Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/ZsUK6jwdBhny6hQSVn1apVZbq38.roa
File: ZsUK6jwdBhny6hQSVn1apVZbq38.roa (raw, json)
Hash identifier: +Az9hlbk4TSyfWdqaW07M6qBxtk+4ofkETe/Se2v2P8=
Subject key identifier: 66:C5:0A:EA:3C:1D:06:19:F2:EA:14:12:56:7D:5A:A5:56:5B:AB:7F
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 01869C2C2AC0C6E3A77ED9B1D16A960350C9
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/ZsUK6jwdBhny6hQSVn1apVZbq38.roa
Signing time: Wed 01 Mar 2023 07:56:25 +0000
ROA not before: Wed 01 Mar 2023 07:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:2c:2a:c0:c6:e3:a7:7e:d9:b1:d1:6a:96:03:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Mar 1 07:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c50aea3c1d0619f2ea1412567d5aa5565bab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:b6:79:12:da:fb:57:a3:a1:d8:71:78:3c:
45:58:e9:63:6f:81:fc:56:5b:b8:6b:0a:7a:93:f9:
ed:a4:f0:fe:47:14:b2:cd:9e:58:1d:70:ca:9d:49:
5f:bc:8c:5d:df:c7:e8:7c:cb:b5:25:66:27:17:a3:
61:bb:d0:97:a5:36:dc:b1:52:39:79:87:1a:e8:f6:
c4:09:d7:d5:31:52:c7:5f:36:72:8f:fc:14:d1:bb:
86:69:5f:5d:e4:a5:a3:74:33:bb:71:50:d0:05:af:
85:ff:68:cd:4b:69:dc:e7:46:75:8e:e8:93:df:a3:
e0:b3:e8:0c:58:52:cf:67:0f:dd:48:84:ad:90:fc:
e7:d8:2e:d8:c4:ce:22:8b:d8:57:af:5b:5e:8a:6a:
73:61:81:cc:34:b2:1a:5a:8a:96:92:9c:59:61:85:
5a:e4:c0:e1:a2:49:8f:04:d1:bf:b5:52:7b:67:34:
86:2d:f6:0c:4c:1d:81:b5:19:c0:4f:95:53:33:37:
3f:53:c7:a0:52:ef:37:dc:9a:f2:e2:0c:91:ff:d4:
57:6b:be:7e:2d:55:64:5b:28:ef:74:38:f8:d5:0f:
27:27:c3:ae:8e:06:3c:40:8c:68:62:d4:4a:66:40:
d9:e6:0f:ee:fe:9d:ff:db:58:cb:f9:01:be:71:34:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C5:0A:EA:3C:1D:06:19:F2:EA:14:12:56:7D:5A:A5:56:5B:AB:7F
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/ZsUK6jwdBhny6hQSVn1apVZbq38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f2:79:9c:19:a5:40:94:67:57:55:ff:0b:2d:1b:a1:c4:17:
8b:bf:1e:b1:a1:f8:c7:b8:59:3e:d2:b1:62:87:15:f2:9d:05:
ef:9d:b5:48:ad:4e:6d:3f:f0:cb:12:85:47:f3:20:3c:34:91:
1c:0c:14:57:c2:1e:5b:d5:87:9d:8b:2c:ee:44:c0:41:43:07:
6b:83:b9:1b:ed:15:40:d5:47:6a:6e:16:e3:54:9a:69:49:c4:
16:d5:a3:bc:08:0b:89:70:17:40:68:2b:31:f1:ce:6a:c9:3b:
58:9f:b3:71:12:7e:c7:2e:a5:e9:a9:16:11:8a:8f:52:11:42:
13:62:35:6a:c7:00:b2:3d:bb:ad:98:57:dd:18:c7:d3:71:5f:
fa:ff:73:5c:a7:47:e2:72:62:95:ad:a8:2f:71:1c:83:48:2d:
9a:93:fe:c1:80:a0:1f:67:27:63:ea:8b:01:2a:bd:f6:cc:8f:
1e:06:ec:5a:2d:db:85:b5:29:23:b0:45:4e:e1:4d:e8:70:0b:
0c:1c:af:0e:d7:8d:2a:10:f9:62:1c:86:d3:33:e4:37:6f:6d:
cc:9b:c6:3d:82:ff:a5:5a:49:1c:bc:6a:46:d4:b2:b4:55:70:
70:11:89:2a:b0:dc:ef:fb:ac:ac:67:1f:a4:c4:ba:b3:86:85:
0c:6a:04:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYacLCrAxuOnftmx0WqWA1DJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2I3YTAxZDdkYjQwMjVjOThiNDkwYjM5NTZmYTllNDZl
MWYzNjIwHhcNMjMwMzAxMDc1NjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM1MGFlYTNjMWQwNjE5ZjJlYTE0MTI1NjdkNWFhNTU2NWJhYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdm2eRLa+1ejodhxeDxFWOljb4H8
Vlu4awp6k/ntpPD+RxSyzZ5YHXDKnUlfvIxd38fofMu1JWYnF6Nhu9CXpTbcsVI5
eYca6PbECdfVMVLHXzZyj/wU0buGaV9d5KWjdDO7cVDQBa+F/2jNS2nc50Z1juiT
36Pgs+gMWFLPZw/dSIStkPzn2C7YxM4ii9hXr1teimpzYYHMNLIaWoqWkpxZYYVa
5MDhokmPBNG/tVJ7ZzSGLfYMTB2BtRnAT5VTMzc/U8egUu833Jry4gyR/9RXa75+
LVVkWyjvdDj41Q8nJ8OujgY8QIxoYtRKZkDZ5g/u/p3/21jL+QG+cTQpvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbFCuo8HQYZ8uoUElZ9WqVWW6t/MB8GA1UdIwQY
MBaAFMo7egHX20AlyYtJCzlW+p5G4fNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp0NkFkZmJRQ1hKaTBrTE9WYjZua2JoODJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MmIwYmYtNmZmZC00NTZjLTkyYzQt
NzU5NDk2Y2Y3MzgzLzEvWnNVSzZqd2RCaG55NmhRU1ZuMWFwVlpicTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MmIwYmYtNmZmZC00NTZjLTkyYzQtNzU5NDk2Y2Y3Mzgz
LzEveWp0NkFkZmJRQ1hKaTBrTE9WYjZua2JoODJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMdMA0G
CSqGSIb3DQEBCwUAA4IBAQBV8nmcGaVAlGdXVf8LLRuhxBeLvx6xofjHuFk+0rFi
hxXynQXvnbVIrU5tP/DLEoVH8yA8NJEcDBRXwh5b1YediyzuRMBBQwdrg7kb7RVA
1UdqbhbjVJppScQW1aO8CAuJcBdAaCsx8c5qyTtYn7NxEn7HLqXpqRYRio9SEUIT
YjVqxwCyPbutmFfdGMfTcV/6/3Ncp0ficmKVragvcRyDSC2ak/7BgKAfZydj6osB
Kr32zI8eBuxaLduFtSkjsEVO4U3ocAsMHK8O140qEPliHIbTM+Q3b23Mm8Y9gv+l
WkkcvGpG1LK0VXBwEYkqsNzv+6ysZx+kxLqzhoUMagT6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org