Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/Cu9u1CzIKnO-G_kgtPEk345i0xQ.roa
File: Cu9u1CzIKnO-G_kgtPEk345i0xQ.roa (raw, json)
Hash identifier: YMryiu1XPL8rOhCC6nGxe2MMJJ7k5EuY2pzIJh4FE7Y=
Subject key identifier: 0A:EF:6E:D4:2C:C8:2A:73:BE:1B:F9:20:B4:F1:24:DF:8E:62:D3:14
Certificate issuer: /CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Certificate serial: 018572280A00D901588FAC503F0BC57C18C0
Authority key identifier: A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/Cu9u1CzIKnO-G_kgtPEk345i0xQ.roa
Signing time: Mon 02 Jan 2023 11:05:04 +0000
ROA not before: Mon 02 Jan 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0a:00:d9:01:58:8f:ac:50:3f:0b:c5:7c:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b8831cdaf19440e5d652f14efc3a93efb8fea
Validity
Not Before: Jan 2 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aef6ed42cc82a73be1bf920b4f124df8e62d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:2e:25:d4:58:93:89:2c:a8:ed:1f:4d:e5:
c2:45:46:1d:1f:c4:a0:fe:4c:e3:d8:dc:fd:8a:1f:
9d:1f:44:f8:80:62:a8:46:29:71:37:c7:eb:53:49:
d0:9b:95:3b:dd:ba:3a:80:2e:f0:a0:33:8b:8a:ad:
43:e0:db:1c:7c:4b:7d:59:17:0b:12:63:d7:8a:6e:
e6:0e:d0:ef:e3:bc:5f:ac:9f:cf:0c:0b:3d:68:e9:
5c:f3:1e:07:ca:fe:9d:86:ef:6a:f4:cc:c6:6e:8d:
58:98:43:1e:fc:63:0a:11:2b:c6:51:55:9b:07:4c:
0e:e1:81:a4:93:70:05:63:d3:1b:fb:1d:d5:82:83:
93:fc:14:3e:db:16:b3:85:77:4a:26:22:e4:1c:b8:
7b:3f:f6:f6:8e:97:97:67:ac:6f:05:7d:8a:40:2b:
e7:b4:04:9c:55:72:a8:77:27:49:ca:3d:82:75:4e:
a4:f5:7d:05:63:5a:eb:3c:09:03:a6:58:ca:a5:af:
43:80:0c:38:25:33:f1:2c:fc:b1:9d:5b:e5:50:36:
68:90:44:ba:32:0a:13:4c:c9:02:57:00:bf:19:02:
a3:b0:f5:8e:88:b9:a0:f3:5f:fc:00:98:62:54:9e:
98:de:ae:17:26:ba:75:5a:fe:be:0a:82:15:48:ae:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:6E:D4:2C:C8:2A:73:BE:1B:F9:20:B4:F1:24:DF:8E:62:D3:14
X509v3 Authority Key Identifier:
keyid:A1:5B:88:31:CD:AF:19:44:0E:5D:65:2F:14:EF:C3:A9:3E:FB:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVuIMc2vGUQOXWUvFO_DqT77j-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/Cu9u1CzIKnO-G_kgtPEk345i0xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ff5936-bd65-4500-860a-b60e3f3ee98c/1/oVuIMc2vGUQOXWUvFO_DqT77j-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
42:31:61:57:66:46:e5:0c:91:48:0c:7d:e1:8c:75:14:be:89:
72:bf:45:1a:71:d1:1f:67:b3:e1:36:c9:67:9d:50:7c:86:f8:
8a:4e:f2:13:22:59:f0:eb:b6:f2:d7:9d:99:fd:98:45:1e:6c:
2b:95:dc:17:55:28:73:d0:fb:f2:24:d0:8a:44:17:a7:c5:da:
e3:43:1d:97:fd:6e:e1:f1:92:a3:8b:03:1a:2b:1c:07:3c:af:
bb:a1:93:ee:d4:01:d1:23:59:01:43:14:96:a1:a4:db:6a:0f:
ac:bc:e4:cc:fd:f3:4c:ac:11:8c:d2:90:26:67:b7:5f:4c:50:
9a:f8:a0:a2:e6:c0:d3:42:99:64:ed:56:8e:e0:a1:cd:96:b9:
83:85:12:09:99:12:9a:d7:02:86:ad:b5:57:c6:7e:af:06:15:
66:de:33:a9:a1:2a:39:e7:f6:c0:50:24:99:ad:8b:5d:5b:a0:
eb:a7:bd:12:94:11:f4:9b:9f:47:c8:aa:ac:6e:0b:7f:6d:1f:
ad:57:34:37:4e:38:d1:7f:87:4b:87:c0:7d:82:b0:14:bd:7f:
72:50:97:2b:cd:56:d8:e1:2b:96:23:e9:45:b6:81:96:63:16:
6b:4f:08:e5:56:3e:c3:8c:36:b2:29:11:43:c8:4e:50:3d:1e:
83:34:81:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyKAoA2QFYj6xQPwvFfBjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWI4ODMxY2RhZjE5NDQwZTVkNjUyZjE0ZWZjM2E5M2Vm
YjhmZWEwHhcNMjMwMTAyMTEwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWVmNmVkNDJjYzgyYTczYmUxYmY5MjBiNGYxMjRkZjhlNjJkMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLouJdRYk4ksqO0fTeXCRUYdH8Sg
/kzj2Nz9ih+dH0T4gGKoRilxN8frU0nQm5U73bo6gC7woDOLiq1D4NscfEt9WRcL
EmPXim7mDtDv47xfrJ/PDAs9aOlc8x4Hyv6dhu9q9MzGbo1YmEMe/GMKESvGUVWb
B0wO4YGkk3AFY9Mb+x3VgoOT/BQ+2xazhXdKJiLkHLh7P/b2jpeXZ6xvBX2KQCvn
tAScVXKodydJyj2CdU6k9X0FY1rrPAkDpljKpa9DgAw4JTPxLPyxnVvlUDZokES6
MgoTTMkCVwC/GQKjsPWOiLmg81/8AJhiVJ6Y3q4XJrp1Wv6+CoIVSK7oZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFArvbtQsyCpzvhv5ILTxJN+OYtMUMB8GA1UdIwQY
MBaAFKFbiDHNrxlEDl1lLxTvw6k++4/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1Z1SU1jMnZHVVFPWFdVdkZPX0RxVDc3ai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mZjU5MzYtYmQ2NS00NTAwLTg2MGEt
YjYwZTNmM2VlOThjLzEvQ3U5dTFDeklLbk8tR19rZ3RQRWszNDVpMHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mZjU5MzYtYmQ2NS00NTAwLTg2MGEtYjYwZTNmM2VlOThj
LzEvb1Z1SU1jMnZHVVFPWFdVdkZPX0RxVDc3ai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMxMA0G
CSqGSIb3DQEBCwUAA4IBAQBCMWFXZkblDJFIDH3hjHUUvolyv0UacdEfZ7PhNsln
nVB8hviKTvITIlnw67by152Z/ZhFHmwrldwXVShz0PvyJNCKRBenxdrjQx2X/W7h
8ZKjiwMaKxwHPK+7oZPu1AHRI1kBQxSWoaTbag+svOTM/fNMrBGM0pAmZ7dfTFCa
+KCi5sDTQplk7VaO4KHNlrmDhRIJmRKa1wKGrbVXxn6vBhVm3jOpoSo55/bAUCSZ
rYtdW6Drp70SlBH0m59HyKqsbgt/bR+tVzQ3TjjRf4dLh8B9grAUvX9yUJcrzVbY
4SuWI+lFtoGWYxZrTwjlVj7DjDayKRFDyE5QPR6DNIFQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:08 2024 by rpki-client on console-ams.rpki-client.org