Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/iOoq4kg3hkkwLrEhV4WesKPtKS0.roa
File: iOoq4kg3hkkwLrEhV4WesKPtKS0.roa (raw, json)
Hash identifier: jrDRTWhVtuIXcXMk+sms8ddb06Fbi+rb2596ql8Umvs=
Subject key identifier: 88:EA:2A:E2:48:37:86:49:30:2E:B1:21:57:85:9E:B0:A3:ED:29:2D
Certificate issuer: /CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Certificate serial: 0188208677F1470E9DF759A1F9665C208EE0
Authority key identifier: 1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/iOoq4kg3hkkwLrEhV4WesKPtKS0.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:77:f1:47:0e:9d:f7:59:a1:f9:66:5c:20:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ea2ae248378649302eb12157859eb0a3ed292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:4f:29:6d:08:4c:66:89:2b:7a:9d:7f:5a:
a8:17:ea:7e:e4:07:53:36:1d:b8:51:6d:24:7f:7f:
31:18:b3:ff:f9:db:be:9a:15:eb:53:b8:eb:c7:90:
15:fd:1d:a7:8b:7c:4c:f1:47:8b:48:3b:ce:64:32:
14:d0:38:81:f9:2a:f6:ce:03:cc:33:8d:79:d5:09:
fb:de:fd:76:c3:e0:77:c9:44:5b:2c:fa:c9:51:01:
ac:73:be:b4:5e:17:ac:31:b7:be:63:7a:f0:d6:c0:
45:80:54:17:72:1b:99:05:ef:24:bc:9b:63:7b:6e:
ec:c5:eb:7a:51:43:c2:4c:c4:8d:b6:00:a4:67:4d:
4b:a4:bf:5e:dc:d2:af:f2:88:d8:b5:36:fe:d0:09:
9a:d2:9a:a5:e2:66:28:8b:82:0a:88:09:a8:90:cb:
19:7b:61:c1:01:45:79:91:ff:46:61:5f:59:bb:44:
0b:c9:90:71:6f:ac:b8:92:6f:99:32:f8:bb:88:25:
3c:e1:11:67:9e:94:e9:47:2c:30:11:12:4d:13:70:
8a:d5:19:5c:8b:aa:89:06:30:98:8f:6d:71:ed:0f:
74:e4:8a:eb:43:26:4c:0e:31:45:df:7c:a0:9c:e9:
55:8e:0d:41:db:0c:9d:8f:63:2b:3a:9a:60:a5:e3:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:2A:E2:48:37:86:49:30:2E:B1:21:57:85:9E:B0:A3:ED:29:2D
X509v3 Authority Key Identifier:
keyid:1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/iOoq4kg3hkkwLrEhV4WesKPtKS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:88:19:f7:6e:2b:5f:f5:57:ef:ef:00:44:eb:0a:b9:65:79:
29:28:14:8c:0b:5a:91:93:21:2f:0b:3d:77:55:f3:55:c5:31:
5e:a5:1c:dd:26:d4:bd:9e:19:7c:d5:ee:cc:f0:50:ac:50:3a:
48:60:17:9c:c0:d9:a7:51:73:ef:09:c1:02:d7:47:3f:aa:9c:
1c:aa:09:9f:09:21:1a:97:a5:25:eb:50:cf:a1:91:5c:5a:1d:
95:0f:08:e7:54:c8:72:5f:35:93:8a:44:e3:8c:1b:a9:4b:38:
10:03:24:f5:c4:c3:79:56:f7:ca:a6:54:d2:c3:4d:89:06:63:
cb:3f:97:1b:b3:bf:c3:6a:39:2a:7b:c8:a7:11:17:03:41:82:
a9:92:45:e7:83:66:e9:71:0d:34:75:8c:83:3c:4b:25:26:b9:
4e:22:2e:e0:fc:4a:34:d0:e0:f0:b1:3f:18:6a:2d:17:37:5b:
30:5d:d5:f8:89:d6:83:f5:28:84:32:ab:52:53:d1:46:50:ca:
1f:66:d0:3d:f4:ff:9b:b8:a3:b9:3f:69:80:29:85:34:80:d4:
5b:6b:4c:8a:95:c1:84:82:f9:e0:7a:52:06:94:1f:ee:e1:46:
2f:ec:e6:a5:03:cf:9d:3f:ad:25:f8:4f:39:24:55:95:7d:8f:
7b:f3:1e:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnfxRw6d91mh+WZcII7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU5YzkyNmNiM2E3Yjg4NjFlYWFjNzAxNDBhNTQ5ZjFm
NDE2MTAwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGVhMmFlMjQ4Mzc4NjQ5MzAyZWIxMjE1Nzg1OWViMGEzZWQyOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloJPKW0ITGaJK3qdf1qoF+p+5AdT
Nh24UW0kf38xGLP/+du+mhXrU7jrx5AV/R2ni3xM8UeLSDvOZDIU0DiB+Sr2zgPM
M4151Qn73v12w+B3yURbLPrJUQGsc760XhesMbe+Y3rw1sBFgFQXchuZBe8kvJtj
e27sxet6UUPCTMSNtgCkZ01LpL9e3NKv8ojYtTb+0Ama0pql4mYoi4IKiAmokMsZ
e2HBAUV5kf9GYV9Zu0QLyZBxb6y4km+ZMvi7iCU84RFnnpTpRywwERJNE3CK1Rlc
i6qJBjCYj21x7Q905IrrQyZMDjFF33ygnOlVjg1B2wydj2MrOppgpeMRNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjqKuJIN4ZJMC6xIVeFnrCj7SktMB8GA1UdIwQY
MBaAFB3enJJss6e4hh6qxwFApUnx9BYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ2Y2tteXpwN2lHSHFySEFVQ2xTZkgwRmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84YTczNGEtNWJlZi00MjBkLWFjZmMt
YzA4ZjUyZmE0ZGJkLzEvaU9vcTRrZzNoa2t3THJFaFY0V2VzS1B0S1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84YTczNGEtNWJlZi00MjBkLWFjZmMtYzA4ZjUyZmE0ZGJk
LzEvSGQ2Y2tteXpwN2lHSHFySEFVQ2xTZkgwRmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMoMA0G
CSqGSIb3DQEBCwUAA4IBAQDAiBn3bitf9Vfv7wBE6wq5ZXkpKBSMC1qRkyEvCz13
VfNVxTFepRzdJtS9nhl81e7M8FCsUDpIYBecwNmnUXPvCcEC10c/qpwcqgmfCSEa
l6Ul61DPoZFcWh2VDwjnVMhyXzWTikTjjBupSzgQAyT1xMN5VvfKplTSw02JBmPL
P5cbs7/Dajkqe8inERcDQYKpkkXng2bpcQ00dYyDPEslJrlOIi7g/Eo00ODwsT8Y
ai0XN1swXdX4idaD9SiEMqtSU9FGUMofZtA99P+buKO5P2mAKYU0gNRba0yKlcGE
gvngelIGlB/u4UYv7OalA8+dP60l+E85JFWVfY978x4l
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:01 2025 by rpki-client