Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/uR3QdWIRnkx6hSJi5I2dpq4yXGw.roa
File: uR3QdWIRnkx6hSJi5I2dpq4yXGw.roa (raw, json)
Hash identifier: GJFSFPIoSOBQFCvQ1XcJpyLU52G9sPqumYi5kKEQAxU=
Subject key identifier: B9:1D:D0:75:62:11:9E:4C:7A:85:22:62:E4:8D:9D:A6:AE:32:5C:6C
Certificate issuer: /CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
Certificate serial: 7BB1F2
Authority key identifier: 55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/uR3QdWIRnkx6hSJi5I2dpq4yXGw.roa
Signing time: Sat 01 Jan 2022 01:55:26 +0000
ROA not before: Sat 01 Jan 2022 01:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8106482 (0x7bb1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
Validity
Not Before: Jan 1 01:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b91dd07562119e4c7a852262e48d9da6ae325c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:b9:67:0b:6b:11:c9:5a:63:0b:b8:68:dc:
13:71:ee:41:08:6e:e2:36:65:71:37:a7:7e:d6:e1:
f1:c0:5c:4b:2f:e9:49:c9:80:bb:47:42:eb:09:b6:
5d:fd:ea:3c:9e:68:6c:40:01:f9:a3:51:6b:70:df:
ac:3b:af:7c:c8:b1:b9:74:67:59:5b:85:d2:c0:7d:
72:42:0c:af:dd:cb:d0:3d:b2:54:cb:14:aa:aa:5b:
3b:9d:e9:9a:af:b7:28:00:95:4f:17:14:b5:31:34:
94:63:93:85:d2:9b:39:3a:d9:78:5b:ca:be:29:73:
69:31:f0:9d:04:0f:c3:24:b9:a5:d1:6c:a7:49:f9:
73:ad:07:78:7e:fb:6e:a6:a8:bc:96:26:a1:3e:ac:
d3:a9:51:8f:9d:c5:b2:71:d0:a6:0d:7c:80:08:60:
fd:4e:86:99:48:d3:b4:34:1e:e6:a6:dd:5f:67:ed:
8f:14:d9:db:af:da:46:7c:d6:d5:5f:18:3c:9c:ba:
3c:f7:bb:a6:c1:07:50:45:e2:c2:19:80:6f:8b:62:
9b:4a:62:35:42:39:62:ee:64:3e:13:d4:4e:2a:58:
99:84:25:55:a3:cc:a4:30:1d:bb:d7:a9:0a:fe:48:
2e:b7:54:37:13:11:58:79:88:cc:4f:c9:9d:0b:aa:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:D0:75:62:11:9E:4C:7A:85:22:62:E4:8D:9D:A6:AE:32:5C:6C
X509v3 Authority Key Identifier:
keyid:55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/uR3QdWIRnkx6hSJi5I2dpq4yXGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:d9:d4:87:5b:96:1f:8f:d4:eb:f4:21:95:07:36:3c:7b:
ea:3a:30:da:59:df:da:24:3a:b0:24:ed:af:d5:7e:9d:03:85:
f1:88:c3:0c:24:f6:74:20:8c:5a:ff:14:19:12:ff:2d:05:66:
b1:83:51:e7:ce:31:d9:cd:df:90:0d:59:5e:e0:4e:ac:cd:ba:
f6:67:9b:51:4a:25:07:0d:92:f5:64:76:45:40:34:c9:78:6a:
86:f1:d5:e9:e6:06:e8:3e:03:11:1b:fa:ba:32:41:90:23:de:
ce:c5:70:fb:a8:96:5f:03:df:a7:fc:09:fe:4a:83:9d:af:cd:
d3:17:05:49:43:5c:fb:31:3c:c9:85:20:a3:a3:6d:43:d8:fb:
f9:ed:60:06:ff:ab:3c:24:e9:0b:29:1f:24:5e:46:5b:16:30:
fd:a9:68:41:3b:d8:6c:24:65:e6:98:57:a1:d8:fe:ce:73:8e:
20:d4:af:db:63:a9:41:f3:ba:3c:a6:66:7a:24:25:93:1c:64:
24:c7:6b:db:44:d9:eb:f0:3a:e7:e5:61:a2:69:11:1b:ce:b0:
d2:30:0c:03:23:f7:ac:6f:99:ea:dc:0c:3f:cd:0c:3c:2b:a8:
04:25:ea:6f:9b:ca:64:62:04:fc:fe:5d:85:67:ad:3b:a5:70:
80:fd:82:e0
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDe7HyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU1
ODFmYjFlM2I1OWQ1YzY0NGQyNmY5MGFhODJmNzBhZDJhMWMwYzgwHhcNMjIwMTAx
MDE1NTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiOTFkZDA3NTYyMTE5
ZTRjN2E4NTIyNjJlNDhkOWRhNmFlMzI1YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjxu5ZwtrEclaYwu4aNwTce5BCG7iNmVxN6d+1uHxwFxLL+lJ
yYC7R0LrCbZd/eo8nmhsQAH5o1FrcN+sO698yLG5dGdZW4XSwH1yQgyv3cvQPbJU
yxSqqls7nemar7coAJVPFxS1MTSUY5OF0ps5Otl4W8q+KXNpMfCdBA/DJLml0Wyn
SflzrQd4fvtupqi8liahPqzTqVGPncWycdCmDXyACGD9ToaZSNO0NB7mpt1fZ+2P
FNnbr9pGfNbVXxg8nLo897umwQdQReLCGYBvi2KbSmI1Qjli7mQ+E9ROKliZhCVV
o8ykMB2716kK/kgut1Q3ExFYeYjMT8mdC6q1jwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLkd0HViEZ5MeoUiYuSNnaauMlxsMB8GA1UdIwQYMBaAFFWB+x47WdXGRNJv
kKqC9wrSocDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VllIN0hqdFoxY1pFMG0tUXFvTDNDdEtod01nLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84NC84NjcyMmUtNGMwOC00N2I2LTg0MDUtNzYxMmY4NTcwODVkLzEv
dVIzUWRXSVJua3g2aFNKaTVJMmRwcTR5WEd3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84
NjcyMmUtNGMwOC00N2I2LTg0MDUtNzYxMmY4NTcwODVkLzEvVllIN0hqdFoxY1pF
MG0tUXFvTDNDdEtod01nLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMXMA0GCSqGSIb3DQEBCwUAA4IB
AQAtS9nUh1uWH4/U6/QhlQc2PHvqOjDaWd/aJDqwJO2v1X6dA4XxiMMMJPZ0IIxa
/xQZEv8tBWaxg1HnzjHZzd+QDVle4E6szbr2Z5tRSiUHDZL1ZHZFQDTJeGqG8dXp
5gboPgMRG/q6MkGQI97OxXD7qJZfA9+n/An+SoOdr83TFwVJQ1z7MTzJhSCjo21D
2Pv57WAG/6s8JOkLKR8kXkZbFjD9qWhBO9hsJGXmmFeh2P7Oc44g1K/bY6lB87o8
pmZ6JCWTHGQkx2vbRNnr8Drn5WGiaREbzrDSMAwDI/esb5nq3Aw/zQw8K6gEJepv
m8pkYgT8/l2FZ607pXCA/YLg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-fra.rpki-client.org