Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c5383c-d0c4-4c19-90cb-35e14f73425c/1/1-zTH1diP8A38KDbjak86ZTk4xCY.roa
File: 1-zTH1diP8A38KDbjak86ZTk4xCY.roa (raw, json)
Hash identifier: RF3KmgaKIg/f8tu2Sg6v1kstQQPCxdKUj/wJvcItHUU=
Subject key identifier: FB:34:C7:D5:D8:8F:F0:0D:FC:28:36:E3:6A:4F:3A:65:39:38:C4:26
Certificate issuer: /CN=8e1b91d483609626138371c6550a1fcd0c057e12
Certificate serial: 01882086727D2A36CC74A1766E92C79E1236
Authority key identifier: 8E:1B:91:D4:83:60:96:26:13:83:71:C6:55:0A:1F:CD:0C:05:7E:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhuR1INgliYTg3HGVQofzQwFfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c5383c-d0c4-4c19-90cb-35e14f73425c/1/1-zTH1diP8A38KDbjak86ZTk4xCY.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 146.19.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:7d:2a:36:cc:74:a1:76:6e:92:c7:9e:12:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1b91d483609626138371c6550a1fcd0c057e12
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb34c7d5d88ff00dfc2836e36a4f3a653938c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:aa:f6:f3:bf:73:49:ca:90:58:58:c8:99:
21:46:9f:c0:99:68:4f:13:5a:9b:5f:53:76:7b:2f:
89:df:8d:8f:b7:a4:5b:65:e2:52:73:43:23:78:44:
0f:11:ee:c4:ea:6f:7c:90:4e:57:7d:cf:c7:88:c8:
c7:12:75:f6:91:93:80:f9:56:7d:d4:84:71:9c:d4:
f9:ed:b7:b4:f1:e1:15:2c:2d:36:88:77:b7:1b:8e:
06:98:90:ee:ef:80:c2:94:5e:7d:99:88:c4:9a:16:
41:88:05:64:07:4c:08:d7:c0:39:69:f9:74:0a:7b:
be:eb:55:23:78:a5:3c:10:15:48:1c:55:ea:a6:ad:
28:4a:b5:6a:86:05:bb:39:28:fa:83:6c:ad:cd:94:
a3:75:8d:80:a4:56:b1:b3:ea:c6:fa:9e:54:10:bb:
91:37:0d:6a:2c:fa:5a:03:54:bc:c7:cf:26:c4:a5:
77:d2:bf:66:ee:cb:51:24:5d:6f:5d:a8:95:c0:c9:
d6:c9:8a:0a:24:6b:2e:62:02:29:10:36:5f:36:0c:
4a:59:ad:4d:2d:d9:20:63:c2:b7:d9:22:98:55:bc:
4c:d3:0f:8d:dd:65:f7:cd:e9:36:e9:c4:be:b4:ac:
33:ea:a6:41:9b:ac:5b:80:8b:c4:1e:56:9c:ce:a6:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:C7:D5:D8:8F:F0:0D:FC:28:36:E3:6A:4F:3A:65:39:38:C4:26
X509v3 Authority Key Identifier:
keyid:8E:1B:91:D4:83:60:96:26:13:83:71:C6:55:0A:1F:CD:0C:05:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhuR1INgliYTg3HGVQofzQwFfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c5383c-d0c4-4c19-90cb-35e14f73425c/1/1-zTH1diP8A38KDbjak86ZTk4xCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c5383c-d0c4-4c19-90cb-35e14f73425c/1/jhuR1INgliYTg3HGVQofzQwFfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.151.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ca:84:0c:db:6c:70:54:36:5b:66:57:d1:50:27:47:e4:a2:
e5:2d:26:32:ab:36:fd:f2:73:d6:80:6f:2b:bd:1d:b8:f2:b1:
fe:0b:f7:8a:da:35:d4:4e:26:69:a0:be:47:ab:ad:82:33:33:
79:5e:28:59:7f:0d:98:5d:f4:ef:1c:d4:9c:f3:ab:15:97:63:
7d:80:d1:b2:83:11:48:e6:58:50:fa:21:a0:87:c2:fa:58:34:
5e:80:16:17:96:cd:04:d0:0a:1c:48:c3:cf:2d:cf:7b:73:8b:
27:ae:75:7f:4d:28:5f:c8:94:c5:3a:98:6a:ab:a8:04:5e:57:
b4:88:1e:9b:4b:4c:29:1b:81:8b:28:33:a5:dd:79:5c:fe:ec:
32:5b:97:74:f7:78:57:8f:b6:bd:69:f6:37:dd:c5:87:50:f9:
25:cd:19:00:60:3d:15:f2:9e:83:8f:22:6a:dc:0f:2b:09:8a:
7c:c8:f5:f9:23:28:7c:02:30:ce:b4:2b:a8:c0:d7:92:81:f9:
10:39:9c:98:c2:a2:59:4d:4c:78:17:42:3f:e7:54:04:2f:f4:
f3:fb:c9:38:aa:ff:f3:df:aa:63:a0:0d:44:b6:c2:de:13:80:
41:6d:b5:cc:7b:71:d7:6e:cd:a2:94:b3:98:c2:f5:f4:d4:54:
28:38:ca:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYgghnJ9KjbMdKF2bpLHnhI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWI5MWQ0ODM2MDk2MjYxMzgzNzFjNjU1MGExZmNkMGMw
NTdlMTIwHhcNMjMwNTE1MTc0NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjM0YzdkNWQ4OGZmMDBkZmMyODM2ZTM2YTRmM2E2NTM5MzhjNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUSq9vO/c0nKkFhYyJkhRp/AmWhP
E1qbX1N2ey+J342Pt6RbZeJSc0MjeEQPEe7E6m98kE5Xfc/HiMjHEnX2kZOA+VZ9
1IRxnNT57be08eEVLC02iHe3G44GmJDu74DClF59mYjEmhZBiAVkB0wI18A5afl0
Cnu+61UjeKU8EBVIHFXqpq0oSrVqhgW7OSj6g2ytzZSjdY2ApFaxs+rG+p5UELuR
Nw1qLPpaA1S8x88mxKV30r9m7stRJF1vXaiVwMnWyYoKJGsuYgIpEDZfNgxKWa1N
LdkgY8K32SKYVbxM0w+N3WX3zek26cS+tKwz6qZBm6xbgIvEHlaczqbGtQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPs0x9XYj/AN/Cg242pPOmU5OMQmMB8GA1UdIwQY
MBaAFI4bkdSDYJYmE4NxxlUKH80MBX4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh1UjFJTmdsaVlUZzNIR1ZRb2Z6UXdGZmhJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jNTM4M2MtZDBjNC00YzE5LTkwY2It
MzVlMTRmNzM0MjVjLzEvMS16VEgxZGlQOEEzOEtEYmphazg2WlRrNHhDWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvYzUzODNjLWQwYzQtNGMxOS05MGNiLTM1ZTE0ZjczNDI1
Yy8xL2podVIxSU5nbGlZVGczSEdWUW9melF3RmZoSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITlzAN
BgkqhkiG9w0BAQsFAAOCAQEAlMqEDNtscFQ2W2ZX0VAnR+Si5S0mMqs2/fJz1oBv
K70duPKx/gv3ito11E4maaC+R6utgjMzeV4oWX8NmF307xzUnPOrFZdjfYDRsoMR
SOZYUPohoIfC+lg0XoAWF5bNBNAKHEjDzy3Pe3OLJ651f00oX8iUxTqYaquoBF5X
tIgem0tMKRuBiygzpd15XP7sMluXdPd4V4+2vWn2N93Fh1D5Jc0ZAGA9FfKeg48i
atwPKwmKfMj1+SMofAIwzrQrqMDXkoH5EDmcmMKiWU1MeBdCP+dUBC/08/vJOKr/
89+qY6ANRLbC3hOAQW21zHtx127NopSzmML19NRUKDjKaA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:34 2025 by rpki-client