Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/Un-YwpOSqB2TGYbKrGtHXywq9h8.roa
File: Un-YwpOSqB2TGYbKrGtHXywq9h8.roa (raw, json)
Hash identifier: axwiacqctQOol19pnrZhU3x4b/bUjQxMWOHT+r9RtUs=
Subject key identifier: 52:7F:98:C2:93:92:A8:1D:93:19:86:CA:AC:6B:47:5F:2C:2A:F6:1F
Certificate issuer: /CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Certificate serial: 0188208673AEE226EFFAFB4D6E8146D55A22
Authority key identifier: 77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/Un-YwpOSqB2TGYbKrGtHXywq9h8.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:73:ae:e2:26:ef:fa:fb:4d:6e:81:46:d5:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=527f98c29392a81d931986caac6b475f2c2af61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:e1:1e:9b:dc:5b:a2:19:45:ce:1d:01:9f:
32:25:82:d5:3f:a5:d0:93:4a:c6:80:ca:3d:20:54:
af:42:f4:e6:a6:c2:58:ac:7a:3f:88:6e:b9:ef:a4:
bc:94:cd:15:77:de:3f:a6:55:8a:e6:e6:96:70:ab:
52:da:35:7f:70:e4:f9:5e:37:30:bd:67:f3:bf:0c:
b7:2e:98:46:60:d3:52:88:67:15:83:2b:e9:be:bd:
b2:1b:16:df:7b:b9:d9:cf:16:45:ef:66:af:d2:17:
31:e7:a0:ec:70:46:e1:45:92:60:98:d6:9b:72:c2:
69:1c:17:c5:0b:77:fe:4e:a0:c6:3a:30:90:84:db:
84:19:c2:25:99:8b:e2:4e:41:46:e8:e2:7d:79:4b:
40:7a:7e:c3:d1:93:97:2b:98:80:ce:1c:ec:1c:99:
de:8c:8e:6a:cc:8e:18:e0:33:a1:bf:cf:e9:dc:37:
1f:9b:fc:49:6a:cc:6f:c0:94:8b:bb:7b:06:d5:16:
02:1b:4a:45:58:5a:66:16:22:e9:e4:a5:c0:ff:e5:
92:2e:5a:d6:23:39:46:22:5a:e5:3c:cc:fe:be:57:
3b:8e:ac:fe:53:4a:68:76:79:e4:fc:7a:a8:e1:93:
e8:2e:12:4e:bc:c7:a5:3c:41:18:5c:d9:b6:cf:07:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:98:C2:93:92:A8:1D:93:19:86:CA:AC:6B:47:5F:2C:2A:F6:1F
X509v3 Authority Key Identifier:
keyid:77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/Un-YwpOSqB2TGYbKrGtHXywq9h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bc:bd:8f:e3:7b:20:f6:07:49:db:bb:a2:a9:bf:fa:88:51:
ba:6f:bc:a7:49:9d:d2:8f:79:e1:9d:a4:e2:cd:d2:ed:b8:0a:
0a:f3:9f:c1:88:b2:42:c2:cf:60:47:72:99:f3:18:e0:b4:8a:
d2:c0:ec:ba:e3:45:53:d7:50:60:da:8d:00:70:2a:b0:20:1f:
b5:50:34:99:26:a2:d9:6c:a0:8f:3b:bb:04:bd:5f:bc:83:53:
e7:56:de:ce:77:38:a5:5f:6b:f4:5f:37:67:51:41:bd:3a:f3:
13:fb:31:45:59:0e:52:1d:29:35:a1:b8:12:94:c5:c3:39:dd:
c8:17:96:eb:8a:83:cf:c3:da:28:e3:f8:37:fb:c9:d2:92:fc:
5c:ed:f5:f9:58:9f:91:02:89:61:bd:7d:17:a2:af:d0:96:90:
46:af:3e:6d:cb:eb:d0:65:6b:5e:2b:a5:79:5d:8a:0f:d6:b4:
14:76:ff:21:7d:1d:ee:03:a7:fe:91:91:1b:d8:e5:9d:ca:32:
bf:7d:0c:03:3a:41:22:28:8a:6f:34:a0:42:36:bb:dc:a6:97:
6c:45:6c:bb:4e:3f:04:06:7a:b7:01:fe:f0:bd:be:a9:25:f7:
7c:79:b1:be:c6:28:15:f5:70:43:43:ab:e8:da:1c:78:e6:34:
aa:c6:a4:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnOu4ibv+vtNboFG1VoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzYxMzFiMmQ5NzlmOTU3ZWIxZWQxZGJjYmVlM2M1ZGYy
ODhjNzgwHhcNMjMwNTE1MTc0NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjdmOThjMjkzOTJhODFkOTMxOTg2Y2FhYzZiNDc1ZjJjMmFmNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkDhHpvcW6IZRc4dAZ8yJYLVP6XQ
k0rGgMo9IFSvQvTmpsJYrHo/iG6576S8lM0Vd94/plWK5uaWcKtS2jV/cOT5Xjcw
vWfzvwy3LphGYNNSiGcVgyvpvr2yGxbfe7nZzxZF72av0hcx56DscEbhRZJgmNab
csJpHBfFC3f+TqDGOjCQhNuEGcIlmYviTkFG6OJ9eUtAen7D0ZOXK5iAzhzsHJne
jI5qzI4Y4DOhv8/p3Dcfm/xJasxvwJSLu3sG1RYCG0pFWFpmFiLp5KXA/+WSLlrW
IzlGIlrlPMz+vlc7jqz+U0podnnk/Hqo4ZPoLhJOvMelPEEYXNm2zwcH5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJ/mMKTkqgdkxmGyqxrR18sKvYfMB8GA1UdIwQY
MBaAFHfGExstl5+VfrHtHby+48XfKIx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhZVEd5MlhuNVYtc2UwZHZMN2p4ZDhvakhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mNGZjOTQtOTkwNC00ZjZmLWE0NzIt
NGE2YWIwY2RiMzE5LzEvVW4tWXdwT1NxQjJUR1liS3JHdEhYeXdxOWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mNGZjOTQtOTkwNC00ZjZmLWE0NzItNGE2YWIwY2RiMzE5
LzEvZDhZVEd5MlhuNVYtc2UwZHZMN2p4ZDhvakhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN5MA0G
CSqGSIb3DQEBCwUAA4IBAQCbvL2P43sg9gdJ27uiqb/6iFG6b7ynSZ3Sj3nhnaTi
zdLtuAoK85/BiLJCws9gR3KZ8xjgtIrSwOy640VT11Bg2o0AcCqwIB+1UDSZJqLZ
bKCPO7sEvV+8g1PnVt7OdzilX2v0XzdnUUG9OvMT+zFFWQ5SHSk1obgSlMXDOd3I
F5brioPPw9oo4/g3+8nSkvxc7fX5WJ+RAolhvX0Xoq/QlpBGrz5ty+vQZWteK6V5
XYoP1rQUdv8hfR3uA6f+kZEb2OWdyjK/fQwDOkEiKIpvNKBCNrvcppdsRWy7Tj8E
Bnq3Af7wvb6pJfd8ebG+xigV9XBDQ6vo2hx45jSqxqQj
-----END CERTIFICATE-----
Generated at Wed Nov 15 15:24:38 2023 by rpki-client on console-fra.rpki-client.org