Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/cF35Cryma8QkHAoJ_JJKcyHKlPU.roa
File: cF35Cryma8QkHAoJ_JJKcyHKlPU.roa (raw, json)
Hash identifier: qh9wcc/XMGl/0YAr7imvjXJRAlWXXqFgXYC4dA6IcJY=
Subject key identifier: 70:5D:F9:0A:BC:A6:6B:C4:24:1C:0A:09:FC:92:4A:73:21:CA:94:F5
Certificate issuer: /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial: 018CC801197495E8381571C68E5C778F86CA
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/cF35Cryma8QkHAoJ_JJKcyHKlPU.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41171
IP address blocks: 146.19.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:19:74:95:e8:38:15:71:c6:8e:5c:77:8f:86:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=705df90abca66bc4241c0a09fc924a7321ca94f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:07:d4:3d:46:53:a4:a9:23:90:dd:27:c4:
d2:32:59:20:55:00:5c:39:13:4e:f3:4c:a3:81:37:
97:10:f0:17:88:6d:57:77:8a:36:78:7e:29:8a:3a:
c5:33:39:0f:a5:23:37:e3:d7:39:a7:7f:9d:a4:b5:
f1:9c:76:22:1b:40:6c:52:22:e2:be:89:66:59:44:
d1:84:91:c4:21:61:41:e7:0f:7f:7a:b8:f4:69:24:
3a:eb:16:64:d0:c9:ac:44:4d:73:51:bb:b2:0b:be:
cf:ef:08:30:fe:a7:3b:c9:b9:f3:e9:5d:25:06:12:
4e:c8:10:47:58:de:e9:3e:cc:37:79:03:3a:67:bf:
fb:77:33:02:9b:67:36:4f:2c:02:e4:4f:61:d3:3f:
4d:00:02:68:c9:c1:c2:38:ec:e5:74:dc:7d:fa:3d:
0f:c6:69:0d:65:78:67:6c:6e:17:d1:5c:3f:3d:02:
ab:af:6b:d6:1b:52:de:4a:0f:04:8d:9c:b7:f3:22:
58:d9:5e:12:f2:ec:ef:6b:5a:f4:3a:e9:d7:83:dd:
fd:c4:db:1b:ca:be:0f:7b:a6:f6:ba:da:91:58:46:
2d:78:e7:3c:2f:c7:b2:2b:77:f3:78:3f:bb:50:bb:
bd:33:07:b3:51:ae:f6:c8:19:e7:5f:ae:57:bc:98:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:F9:0A:BC:A6:6B:C4:24:1C:0A:09:FC:92:4A:73:21:CA:94:F5
X509v3 Authority Key Identifier:
keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/cF35Cryma8QkHAoJ_JJKcyHKlPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:41:78:c9:a7:3e:67:4c:88:10:f5:9d:f0:4e:c6:1f:c7:
13:50:a6:cb:94:17:40:c0:98:49:e2:45:95:93:df:8f:d0:34:
de:91:ed:df:cf:9d:c2:24:e9:77:fa:c3:c0:a6:14:ad:64:e6:
12:85:c1:7d:f5:01:10:e9:9d:53:8e:e8:98:c6:f4:c1:5b:27:
03:94:9d:b8:67:09:2d:34:36:0d:4e:3a:93:c0:ff:17:08:80:
d3:d1:5c:2c:f1:00:61:36:59:09:84:23:91:ff:0d:df:0a:ff:
11:93:3e:a3:cb:d0:d9:ef:3e:8c:03:71:02:a4:c5:a9:ad:a9:
66:46:e4:8e:2c:ea:0c:fe:3a:da:46:95:3c:0b:60:b6:2a:f2:
13:ed:01:de:79:8d:7d:a2:fe:a6:e3:a3:80:98:d9:0f:65:41:
da:06:0f:2e:1c:7b:62:4e:71:d4:85:71:ff:59:c7:d2:3d:6c:
53:09:b5:85:ad:94:cb:20:10:5d:98:90:6b:af:b6:cb:e0:70:
5c:e8:9b:1e:14:52:3d:c0:02:3a:9a:af:7c:d2:19:02:bc:5c:
69:e8:9d:8f:57:11:11:0a:7f:d9:84:d9:e9:63:25:61:de:3f:
e8:ca:e5:33:e9:ef:7f:f0:ec:e8:fc:70:79:0a:1f:3a:e4:cc:
d3:1c:c8:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIARl0leg4FXHGjlx3j4bKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzJmZjNiNTA3MzU4MDM4NjVkNTZkNTJhZGI0NWNlYTRk
NjlmOTYwHhcNMjQwMTAyMDIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDVkZjkwYWJjYTY2YmM0MjQxYzBhMDlmYzkyNGE3MzIxY2E5NGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNgH1D1GU6SpI5DdJ8TSMlkgVQBc
ORNO80yjgTeXEPAXiG1Xd4o2eH4pijrFMzkPpSM349c5p3+dpLXxnHYiG0BsUiLi
volmWUTRhJHEIWFB5w9/erj0aSQ66xZk0MmsRE1zUbuyC77P7wgw/qc7ybnz6V0l
BhJOyBBHWN7pPsw3eQM6Z7/7dzMCm2c2TywC5E9h0z9NAAJoycHCOOzldNx9+j0P
xmkNZXhnbG4X0Vw/PQKrr2vWG1LeSg8EjZy38yJY2V4S8uzva1r0OunXg939xNsb
yr4Pe6b2utqRWEYteOc8L8eyK3fzeD+7ULu9MwezUa72yBnnX65XvJhNaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBd+Qq8pmvEJBwKCfySSnMhypT1MB8GA1UdIwQY
MBaAFLbC/ztQc1gDhl1W1SrbRc6k1p+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNMX08xQnpXQU9HWFZiVkt0dEZ6cVRXbjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kNDQ3MDItNDkzMy00MzA5LTliMDMt
NmM1MmQxMDhiY2ZhLzEvY0YzNUNyeW1hOFFrSEFvSl9KSktjeUhLbFBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9kNDQ3MDItNDkzMy00MzA5LTliMDMtNmM1MmQxMDhiY2Zh
LzEvdHNMX08xQnpXQU9HWFZiVkt0dEZ6cVRXbjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPkMA0G
CSqGSIb3DQEBCwUAA4IBAQANr0F4yac+Z0yIEPWd8E7GH8cTUKbLlBdAwJhJ4kWV
k9+P0DTeke3fz53CJOl3+sPAphStZOYShcF99QEQ6Z1TjuiYxvTBWycDlJ24Zwkt
NDYNTjqTwP8XCIDT0Vws8QBhNlkJhCOR/w3fCv8Rkz6jy9DZ7z6MA3ECpMWpralm
RuSOLOoM/jraRpU8C2C2KvIT7QHeeY19ov6m46OAmNkPZUHaBg8uHHtiTnHUhXH/
WcfSPWxTCbWFrZTLIBBdmJBrr7bL4HBc6JseFFI9wAI6mq980hkCvFxp6J2PVxER
Cn/ZhNnpYyVh3j/oyuUz6e9/8Ozo/HB5Ch865MzTHMiA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:57 2024 by rpki-client on console-fra.rpki-client.org