Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/O89gewYS0ol9ls31dyp2UyNcOkU.roa
File: O89gewYS0ol9ls31dyp2UyNcOkU.roa (raw, json)
Hash identifier: FE3VoRf29nYvGbBvQKceFTZ3wbN0WIj4/i1H0gN8R+A=
Subject key identifier: 3B:CF:60:7B:06:12:D2:89:7D:96:CD:F5:77:2A:76:53:23:5C:3A:45
Certificate issuer: /CN=846a1ba02e439066ef579010ea308054ac8bf9df
Certificate serial: 020955D4
Authority key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/O89gewYS0ol9ls31dyp2UyNcOkU.roa
Signing time: Fri 24 Jun 2022 14:45:09 +0000
ROA not before: Fri 24 Jun 2022 14:45:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 146.19.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34166228 (0x20955d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846a1ba02e439066ef579010ea308054ac8bf9df
Validity
Not Before: Jun 24 14:45:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bcf607b0612d2897d96cdf5772a7653235c3a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:1a:ac:92:4b:db:17:b6:15:be:bc:93:92:
46:c2:a0:a5:a3:c7:67:bc:83:12:66:fd:d7:c8:8b:
1a:9b:14:8b:d2:cc:51:ae:6b:d3:b9:0c:48:ec:ab:
cb:05:47:51:a8:4c:90:94:be:d6:31:c2:1d:02:cc:
09:9c:1a:dd:03:66:b9:d1:2e:93:d3:b9:b2:aa:65:
ae:ff:ce:8a:e5:06:9c:04:e4:5b:50:6b:5e:b3:b0:
f5:aa:22:4c:69:f1:be:fe:39:2f:84:1e:13:a5:97:
6f:d6:fd:0c:28:78:60:98:96:47:e9:4c:56:88:a7:
11:58:d5:36:99:04:34:24:7a:5b:58:ab:ff:40:48:
77:53:da:ee:52:55:fd:a7:53:24:1e:57:bf:30:b4:
09:22:04:bd:53:d4:9e:4d:7f:30:27:d3:b8:16:ed:
2f:21:e6:b7:f0:59:20:d0:46:23:a5:0e:60:23:f5:
37:be:41:79:99:af:49:e9:56:bb:f1:81:8a:08:e2:
23:2c:ae:fd:f2:c1:98:7a:be:62:ef:af:e9:4c:5a:
15:72:51:e9:a0:88:c7:a2:99:6e:0d:11:2e:41:6e:
f4:85:78:4d:9d:28:3b:46:01:3a:80:da:ca:e1:12:
6a:d7:85:9f:c2:3d:f3:22:86:43:7c:90:05:42:1f:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:60:7B:06:12:D2:89:7D:96:CD:F5:77:2A:76:53:23:5C:3A:45
X509v3 Authority Key Identifier:
keyid:84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/O89gewYS0ol9ls31dyp2UyNcOkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.28.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:0b:55:14:34:36:b7:fc:cd:9b:15:b2:8e:fb:22:eb:4a:
8a:09:7e:36:e7:40:60:ed:31:25:84:17:91:b2:30:da:c3:53:
8c:c6:1f:0b:92:96:2f:b5:1d:b9:09:e5:80:64:31:24:e7:70:
c7:f5:71:f4:6b:18:a9:ae:f3:45:73:6d:a8:80:e3:34:b4:ce:
7e:c3:88:26:3d:2e:91:84:00:d9:8f:f5:82:e2:f6:9f:86:77:
e1:37:ab:61:77:ce:fc:e5:14:5c:ae:db:b4:ff:fe:cc:3b:19:
b1:07:bd:53:42:ed:1d:88:61:67:eb:4c:59:05:bb:d0:65:55:
0a:d8:34:aa:94:f8:50:92:01:46:f1:f0:11:d9:c9:45:d3:f5:
5c:f6:76:b8:b7:eb:14:5f:9f:36:86:89:a4:52:1e:6d:e7:d0:
6a:ee:0c:e4:e4:57:73:1a:e6:58:dc:73:2e:80:37:26:98:fd:
ad:76:32:4b:e3:f9:5e:8f:32:01:dc:54:f9:ae:b2:cb:c1:f1:
86:cc:a0:71:e4:38:17:61:1f:66:ab:39:9c:5a:7c:38:b6:2a:
26:bc:0f:1b:da:96:b2:6c:8b:87:45:8b:1e:41:9d:c6:47:ab:
8a:08:0d:d5:02:0e:e7:a8:e0:d3:18:fb:35:59:45:d3:22:3b:
5f:94:ed:b1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAglV1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NDZhMWJhMDJlNDM5MDY2ZWY1NzkwMTBlYTMwODA1NGFjOGJmOWRmMB4XDTIyMDYy
NDE0NDUwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2JjZjYwN2IwNjEy
ZDI4OTdkOTZjZGY1NzcyYTc2NTMyMzVjM2E0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI9/GqySS9sXthW+vJOSRsKgpaPHZ7yDEmb918iLGpsUi9LM
Ua5r07kMSOyrywVHUahMkJS+1jHCHQLMCZwa3QNmudEuk9O5sqplrv/OiuUGnATk
W1BrXrOw9aoiTGnxvv45L4QeE6WXb9b9DCh4YJiWR+lMVoinEVjVNpkENCR6W1ir
/0BId1Pa7lJV/adTJB5XvzC0CSIEvVPUnk1/MCfTuBbtLyHmt/BZINBGI6UOYCP1
N75BeZmvSelWu/GBigjiIyyu/fLBmHq+Yu+v6UxaFXJR6aCIx6KZbg0RLkFu9IV4
TZ0oO0YBOoDayuESateFn8I98yKGQ3yQBUIfsYkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7z2B7BhLSiX2WzfV3KnZTI1w6RTAfBgNVHSMEGDAWgBSEahugLkOQZu9X
kBDqMIBUrIv53zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hHb2JvQzVEa0didlY1QVE2akNBVkt5TC1kOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvYjRhMDgwLTUwODAtNDQ3ZS1hNTRkLWU5MGJlYTVmZmQ0MC8x
L084OWdld1lTMG9sOWxzMzFkeXAyVXlOY09rVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
YjRhMDgwLTUwODAtNDQ3ZS1hNTRkLWU5MGJlYTVmZmQ0MC8xL2hHb2JvQzVEa0di
dlY1QVE2akNBVkt5TC1kOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITHDANBgkqhkiG9w0BAQsFAAOC
AQEAJFYLVRQ0Nrf8zZsVso77IutKigl+NudAYO0xJYQXkbIw2sNTjMYfC5KWL7Ud
uQnlgGQxJOdwx/Vx9GsYqa7zRXNtqIDjNLTOfsOIJj0ukYQA2Y/1guL2n4Z34Ter
YXfO/OUUXK7btP/+zDsZsQe9U0LtHYhhZ+tMWQW70GVVCtg0qpT4UJIBRvHwEdnJ
RdP1XPZ2uLfrFF+fNoaJpFIebefQau4M5ORXcxrmWNxzLoA3Jpj9rXYyS+P5Xo8y
AdxU+a6yy8HxhsygceQ4F2EfZqs5nFp8OLYqJrwPG9qWsmyLh0WLHkGdxkeriggN
1QIO56jg0xj7NVlF0yI7X5TtsQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:54 2025 by rpki-client