Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/1rT_JZzAVmui_8ccUvruW8tvzOM.roa
File: 1rT_JZzAVmui_8ccUvruW8tvzOM.roa (raw, json)
Hash identifier: z1vVTFkBjyR5WPymW3wH2TLtR8t+0o2vdvkxDrm9FZM=
Subject key identifier: D6:B4:FF:25:9C:C0:56:6B:A2:FF:C7:1C:52:FA:EE:5B:CB:6F:CC:E3
Certificate issuer: /CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Certificate serial: 018570307456A186E177597EC48FF7C4B475
Authority key identifier: 11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/1rT_JZzAVmui_8ccUvruW8tvzOM.roa
Signing time: Mon 02 Jan 2023 01:55:01 +0000
ROA not before: Mon 02 Jan 2023 01:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41957
IP address blocks: 146.19.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:74:56:a1:86:e1:77:59:7e:c4:8f:f7:c4:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Validity
Not Before: Jan 2 01:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6b4ff259cc0566ba2ffc71c52faee5bcb6fcce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:88:d3:86:21:e7:bf:87:3b:60:6e:20:6c:
b6:7a:b3:b0:18:ee:a7:42:7d:cf:15:ba:e7:05:6e:
f8:8c:9c:9a:30:46:aa:44:05:78:93:78:f5:e4:4b:
75:fe:ba:f6:b0:51:c3:da:60:ba:9c:5a:79:7f:54:
3a:0d:5e:75:54:f2:93:1f:d9:e9:5d:ff:76:83:71:
e7:36:df:13:57:74:8c:d9:a4:0f:b8:0b:61:cd:e7:
fa:45:3f:75:97:95:23:f4:8f:ec:98:ad:c8:c4:95:
6d:e4:93:3a:67:8e:74:50:e8:29:ed:4e:bc:64:f4:
6f:ac:96:c5:f0:aa:73:d3:65:6d:04:58:c2:98:e7:
19:e2:8f:36:37:68:04:d9:3b:73:f8:36:80:22:d7:
56:46:91:a2:80:35:83:cd:f9:40:cb:23:15:cb:69:
07:cc:5a:6d:4b:26:68:89:16:83:1a:79:9c:5d:7f:
e0:a2:bc:ee:e3:7c:2a:fd:71:00:8d:27:0c:bf:f9:
d8:36:c0:4d:88:e4:50:a0:9b:60:70:ee:af:1e:17:
90:0d:af:9e:fd:d6:92:6a:48:ca:37:07:91:b6:b1:
2c:6c:de:c6:d5:5c:35:74:c9:e9:6a:0a:6e:b0:f8:
07:57:25:a6:31:87:9a:31:a0:f0:a2:a9:46:e5:a9:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B4:FF:25:9C:C0:56:6B:A2:FF:C7:1C:52:FA:EE:5B:CB:6F:CC:E3
X509v3 Authority Key Identifier:
keyid:11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/1rT_JZzAVmui_8ccUvruW8tvzOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.180.0/24
Signature Algorithm: sha256WithRSAEncryption
80:48:38:99:8b:76:a1:1f:46:ec:82:fa:9a:e2:16:91:c1:ce:
12:85:bf:39:01:78:33:1f:da:40:48:1f:25:db:e5:21:ce:db:
40:03:61:e4:10:0e:6a:49:66:43:c4:58:0d:b8:de:24:a8:41:
24:10:19:bb:6a:30:65:f1:ce:9c:06:06:fa:b1:5c:4e:f4:42:
9b:32:6c:fe:4f:bf:59:7e:48:d6:64:57:00:5e:f4:35:57:f0:
41:20:81:a6:49:37:ab:45:94:35:77:92:c3:4b:f2:ea:bf:fe:
27:13:09:08:ea:7f:7b:64:26:b5:99:bb:e3:6e:ce:72:b9:71:
79:ea:e9:2a:41:07:4a:c6:9c:d8:e4:db:71:ca:88:d5:40:b3:
f8:6f:28:80:ca:41:ff:fc:c6:80:37:93:99:ee:4a:76:72:d3:
72:15:46:e6:77:5d:50:48:42:9f:ec:e1:b4:42:5f:48:55:96:
bc:e8:5a:9a:6a:d6:8d:ca:2d:45:88:a6:06:6a:45:47:20:b6:
67:f2:78:79:e3:3d:34:95:45:be:0d:11:21:60:d5:da:48:57:
9e:7c:7e:d8:78:00:aa:92:17:9f:ec:f4:99:94:47:67:eb:3e:
5b:69:cd:a0:cb:07:e1:66:ca:f5:79:45:b2:f6:12:ec:25:8c:
fe:46:46:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMHRWoYbhd1l+xI/3xLR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTg3ZGMxOGJmYThiMmEyOGFhNDlkMTBkYTZkNTRjMDgz
MTQ2NDQwHhcNMjMwMTAyMDE1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmI0ZmYyNTljYzA1NjZiYTJmZmM3MWM1MmZhZWU1YmNiNmZjY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw12I04Yh57+HO2BuIGy2erOwGO6n
Qn3PFbrnBW74jJyaMEaqRAV4k3j15Et1/rr2sFHD2mC6nFp5f1Q6DV51VPKTH9np
Xf92g3HnNt8TV3SM2aQPuAthzef6RT91l5Uj9I/smK3IxJVt5JM6Z450UOgp7U68
ZPRvrJbF8Kpz02VtBFjCmOcZ4o82N2gE2Ttz+DaAItdWRpGigDWDzflAyyMVy2kH
zFptSyZoiRaDGnmcXX/gorzu43wq/XEAjScMv/nYNsBNiORQoJtgcO6vHheQDa+e
/daSakjKNweRtrEsbN7G1Vw1dMnpagpusPgHVyWmMYeaMaDwoqlG5alYOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNa0/yWcwFZrov/HHFL67lvLb8zjMB8GA1UdIwQY
MBaAFBEYfcGL+osqKKpJ0Q2m1UwIMUZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJoOXdZdjZpeW9vcWtuUkRhYlZUQWd4UmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmYzNjctMDAzMy00YjhhLWFmMjMt
MjA2NGVmZmZmNmNhLzEvMXJUX0paekFWbXVpXzhjY1V2cnVXOHR2ek9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zYmYzNjctMDAzMy00YjhhLWFmMjMtMjA2NGVmZmZmNmNh
LzEvRVJoOXdZdjZpeW9vcWtuUkRhYlZUQWd4UmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhO0MA0G
CSqGSIb3DQEBCwUAA4IBAQCASDiZi3ahH0bsgvqa4haRwc4Shb85AXgzH9pASB8l
2+UhzttAA2HkEA5qSWZDxFgNuN4kqEEkEBm7ajBl8c6cBgb6sVxO9EKbMmz+T79Z
fkjWZFcAXvQ1V/BBIIGmSTerRZQ1d5LDS/Lqv/4nEwkI6n97ZCa1mbvjbs5yuXF5
6ukqQQdKxpzY5NtxyojVQLP4byiAykH//MaAN5OZ7kp2ctNyFUbmd11QSEKf7OG0
Ql9IVZa86FqaataNyi1FiKYGakVHILZn8nh54z00lUW+DREhYNXaSFeefH7YeACq
khef7PSZlEdn6z5bac2gywfhZsr1eUWy9hLsJYz+Rkb3
-----END CERTIFICATE-----
Generated at Mon Nov 20 11:40:00 2023 by rpki-client on console-fra.rpki-client.org