f:97:0d:0b:ef:42:07:47:c1:60:cf:
9c:5d:e2:d7:ef:a1:1a:78:4e:52:ee:44:a9:5c:9f:11:aa:c0:
3b:c4:e9:56
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEItCT4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
N2I3YjQ2MmU0Y2VmOTJkY2JmNDQ2OTJmZjBmODUxZWUzZTdhOWQ2MB4XDTIyMDEw
MTEwNTYzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE2MDhjZTExMTJm
ODFkYzE3MmFmNmZiNjljYmRlNDEzYzc5MWMyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLxpn5+WYyVNnqRk11Px2bQh+KY30RKtjL4J8ZXsYzzmLD5
L9KlfKgfkjTB/L3RDXrx+WVjv5mjO9Xa9JNZ3m/bqzXmPgDl3Hs2f65sOyqxDRkz
5XTOirQnc3IGAWVOTML6pOT88Tkdi03c9X0VKD7Z0Lg6/A4jXkHXbtWxANnWEnKV
qmoikenaF8pWHA+4tpP6AJTE7k4bYriXmvnnTo2A77EaBkTpYrgqoEH3GkHw4WdO
YT4xT49pAMc6rINqymnvXFhevrsZ4MMAMqp6LwM6zhE3tmjjHxaDiOsT3555NWr3
Z7lUBFq2ouN6eDi2BOO8CCXV6IUs8A1rDVnFqRsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRqYIzhES+B3Bcq9vtpy95BPHkcKjAfBgNVHSMEGDAWgBRXt7Ri5M75Lcv0
RpL/D4Ue4+ep1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y3ZTBZdVRPLVMzTDlFYVNfdy1GSHVQbnFkWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvMmE5YTcwLTgwOGEtNDE3Yy1iNmRhLWVkNmI4Zjc2ZjA5Ny8x
L2FtQ000UkV2Z2R3WEt2YjdhY3ZlUVR4NUhDby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
MmE5YTcwLTgwOGEtNDE3Yy1iNmRhLWVkNmI4Zjc2ZjA5Ny8xL1Y3ZTBZdVRPLVMz
TDlFYVNfdy1GSHVQbnFkWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA5IAMAMEArkF8DANBgkqhkiG9w0B
AQsFAAOCAQEAi+ZHKiMhlbfDjAkeYNjs3dRLgpVWimsPZcmGxYhQ6FAWddmq2rPC
jXhwOQg54UgXSNHv8NbBoAU2bzoRdTMDmUl5JfYxoXgGAebyqEZPtg12pEtcPslZ
Ip02A4PU7/c/M35Thceb9Am/0mv0bbkPigPxBWWRNJ/1+xgCp0ch2AVXYqbq/D7J
ASg+NWSFYuVOpK11mX28FJ9g3M+rseMct5hCyBpo+VKSvXUDvqsqTKM8VlKxUVnM
Dw5nuZ3RRTyZGfRGJ7obhJZzeYoC2TWMPFhmapmTdskF2iG11ZUe6g+XDQvvQgdH
wWDPnF3i1++hGnhOUu5EqVyfEarAO8TpVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:56 2024 by rpki-client on console-ams.rpki-client.org