Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/49pkED-ved5HYr047agvxaO8u8w.roa
File: 49pkED-ved5HYr047agvxaO8u8w.roa (raw, json)
Hash identifier: DpKpwzAadKHk6oHkXcCfZfk6ro0aQS6ir22MI4Lw5Bk=
Subject key identifier: E3:DA:64:10:3F:AF:79:DE:47:62:BD:38:ED:A8:2F:C5:A3:BC:BB:CC
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018C1EDF578E9AEEEEAB370CE86E4750BB73
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/49pkED-ved5HYr047agvxaO8u8w.roa
Signing time: Thu 30 Nov 2023 06:16:42 +0000
ROA not before: Thu 30 Nov 2023 06:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:df:57:8e:9a:ee:ee:ab:37:0c:e8:6e:47:50:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Nov 30 06:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3da64103faf79de4762bd38eda82fc5a3bcbbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:8f:af:36:77:6e:83:d7:86:5b:ae:50:2e:
07:28:1e:29:94:6a:5a:3c:7d:b0:2e:54:02:2f:27:
94:87:f1:2e:ff:4a:25:e2:2f:6a:df:82:f1:0c:5a:
ca:ef:21:93:e3:98:e9:35:ea:53:ab:1b:e7:40:4f:
af:f4:80:b4:90:6f:53:95:45:bd:cd:9f:9c:96:45:
09:4d:30:af:e6:36:90:9b:b2:02:31:f0:58:1b:8d:
0e:32:e6:59:81:2b:86:76:83:cc:61:69:f5:9c:d7:
3a:4b:9d:3b:78:fd:21:cf:ee:08:fd:d5:58:d7:f0:
bf:30:00:88:a9:15:84:81:03:5b:d6:1d:a3:f8:3d:
c3:a4:d9:74:46:dc:61:e9:4f:cc:7b:8c:17:35:5c:
9b:a8:52:a1:b1:66:0d:5d:59:53:a9:d7:00:39:65:
9f:27:0c:3b:9e:eb:88:d2:ed:91:f2:84:93:78:8b:
05:77:a3:b9:33:92:ea:29:3b:0b:46:c5:e0:e5:93:
4e:e1:c5:b4:e4:3e:aa:87:08:7b:80:ba:49:eb:9f:
51:52:65:05:81:f1:2c:5e:71:af:e8:db:49:85:5a:
e4:2b:46:40:40:b9:a8:dd:f4:e1:48:a4:fc:49:ed:
82:df:b2:e5:9b:25:59:76:ae:aa:e5:93:b2:58:df:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:64:10:3F:AF:79:DE:47:62:BD:38:ED:A8:2F:C5:A3:BC:BB:CC
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/49pkED-ved5HYr047agvxaO8u8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4c:89:a5:71:79:49:6e:1b:f8:c1:de:54:06:c7:5a:51:8f:
28:98:d8:94:8d:7c:c5:e7:4d:81:20:42:fd:08:ec:13:24:fe:
d4:23:d7:66:e9:8c:52:65:0e:05:46:78:99:a2:64:c9:81:a7:
8e:83:f3:a3:75:07:2a:91:1f:ef:72:df:5f:81:62:bf:73:22:
0d:69:cb:2d:38:3c:49:71:7a:fd:d4:fb:96:cd:c4:aa:d3:37:
ad:09:3b:fb:2d:e3:27:42:d5:ec:cc:62:92:0b:07:eb:4e:9a:
ca:ac:ba:13:9a:a6:d8:a0:70:57:04:f5:5b:c2:a1:f6:84:0c:
57:50:a0:a1:e9:b7:a5:fc:6b:19:7f:3a:2f:99:5d:15:aa:d0:
85:64:dc:35:b7:f2:e6:e2:a6:97:71:c2:9c:ea:1d:68:40:d6:
ad:90:ff:07:29:f2:f6:4a:33:8f:d6:d3:66:f8:5b:b5:1e:4b:
58:56:6d:21:f1:3c:59:21:80:48:dd:53:3b:85:74:c9:c7:91:
bd:78:37:06:87:e0:ab:9b:35:13:9d:bc:b0:8d:2d:04:05:c1:
b8:45:40:e4:d8:b9:0e:67:cb:51:dc:35:34:1d:00:82:3d:f1:
b2:1b:72:bf:b6:be:49:75:1a:e1:37:bb:de:58:04:c5:71:03:
ab:e4:7b:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwe31eOmu7uqzcM6G5HULtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjc2YjFmMDRhYTJjZDRmM2NkMjU2ODMxMGVjMTQxNTYz
YjkyNDMwHhcNMjMxMTMwMDYxNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2RhNjQxMDNmYWY3OWRlNDc2MmJkMzhlZGE4MmZjNWEzYmNiYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKSPrzZ3boPXhluuUC4HKB4plGpa
PH2wLlQCLyeUh/Eu/0ol4i9q34LxDFrK7yGT45jpNepTqxvnQE+v9IC0kG9TlUW9
zZ+clkUJTTCv5jaQm7ICMfBYG40OMuZZgSuGdoPMYWn1nNc6S507eP0hz+4I/dVY
1/C/MACIqRWEgQNb1h2j+D3DpNl0Rtxh6U/Me4wXNVybqFKhsWYNXVlTqdcAOWWf
Jww7nuuI0u2R8oSTeIsFd6O5M5LqKTsLRsXg5ZNO4cW05D6qhwh7gLpJ659RUmUF
gfEsXnGv6NtJhVrkK0ZAQLmo3fThSKT8Se2C37LlmyVZdq6q5ZOyWN91hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPaZBA/r3neR2K9OO2oL8WjvLvMMB8GA1UdIwQY
MBaAFA1nax8EqizU880laDEOwUFWO5JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdkckh3U3FMTlR6elNWb01RN0JRVlk3a2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZWJjY2QtOGQxZC00NmNlLThkOTgt
ZjAwNDMxMWQ0NTcwLzEvNDlwa0VELXZlZDVIWXIwNDdhZ3Z4YU84dTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZWJjY2QtOGQxZC00NmNlLThkOTgtZjAwNDMxMWQ0NTcw
LzEvRFdkckh3U3FMTlR6elNWb01RN0JRVlk3a2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJzMA0G
CSqGSIb3DQEBCwUAA4IBAQBHTImlcXlJbhv4wd5UBsdaUY8omNiUjXzF502BIEL9
COwTJP7UI9dm6YxSZQ4FRniZomTJgaeOg/OjdQcqkR/vct9fgWK/cyINacstODxJ
cXr91PuWzcSq0zetCTv7LeMnQtXszGKSCwfrTprKrLoTmqbYoHBXBPVbwqH2hAxX
UKCh6bel/GsZfzovmV0VqtCFZNw1t/Lm4qaXccKc6h1oQNatkP8HKfL2SjOP1tNm
+Fu1HktYVm0h8TxZIYBI3VM7hXTJx5G9eDcGh+CrmzUTnbywjS0EBcG4RUDk2LkO
Z8tR3DU0HQCCPfGyG3K/tr5JdRrhN7veWATFcQOr5HvW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:26 2024 by rpki-client on console-ams.rpki-client.org