Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/eI8q9QBFUgaAffy7ZgTRLnaqSbk.roa
File: eI8q9QBFUgaAffy7ZgTRLnaqSbk.roa (raw, json)
Hash identifier: NlpLTIimJop76WGQtHt0QEe29WocwddQWEvs9RSA66U=
Subject key identifier: 78:8F:2A:F5:00:45:52:06:80:7D:FC:BB:66:04:D1:2E:76:AA:49:B9
Certificate issuer: /CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Certificate serial: 65D829
Authority key identifier: 0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/eI8q9QBFUgaAffy7ZgTRLnaqSbk.roa
Signing time: Sat 01 Jan 2022 03:55:12 +0000
ROA not before: Sat 01 Jan 2022 03:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6674473 (0x65d829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da9cddd276b8e3f8b0c9789bcc34a99603a5a57
Validity
Not Before: Jan 1 03:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=788f2af500455206807dfcbb6604d12e76aa49b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:93:22:6b:67:3f:7a:c3:ed:dc:0b:4b:8a:d8:
10:9f:d5:56:86:1e:b2:ab:8e:d7:4e:56:87:f3:25:
3c:01:cb:d5:1b:fd:d6:e7:56:39:90:9f:7f:74:6c:
05:b3:7b:f8:54:c7:fb:39:9b:24:9e:20:95:00:f0:
e6:64:f0:3f:69:a2:4c:ab:53:3e:ab:62:3b:7c:dd:
16:70:19:a2:c9:a9:77:be:e3:46:87:2d:d0:c5:78:
48:e0:f7:e8:e2:08:0c:7a:26:3b:ec:85:5c:38:70:
42:fc:5e:48:96:99:87:e6:72:4e:b4:3a:bb:64:33:
87:44:db:d1:c0:aa:f1:1c:e2:fe:db:b3:71:01:69:
e0:e8:bf:a1:11:43:52:81:ae:3c:38:4a:39:f1:99:
11:c8:08:56:5c:9b:a7:b7:41:a4:e0:9f:64:27:6e:
9e:f8:c8:dd:79:90:6a:67:1a:e2:74:dc:3a:09:1e:
c5:8c:90:a3:d3:1d:fe:32:5c:cb:50:43:09:41:b1:
26:f9:f4:01:26:73:72:fe:26:51:10:1e:76:38:6b:
01:df:e6:14:da:4d:4e:cd:29:3e:54:38:b6:da:20:
9b:a4:22:a5:79:b9:ec:7d:2b:60:62:54:0d:87:3e:
00:b7:fe:6b:0d:00:40:ea:7e:11:ff:74:b9:65:2b:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:2A:F5:00:45:52:06:80:7D:FC:BB:66:04:D1:2E:76:AA:49:B9
X509v3 Authority Key Identifier:
keyid:0D:A9:CD:DD:27:6B:8E:3F:8B:0C:97:89:BC:C3:4A:99:60:3A:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/eI8q9QBFUgaAffy7ZgTRLnaqSbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/47fd6c-52ee-4377-b4a7-9148ce9cbcf1/1/DanN3Sdrjj-LDJeJvMNKmWA6Wlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f3:45:47:05:9b:0b:fb:1f:b0:cc:5e:43:9e:ef:25:3d:88:
ea:f0:d8:f3:cc:ac:4e:5d:34:d8:8f:f8:87:8b:50:6b:2c:72:
f8:f8:34:35:c6:5a:aa:90:ff:d8:9b:98:60:46:ba:56:5e:9e:
49:a2:20:04:7b:75:eb:b5:6c:f7:71:86:73:e4:d5:76:7b:5c:
a0:77:73:a2:c7:42:5a:34:50:1c:7f:d3:9c:25:ad:62:3d:57:
24:50:17:cc:6e:af:54:8c:53:d3:28:79:4d:04:26:5a:99:e6:
fa:8b:f7:26:be:9e:8f:84:a1:81:08:57:6a:a5:9d:d9:41:fe:
43:a4:a7:dc:ff:9b:38:0f:4e:3f:a7:16:f4:19:da:83:e0:86:
dc:53:30:52:87:f6:8e:15:ad:52:c0:d6:a6:34:6b:b1:ed:00:
01:23:39:5a:2b:25:4b:93:35:57:39:ee:2c:71:64:f2:49:da:
08:f7:18:13:4c:9f:68:d9:72:4e:80:64:29:b4:eb:d6:99:a8:
a8:1f:a2:12:54:36:7b:22:f3:1b:13:13:52:cb:08:79:06:10:
e3:d5:32:d1:c9:ad:ac:a1:8f:e3:fc:c4:2a:41:5e:3b:6c:11:
2e:ae:65:4d:c7:20:b6:aa:95:2a:ef:1b:6d:ac:ce:8c:dd:09:
79:8d:15:ab
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDZdgpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBk
YTljZGRkMjc2YjhlM2Y4YjBjOTc4OWJjYzM0YTk5NjAzYTVhNTcwHhcNMjIwMTAx
MDM1NTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ODhmMmFmNTAwNDU1
MjA2ODA3ZGZjYmI2NjA0ZDEyZTc2YWE0OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA/JMia2c/esPt3AtLitgQn9VWhh6yq47XTlaH8yU8AcvVG/3W
51Y5kJ9/dGwFs3v4VMf7OZskniCVAPDmZPA/aaJMq1M+q2I7fN0WcBmiyal3vuNG
hy3QxXhI4Pfo4ggMeiY77IVcOHBC/F5IlpmH5nJOtDq7ZDOHRNvRwKrxHOL+27Nx
AWng6L+hEUNSga48OEo58ZkRyAhWXJunt0Gk4J9kJ26e+MjdeZBqZxridNw6CR7F
jJCj0x3+MlzLUEMJQbEm+fQBJnNy/iZREB52OGsB3+YU2k1OzSk+VDi22iCbpCKl
ebnsfStgYlQNhz4At/5rDQBA6n4R/3S5ZSuY0QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHiPKvUARVIGgH38u2YE0S52qkm5MB8GA1UdIwQYMBaAFA2pzd0na44/iwyX
ibzDSplgOlpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RGFuTjNTZHJqai1MREplSnZNTkttV0E2V2xjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hMi80N2ZkNmMtNTJlZS00Mzc3LWI0YTctOTE0OGNlOWNiY2YxLzEv
ZUk4cTlRQkZVZ2FBZmZ5N1pnVFJMbmFxU2JrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80
N2ZkNmMtNTJlZS00Mzc3LWI0YTctOTE0OGNlOWNiY2YxLzEvRGFuTjNTZHJqai1M
REplSnZNTkttV0E2V2xjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPYMA0GCSqGSIb3DQEBCwUAA4IB
AQAA80VHBZsL+x+wzF5Dnu8lPYjq8NjzzKxOXTTYj/iHi1BrLHL4+DQ1xlqqkP/Y
m5hgRrpWXp5JoiAEe3XrtWz3cYZz5NV2e1ygd3Oix0JaNFAcf9OcJa1iPVckUBfM
bq9UjFPTKHlNBCZameb6i/cmvp6PhKGBCFdqpZ3ZQf5DpKfc/5s4D04/pxb0GdqD
4IbcUzBSh/aOFa1SwNamNGux7QABIzlaKyVLkzVXOe4scWTySdoI9xgTTJ9o2XJO
gGQptOvWmaioH6ISVDZ7IvMbExNSywh5BhDj1TLRya2soY/j/MQqQV47bBEurmVN
xyC2qpUq7xttrM6M3Ql5jRWr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-ams.rpki-client.org