Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/CIv5SAEhnhB_WAmQqaP2IZ-0r24.roa
File: CIv5SAEhnhB_WAmQqaP2IZ-0r24.roa (raw, json)
Hash identifier: Xkb2BdaDbHvP9zSoMMCbvAW90DhqWQ7uVwEsEy2+lPI=
Subject key identifier: 08:8B:F9:48:01:21:9E:10:7F:58:09:90:A9:A3:F6:21:9F:B4:AF:6E
Certificate issuer: /CN=dd849063616aee8b9ae9084ade72842a007d3676
Certificate serial: 02080B5F
Authority key identifier: DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/CIv5SAEhnhB_WAmQqaP2IZ-0r24.roa
Signing time: Mon 20 Jun 2022 14:45:45 +0000
ROA not before: Mon 20 Jun 2022 14:45:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34081631 (0x2080b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd849063616aee8b9ae9084ade72842a007d3676
Validity
Not Before: Jun 20 14:45:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=088bf94801219e107f580990a9a3f6219fb4af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:4a:20:73:80:39:51:18:75:7c:e3:02:17:
d1:09:8f:1d:5c:f8:3e:2a:bb:52:62:28:01:01:f3:
f3:00:6f:c7:bd:3a:e8:6f:bc:d6:5d:54:bc:a8:f1:
82:55:2c:5c:95:b0:11:19:14:52:d0:65:89:a8:44:
56:22:0e:97:0b:d2:9c:88:a9:d2:f0:88:e6:57:36:
6b:8c:1f:6d:37:d3:71:78:a2:9a:af:47:c2:12:03:
3c:b5:b2:f7:fb:ff:17:24:b2:f2:cb:d4:1a:ba:08:
c9:de:81:1e:da:bf:a9:08:86:f4:50:0a:b1:39:3d:
1d:65:db:54:b2:f0:e2:87:df:54:25:2d:df:f7:79:
2a:21:c8:0d:c3:04:f3:3b:57:85:00:30:f8:44:59:
28:44:8c:98:12:88:a3:b7:bf:63:d4:31:e2:0c:44:
3a:3d:61:20:01:80:92:04:6f:64:e3:a7:0d:5f:94:
66:49:bd:5f:4d:89:92:8a:af:ce:a0:d9:47:ec:74:
df:9e:31:f0:00:eb:b2:a9:3f:9d:97:b6:d1:b4:ae:
00:50:c4:40:cd:11:0b:60:82:89:ec:af:83:98:26:
90:10:f2:d5:5a:96:8e:8b:30:bd:cd:00:b4:50:d0:
17:3c:e0:4b:36:4d:10:bd:c1:3e:ca:db:f3:36:19:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:F9:48:01:21:9E:10:7F:58:09:90:A9:A3:F6:21:9F:B4:AF:6E
X509v3 Authority Key Identifier:
keyid:DD:84:90:63:61:6A:EE:8B:9A:E9:08:4A:DE:72:84:2A:00:7D:36:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YSQY2Fq7oua6QhK3nKEKgB9NnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/CIv5SAEhnhB_WAmQqaP2IZ-0r24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/093058-de40-45d9-8f2f-c8f1e1478838/1/3YSQY2Fq7oua6QhK3nKEKgB9NnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ff:f1:e0:20:7e:aa:94:59:38:ab:e7:e7:19:ba:e9:3e:3f:
3d:0e:70:90:bd:52:fe:88:2d:33:0a:9b:b4:15:e5:2c:e2:68:
b3:31:f9:24:87:24:f7:ab:76:f3:61:fe:ee:b6:2e:4c:ab:cc:
fb:95:02:6d:fd:c6:26:ab:83:c6:4f:a1:70:86:dd:b5:fe:43:
d8:3a:5c:02:f0:ca:5c:08:b7:1b:25:bd:58:8f:75:ea:2b:5c:
b1:34:42:90:72:fa:f6:c0:de:07:b8:17:da:25:82:0b:06:9e:
2e:28:5f:f4:f2:6c:5b:78:dd:a3:95:5b:b0:13:04:fd:bc:74:
fe:5d:f6:23:19:b1:36:43:06:63:a4:0a:8d:60:31:f9:a8:66:
e1:43:a8:5d:5a:60:f9:81:7f:55:ea:d8:f8:8b:a0:04:0e:c1:
ff:a8:bf:39:87:0e:ef:17:3c:61:5e:64:65:4a:71:0e:d2:1d:
27:9a:4b:55:58:3b:66:a6:11:4b:a5:f7:c1:1b:dd:f0:1d:d2:
a6:b0:69:d8:9c:01:d5:65:23:92:67:6c:71:8a:67:8b:2e:e8:
01:08:36:57:ac:77:1b:5a:43:15:02:da:e3:84:3e:51:76:b0:
02:03:59:ec:82:dc:9a:41:18:b8:e8:9a:c5:0c:31:48:46:13:
16:a0:8c:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAggLXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZDg0OTA2MzYxNmFlZThiOWFlOTA4NGFkZTcyODQyYTAwN2QzNjc2MB4XDTIyMDYy
MDE0NDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDg4YmY5NDgwMTIx
OWUxMDdmNTgwOTkwYTlhM2Y2MjE5ZmI0YWY2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2LSiBzgDlRGHV84wIX0QmPHVz4Piq7UmIoAQHz8wBvx706
6G+81l1UvKjxglUsXJWwERkUUtBliahEViIOlwvSnIip0vCI5lc2a4wfbTfTcXii
mq9HwhIDPLWy9/v/FySy8svUGroIyd6BHtq/qQiG9FAKsTk9HWXbVLLw4offVCUt
3/d5KiHIDcME8ztXhQAw+ERZKESMmBKIo7e/Y9Qx4gxEOj1hIAGAkgRvZOOnDV+U
Zkm9X02JkoqvzqDZR+x0354x8ADrsqk/nZe20bSuAFDEQM0RC2CCieyvg5gmkBDy
1VqWjoswvc0AtFDQFzzgSzZNEL3BPsrb8zYZO60CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIi/lIASGeEH9YCZCpo/Yhn7SvbjAfBgNVHSMEGDAWgBTdhJBjYWrui5rp
CErecoQqAH02djAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNZU1FZMkZxN291YTZRaEszbktFS2dCOU5uWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTEvMDkzMDU4LWRlNDAtNDVkOS04ZjJmLWM4ZjFlMTQ3ODgzOC8x
L0NJdjVTQUVobmhCX1dBbVFxYVAySVotMHIyNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEv
MDkzMDU4LWRlNDAtNDVkOS04ZjJmLWM4ZjFlMTQ3ODgzOC8xLzNZU1FZMkZxN291
YTZRaEszbktFS2dCOU5uWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITJjANBgkqhkiG9w0BAQsFAAOC
AQEAD//x4CB+qpRZOKvn5xm66T4/PQ5wkL1S/ogtMwqbtBXlLOJoszH5JIck96t2
82H+7rYuTKvM+5UCbf3GJquDxk+hcIbdtf5D2DpcAvDKXAi3GyW9WI916itcsTRC
kHL69sDeB7gX2iWCCwaeLihf9PJsW3jdo5VbsBME/bx0/l32IxmxNkMGY6QKjWAx
+ahm4UOoXVpg+YF/VerY+IugBA7B/6i/OYcO7xc8YV5kZUpxDtIdJ5pLVVg7ZqYR
S6X3wRvd8B3SprBp2JwB1WUjkmdscYpniy7oAQg2V6x3G1pDFQLa44Q+UXawAgNZ
7ILcmkEYuOiaxQwxSEYTFqCMDw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org