Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/c7FGIPkq_umY8-kF7EGwA03rlqs.roa
File: c7FGIPkq_umY8-kF7EGwA03rlqs.roa (raw, json)
Hash identifier: owf8nJCV//cnGhQUBiXxoqJ4YM9o13FFBnf6Rzw13Y0=
Subject key identifier: 73:B1:46:20:F9:2A:FE:E9:98:F3:E9:05:EC:41:B0:03:4D:EB:96:AB
Certificate issuer: /CN=a1234bb888ec5734f579747455363171eefb1a43
Certificate serial: 01F548CB
Authority key identifier: A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/c7FGIPkq_umY8-kF7EGwA03rlqs.roa
Signing time: Thu 23 Jun 2022 06:37:32 +0000
ROA not before: Thu 23 Jun 2022 06:37:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 146.19.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32852171 (0x1f548cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1234bb888ec5734f579747455363171eefb1a43
Validity
Not Before: Jun 23 06:37:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73b14620f92afee998f3e905ec41b0034deb96ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:a4:c7:4b:88:c3:71:4a:fa:77:14:8d:2c:
e1:98:b3:ee:ce:61:5c:58:c3:c8:75:84:02:ab:cd:
af:14:bb:ad:0e:87:8d:de:82:2f:d6:fb:ba:b5:23:
6e:58:93:b0:d0:b4:6d:28:a3:b6:37:c0:ae:0f:ce:
50:68:19:a4:d4:4b:69:c1:63:5d:28:31:d0:b7:bd:
d0:93:f1:10:bb:e2:bf:1d:10:40:cd:50:12:9a:29:
c2:b6:63:d2:13:cb:e3:a1:d0:03:a5:b6:87:9d:ab:
23:1f:65:3f:bb:e0:44:3e:aa:38:7c:c8:55:8c:b8:
a3:03:a1:f1:f5:6f:4a:9e:74:1a:38:9c:d2:11:7f:
da:f1:0f:36:74:17:8e:87:82:98:52:e8:f0:35:27:
e1:7a:d6:3b:22:c4:de:e1:ee:e4:f1:5f:59:67:c5:
e4:70:2c:ef:99:49:2e:66:4d:59:c0:5b:75:d2:00:
35:31:25:85:7d:53:61:95:0b:63:05:b1:31:1c:ca:
74:79:6f:66:72:ce:90:be:ed:ca:10:e2:11:22:d8:
aa:4a:c9:24:60:0f:7c:1b:f8:e7:fc:e0:f6:46:c7:
d4:44:da:85:99:e3:28:d0:e5:df:f0:e4:74:ea:2b:
74:88:5f:30:95:36:7e:8c:12:78:e7:67:ab:e7:03:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:46:20:F9:2A:FE:E9:98:F3:E9:05:EC:41:B0:03:4D:EB:96:AB
X509v3 Authority Key Identifier:
keyid:A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/c7FGIPkq_umY8-kF7EGwA03rlqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.237.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5d:f1:a3:df:1d:44:13:a4:be:41:cf:de:37:11:04:80:59:
ec:f5:3e:1b:1f:eb:29:3b:21:ad:62:86:d6:85:b1:4a:bb:e4:
37:eb:34:78:ae:c5:fa:d9:c3:50:54:f2:bd:b4:95:f3:0d:26:
4d:2a:20:98:65:4a:2a:52:52:63:b0:64:82:b6:c3:76:10:2b:
88:eb:4f:3a:6e:df:13:e2:f4:12:c7:48:25:a0:1e:1c:db:8f:
71:2a:7a:77:f8:c8:6f:28:26:17:f7:a8:6a:f4:92:f2:68:84:
10:12:0d:a6:c9:c3:67:ec:75:52:3b:aa:c0:50:c3:6c:c4:1e:
90:4a:81:7d:95:a6:66:e4:ce:da:94:c5:e8:95:7d:d2:30:b0:
0d:8d:0d:80:e9:77:c0:55:ab:4c:71:00:5f:80:dc:bc:66:aa:
93:c3:c2:7e:d2:1e:1b:47:1b:51:64:7a:77:e6:15:91:5d:78:
43:fd:1b:96:73:79:1b:f9:74:5f:ed:bd:00:a7:95:1c:bd:63:
56:bd:35:1d:9e:14:6f:58:91:fc:79:e3:5d:08:38:50:17:81:
61:27:9e:90:1b:69:57:6a:c9:aa:0c:3e:96:b6:22:63:7b:7e:
e0:1d:ef:10:2b:f6:cc:ba:c4:9e:e1:7e:34:e0:e0:87:68:50:
13:76:a1:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAfVIyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MTIzNGJiODg4ZWM1NzM0ZjU3OTc0NzQ1NTM2MzE3MWVlZmIxYTQzMB4XDTIyMDYy
MzA2MzczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzNiMTQ2MjBmOTJh
ZmVlOTk4ZjNlOTA1ZWM0MWIwMDM0ZGViOTZhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOipMdLiMNxSvp3FI0s4Ziz7s5hXFjDyHWEAqvNrxS7rQ6H
jd6CL9b7urUjbliTsNC0bSijtjfArg/OUGgZpNRLacFjXSgx0Le90JPxELvivx0Q
QM1QEpopwrZj0hPL46HQA6W2h52rIx9lP7vgRD6qOHzIVYy4owOh8fVvSp50Gjic
0hF/2vEPNnQXjoeCmFLo8DUn4XrWOyLE3uHu5PFfWWfF5HAs75lJLmZNWcBbddIA
NTElhX1TYZULYwWxMRzKdHlvZnLOkL7tyhDiESLYqkrJJGAPfBv45/zg9kbH1ETa
hZnjKNDl3/DkdOordIhfMJU2fowSeOdnq+cDR/sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRzsUYg+Sr+6Zjz6QXsQbADTeuWqzAfBgNVHSMEGDAWgBShI0u4iOxXNPV5
dHRVNjFx7vsaQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29TTkx1SWpzVnpUMWVYUjBWVFl4Y2U3N0drTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvNTAxYWRhLTdjMzAtNDUwMS04MTExLTljZWIwNzBjN2UwNS8x
L2M3RkdJUGtxX3VtWTgta0Y3RUd3QTAzcmxxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
NTAxYWRhLTdjMzAtNDUwMS04MTExLTljZWIwNzBjN2UwNS8xL29TTkx1SWpzVnpU
MWVYUjBWVFl4Y2U3N0drTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT7TANBgkqhkiG9w0BAQsFAAOC
AQEAVF3xo98dRBOkvkHP3jcRBIBZ7PU+Gx/rKTshrWKG1oWxSrvkN+s0eK7F+tnD
UFTyvbSV8w0mTSogmGVKKlJSY7BkgrbDdhAriOtPOm7fE+L0EsdIJaAeHNuPcSp6
d/jIbygmF/eoavSS8miEEBINpsnDZ+x1UjuqwFDDbMQekEqBfZWmZuTO2pTF6JV9
0jCwDY0NgOl3wFWrTHEAX4DcvGaqk8PCftIeG0cbUWR6d+YVkV14Q/0blnN5G/l0
X+29AKeVHL1jVr01HZ4Ub1iR/HnjXQg4UBeBYSeekBtpV2rJqgw+lrYiY3t+4B3v
ECv2zLrEnuF+NODgh2hQE3ahow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org