Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wFij50smtEzbQWUOI_cN0cEeQhY.roa
File: wFij50smtEzbQWUOI_cN0cEeQhY.roa (raw, json)
Hash identifier: aOIhrd1PSKCXwgQ2TosDe5QWYKz/MoOBUvy5p8PFRGU=
Subject key identifier: C0:58:A3:E7:4B:26:B4:4C:DB:41:65:0E:23:F7:0D:D1:C1:1E:42:16
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 91D3BC
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wFij50smtEzbQWUOI_cN0cEeQhY.roa
Signing time: Mon 17 Jan 2022 09:56:50 +0000
ROA not before: Mon 17 Jan 2022 09:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9556924 (0x91d3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Jan 17 09:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c058a3e74b26b44cdb41650e23f70dd1c11e4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:a6:f0:37:9b:26:05:47:b9:3d:b1:ff:23:
4d:cd:ef:2d:41:10:4f:62:98:85:96:c9:1e:aa:a4:
a8:87:e3:cd:76:e5:61:7e:1d:70:bb:f8:5d:b9:3a:
30:3b:2e:54:91:c5:a2:b5:f0:d6:18:91:c7:09:38:
0d:a3:09:80:8c:22:1f:2e:b0:32:0e:97:3a:e6:19:
a8:f8:9e:e3:5b:0d:0d:48:c4:53:34:bf:01:97:fb:
7f:a7:38:e1:f6:15:ce:34:05:82:9e:f4:0a:af:88:
35:36:0f:45:6a:00:e5:06:33:ab:65:fa:d7:f0:ee:
c7:25:2b:23:d9:61:3b:b9:4f:ff:da:85:cc:07:91:
72:f4:22:b4:cc:f7:9e:3c:33:59:43:02:df:e3:4b:
44:58:50:b5:97:88:6d:87:9a:bb:bb:27:d6:3c:41:
d7:67:7c:eb:26:1b:74:91:97:50:44:61:7c:d1:74:
2f:55:38:eb:13:9d:d0:af:73:85:b8:75:a2:ae:1e:
16:fe:f5:77:65:83:0a:c2:08:5a:3e:26:34:a8:02:
57:2b:fc:c9:16:4e:77:dd:f4:67:94:69:8f:ee:8e:
01:02:bb:08:cf:44:42:77:54:b0:54:67:2c:5b:28:
7d:f5:89:3d:c2:cd:96:ea:6c:17:41:e9:f8:53:48:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:A3:E7:4B:26:B4:4C:DB:41:65:0E:23:F7:0D:D1:C1:1E:42:16
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wFij50smtEzbQWUOI_cN0cEeQhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
41:02:25:ad:1a:24:60:31:ab:99:1b:28:6a:82:b9:29:2c:5a:
99:61:5a:b3:00:f2:b2:0f:35:bd:4f:59:91:4a:96:b2:7a:3a:
a8:1a:9d:00:c4:47:ef:f7:f7:81:09:42:82:21:cb:c2:54:61:
ed:62:95:37:5f:ef:b9:7d:20:44:d3:1b:bd:b1:05:99:04:9f:
6b:bf:d4:ad:dd:aa:a3:68:31:6e:4c:fc:09:fc:59:d1:82:70:
d7:bf:70:0c:b6:38:90:c1:ae:a7:de:4b:a4:38:71:41:b5:d0:
a4:a1:ed:fa:c7:f2:56:0e:f0:a2:5c:a0:56:64:1d:06:e9:df:
ae:48:03:20:72:a8:61:17:6f:5d:d1:d7:b6:01:c1:1f:14:12:
0a:9d:aa:dc:7b:ef:7e:d5:0b:d0:c7:be:67:d3:07:b5:16:88:
4e:d4:1d:83:29:29:e4:e8:56:44:e5:6e:5a:1d:3e:c9:b3:e9:
14:01:34:6f:63:18:74:63:3d:cb:ba:4d:ad:5e:d7:7c:68:93:
ea:74:fc:f2:0f:3f:4b:af:1b:15:e5:40:43:18:31:b0:89:eb:
0f:60:ee:bc:76:be:e9:35:7c:a3:8c:c1:63:db:19:a0:51:f3:
1a:2f:ca:43:af:b5:27:c3:7d:2a:6c:dd:38:84:c6:cb:09:c4:
96:91:49:49
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJHTvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MTFlNGZmZmM0YjhlYmIwMjY0YjNlMTNmYjNjYzQ3NjZmM2E4YTE0MB4XDTIyMDEx
NzA5NTY1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA1OGEzZTc0YjI2
YjQ0Y2RiNDE2NTBlMjNmNzBkZDFjMTFlNDIxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh4pvA3myYFR7k9sf8jTc3vLUEQT2KYhZbJHqqkqIfjzXbl
YX4dcLv4Xbk6MDsuVJHForXw1hiRxwk4DaMJgIwiHy6wMg6XOuYZqPie41sNDUjE
UzS/AZf7f6c44fYVzjQFgp70Cq+INTYPRWoA5QYzq2X61/DuxyUrI9lhO7lP/9qF
zAeRcvQitMz3njwzWUMC3+NLRFhQtZeIbYeau7sn1jxB12d86yYbdJGXUERhfNF0
L1U46xOd0K9zhbh1oq4eFv71d2WDCsIIWj4mNKgCVyv8yRZOd930Z5Rpj+6OAQK7
CM9EQndUsFRnLFsoffWJPcLNlupsF0Hp+FNIZCECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTAWKPnSya0TNtBZQ4j9w3RwR5CFjAfBgNVHSMEGDAWgBQBHk//xLjrsCZL
PhP7PMR2bzqKFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FSNVBfOFM0NjdBbVN6NFQtenpFZG04NmloUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvMTRkZjQ4LWUxNjQtNDBhMC1iMDc3LTMwYzFkZjkyNjhjYy8x
L3dGaWo1MHNtdEV6YlFXVU9JX2NOMGNFZVFoWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
MTRkZjQ4LWUxNjQtNDBhMC1iMDc3LTMwYzFkZjkyNjhjYy8xL0FSNVBfOFM0NjdB
bVN6NFQtenpFZG04NmloUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITfTANBgkqhkiG9w0BAQsFAAOC
AQEAQQIlrRokYDGrmRsoaoK5KSxamWFaswDysg81vU9ZkUqWsno6qBqdAMRH7/f3
gQlCgiHLwlRh7WKVN1/vuX0gRNMbvbEFmQSfa7/Urd2qo2gxbkz8CfxZ0YJw179w
DLY4kMGup95LpDhxQbXQpKHt+sfyVg7wolygVmQdBunfrkgDIHKoYRdvXdHXtgHB
HxQSCp2q3HvvftUL0Me+Z9MHtRaITtQdgykp5OhWROVuWh0+ybPpFAE0b2MYdGM9
y7pNrV7XfGiT6nT88g8/S68bFeVAQxgxsInrD2DuvHa+6TV8o4zBY9sZoFHzGi/K
Q6+1J8N9KmzdOITGywnElpFJSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:25 2024 by rpki-client on console-ams.rpki-client.org