Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a535d4-e038-40ba-98c1-1c5c9973b128/1/gTvIb7eteyLtwGDo5uSqWdH97aM.roa
File: gTvIb7eteyLtwGDo5uSqWdH97aM.roa (raw, json)
Hash identifier: tON9hG2ffqSrRBj0oJy3Kx/F1lyozEUVpAJxvXs4MqY=
Subject key identifier: 81:3B:C8:6F:B7:AD:7B:22:ED:C0:60:E8:E6:E4:AA:59:D1:FD:ED:A3
Certificate issuer: /CN=537e9c6cd5b64e6342c53891faa742adf0a2193c
Certificate serial: 92833C
Authority key identifier: 53:7E:9C:6C:D5:B6:4E:63:42:C5:38:91:FA:A7:42:AD:F0:A2:19:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U36cbNW2TmNCxTiR-qdCrfCiGTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a535d4-e038-40ba-98c1-1c5c9973b128/1/gTvIb7eteyLtwGDo5uSqWdH97aM.roa
Signing time: Sat 01 Jan 2022 00:57:49 +0000
ROA not before: Sat 01 Jan 2022 00:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 146.255.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9601852 (0x92833c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537e9c6cd5b64e6342c53891faa742adf0a2193c
Validity
Not Before: Jan 1 00:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=813bc86fb7ad7b22edc060e8e6e4aa59d1fdeda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:d4:b7:76:d2:d6:35:2f:4c:a7:e0:a6:1a:
e6:21:45:0f:a9:0b:5d:9a:0d:ce:63:4c:fb:16:cb:
e8:ee:13:3e:a7:82:5e:3e:2a:dd:6a:f0:38:03:b9:
b7:98:35:9a:8f:ae:7b:44:d2:27:b7:5e:69:77:b6:
b0:2f:53:cb:2a:28:18:f7:fa:95:52:b3:f6:b2:dc:
78:95:59:9e:bc:81:15:cb:b5:2c:82:56:db:42:fe:
16:7b:2d:3f:1b:2a:c9:f4:70:26:ba:45:18:77:75:
9b:10:df:72:6b:b8:54:4d:38:f6:71:29:0e:82:2d:
8a:bd:8b:4c:41:68:22:e0:82:1f:0a:cd:8f:75:38:
4c:d5:f7:71:de:30:8a:da:e8:3c:ce:51:13:70:01:
2f:d5:71:47:50:76:5d:92:37:81:6b:55:b7:aa:be:
f9:93:49:ab:ec:65:fa:c3:b4:26:67:15:a4:e7:26:
0d:ac:5f:ea:79:9c:7b:cf:44:0d:c6:2d:73:4e:bf:
b6:eb:1f:37:08:c4:90:ec:79:9c:d3:2b:72:5d:d8:
94:52:43:65:bd:46:71:e3:d9:53:bf:1c:06:2d:fb:
30:54:69:30:61:01:3b:a4:c8:3b:ba:e7:02:45:a9:
c9:11:31:38:38:2f:b8:5f:c7:8d:0d:3d:76:64:01:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:C8:6F:B7:AD:7B:22:ED:C0:60:E8:E6:E4:AA:59:D1:FD:ED:A3
X509v3 Authority Key Identifier:
keyid:53:7E:9C:6C:D5:B6:4E:63:42:C5:38:91:FA:A7:42:AD:F0:A2:19:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U36cbNW2TmNCxTiR-qdCrfCiGTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a535d4-e038-40ba-98c1-1c5c9973b128/1/gTvIb7eteyLtwGDo5uSqWdH97aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a535d4-e038-40ba-98c1-1c5c9973b128/1/U36cbNW2TmNCxTiR-qdCrfCiGTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.187.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ed:f2:b3:54:39:5e:d7:17:99:01:84:ed:9b:c9:fc:a3:ad:
81:08:99:69:52:e5:e8:d3:25:4c:bc:90:c8:62:57:d2:9c:0a:
e2:a4:45:2b:3b:ef:3b:14:d9:5b:25:3d:d8:72:3f:51:b7:4d:
8f:53:18:a9:f0:55:09:c7:90:73:b7:f2:76:6e:8d:f9:a5:a4:
2b:5e:81:88:76:45:7f:40:00:b8:66:48:5e:ab:4d:4c:2f:9c:
61:5e:a9:1b:65:55:7c:9e:38:58:44:a1:c2:cd:24:1f:37:20:
90:1a:c8:3d:8b:11:d7:41:56:bc:aa:27:98:79:85:15:38:30:
c0:3e:c4:1e:36:a3:9e:01:1c:a4:d3:a8:6d:7f:3e:3b:d2:a7:
eb:13:62:ca:85:f2:85:5b:1f:57:94:37:15:72:9f:1b:24:15:
68:d1:d1:25:9a:ac:1a:2a:50:d7:34:c0:b6:32:e3:dd:7b:04:
66:2d:fe:64:23:40:c2:2f:9d:8a:e8:5f:12:67:aa:8b:75:0e:
c7:28:fa:61:4b:26:cc:3b:ef:33:5f:7b:aa:fd:09:aa:73:75:
45:c6:3c:00:1e:c3:15:98:83:01:e2:bb:f8:63:c9:ca:5c:82:
c2:c0:4f:bd:2d:e7:ae:6f:eb:67:ef:d8:ac:46:fb:1b:83:29:
1e:65:8d:81
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJKDPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MzdlOWM2Y2Q1YjY0ZTYzNDJjNTM4OTFmYWE3NDJhZGYwYTIxOTNjMB4XDTIyMDEw
MTAwNTc0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODEzYmM4NmZiN2Fk
N2IyMmVkYzA2MGU4ZTZlNGFhNTlkMWZkZWRhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvt1Ld20tY1L0yn4KYa5iFFD6kLXZoNzmNM+xbL6O4TPqeC
Xj4q3WrwOAO5t5g1mo+ue0TSJ7deaXe2sC9TyyooGPf6lVKz9rLceJVZnryBFcu1
LIJW20L+FnstPxsqyfRwJrpFGHd1mxDfcmu4VE049nEpDoItir2LTEFoIuCCHwrN
j3U4TNX3cd4witroPM5RE3ABL9VxR1B2XZI3gWtVt6q++ZNJq+xl+sO0JmcVpOcm
Daxf6nmce89EDcYtc06/tusfNwjEkOx5nNMrcl3YlFJDZb1GcePZU78cBi37MFRp
MGEBO6TIO7rnAkWpyRExODgvuF/HjQ09dmQBkQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSBO8hvt617Iu3AYOjm5KpZ0f3tozAfBgNVHSMEGDAWgBRTfpxs1bZOY0LF
OJH6p0Kt8KIZPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1UzNmNiTlcyVG1OQ3hUaVItcWRDcmZDaUdUdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvYTUzNWQ0LWUwMzgtNDBiYS05OGMxLTFjNWM5OTczYjEyOC8x
L2dUdkliN2V0ZXlMdHdHRG81dVNxV2RIOTdhTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
YTUzNWQ0LWUwMzgtNDBiYS05OGMxLTFjNWM5OTczYjEyOC8xL1UzNmNiTlcyVG1O
Q3hUaVItcWRDcmZDaUdUdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJL/uzANBgkqhkiG9w0BAQsFAAOC
AQEAN+3ys1Q5XtcXmQGE7ZvJ/KOtgQiZaVLl6NMlTLyQyGJX0pwK4qRFKzvvOxTZ
WyU92HI/UbdNj1MYqfBVCceQc7fydm6N+aWkK16BiHZFf0AAuGZIXqtNTC+cYV6p
G2VVfJ44WEShws0kHzcgkBrIPYsR10FWvKonmHmFFTgwwD7EHjajngEcpNOobX8+
O9Kn6xNiyoXyhVsfV5Q3FXKfGyQVaNHRJZqsGipQ1zTAtjLj3XsEZi3+ZCNAwi+d
iuhfEmeqi3UOxyj6YUsmzDvvM197qv0JqnN1RcY8AB7DFZiDAeK7+GPJylyCwsBP
vS3nrm/rZ+/YrEb7G4MpHmWNgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org