Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/15v4g69iNc-0prqocWTT0PxGhc0.roa
File: 15v4g69iNc-0prqocWTT0PxGhc0.roa (raw, json)
Hash identifier: z84JWxpV1tkhu6ckVAmmqJN2vKJyH2wFVeiHlLYLchA=
Subject key identifier: D7:9B:F8:83:AF:62:35:CF:B4:A6:BA:A8:71:64:D3:D0:FC:46:85:CD
Certificate issuer: /CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Certificate serial: 018572B408ABA7D60DBAA726415F518228D4
Authority key identifier: EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/15v4g69iNc-0prqocWTT0PxGhc0.roa
Signing time: Mon 02 Jan 2023 13:37:59 +0000
ROA not before: Mon 02 Jan 2023 13:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57878
IP address blocks: 146.19.243.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:08:ab:a7:d6:0d:ba:a7:26:41:5f:51:82:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Validity
Not Before: Jan 2 13:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d79bf883af6235cfb4a6baa87164d3d0fc4685cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:25:da:41:4b:0b:8b:cc:7b:a0:3b:03:7d:
9e:bb:bb:78:2b:68:35:65:58:ce:ce:55:c9:31:f6:
ef:29:ce:26:2f:f4:cf:06:7a:32:d7:7b:64:65:c2:
ba:17:23:40:c2:f8:49:c2:7c:d9:d1:67:23:9c:58:
6c:c2:b2:05:e0:0a:a2:90:4c:9a:ed:18:98:86:27:
bc:e5:8b:b3:2b:2a:65:48:5b:38:2a:d1:56:39:0f:
ac:88:e3:ff:95:bb:d9:4f:7d:1f:db:cd:39:53:f6:
29:0f:6c:ac:de:51:72:e5:29:cf:a4:cb:22:83:39:
b3:38:89:db:c5:9a:fc:a1:36:c0:52:49:ce:95:d5:
cc:8b:d0:ad:3f:d0:fb:28:68:38:06:0c:59:7f:56:
ce:76:2c:59:57:11:9f:7f:fa:05:05:37:4f:75:06:
65:ad:0b:50:14:df:e2:e4:19:81:b0:0d:9c:a2:92:
dc:ac:a2:04:b3:bd:97:1a:83:45:23:ec:2a:9d:17:
00:b5:03:85:dd:03:4b:49:7e:64:3e:ae:43:73:30:
67:be:6d:20:57:ee:91:b8:fd:3c:9e:f4:0d:22:df:
70:31:63:97:e4:c4:2c:70:bf:5c:a4:71:cc:b9:12:
c1:37:32:01:da:12:99:63:42:ca:83:2e:12:42:53:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:F8:83:AF:62:35:CF:B4:A6:BA:A8:71:64:D3:D0:FC:46:85:CD
X509v3 Authority Key Identifier:
keyid:EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/15v4g69iNc-0prqocWTT0PxGhc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
06:77:7f:b6:7f:ac:69:09:25:21:41:d7:31:95:5c:66:7f:bb:
bf:65:6f:94:34:0a:e7:02:1c:fe:5b:77:36:53:4d:87:af:03:
1e:ca:f2:82:53:1e:29:95:97:68:b5:2e:66:22:64:f7:25:88:
48:0c:95:65:32:5e:b7:38:60:2a:6a:13:fd:88:c8:d4:21:e2:
3f:35:75:79:9f:0a:8a:1b:66:96:a3:4a:33:0a:00:12:d3:48:
ee:d9:71:7a:5c:8c:a8:09:3f:1b:42:12:d5:a0:d3:62:4d:7a:
87:f3:aa:fd:cd:aa:c4:ee:8c:ef:2f:b4:49:2e:20:df:b2:73:
7e:77:d3:06:2f:b4:4b:78:ce:35:24:d2:14:e3:cb:23:5c:a0:
59:77:5b:30:c3:c2:6e:20:43:7c:06:59:64:dd:4c:c8:a0:eb:
59:4e:f6:e3:b0:2b:2f:05:7b:81:0d:72:06:b3:57:11:4f:d4:
b1:d6:9a:af:75:4d:d1:b5:ac:48:e7:8e:09:42:ac:dc:c0:47:
79:4d:f4:66:a0:bc:85:53:0c:54:92:55:38:5e:87:3b:03:f0:
9f:b9:a9:b5:c9:6f:d7:c8:c9:82:1d:6a:11:02:69:96:98:fc:
e1:e7:7a:9b:a4:6b:eb:dd:1e:62:7c:b8:6d:f4:b7:94:89:b4:
bc:32:01:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVytAirp9YNuqcmQV9RgijUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2E5ZDhhZTA2ZGIzOWQ3OGQyMWZjYjdmN2E2OWViNTgz
N2Q2NzYwHhcNMjMwMTAyMTMzNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzliZjg4M2FmNjIzNWNmYjRhNmJhYTg3MTY0ZDNkMGZjNDY4NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufQl2kFLC4vMe6A7A32eu7t4K2g1
ZVjOzlXJMfbvKc4mL/TPBnoy13tkZcK6FyNAwvhJwnzZ0WcjnFhswrIF4AqikEya
7RiYhie85YuzKyplSFs4KtFWOQ+siOP/lbvZT30f2805U/YpD2ys3lFy5SnPpMsi
gzmzOInbxZr8oTbAUknOldXMi9CtP9D7KGg4BgxZf1bOdixZVxGff/oFBTdPdQZl
rQtQFN/i5BmBsA2copLcrKIEs72XGoNFI+wqnRcAtQOF3QNLSX5kPq5DczBnvm0g
V+6RuP08nvQNIt9wMWOX5MQscL9cpHHMuRLBNzIB2hKZY0LKgy4SQlPDMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNeb+IOvYjXPtKa6qHFk09D8RoXNMB8GA1UdIwQY
MBaAFO86nYrgbbOdeNIfy396aetYN9Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pxZGl1QnRzNTE0MGhfTGYzcHA2MWczMW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDRhMWEtY2UzNy00NjZhLWIyMjYt
MTVhMjZjNzFlYzkwLzEvMTV2NGc2OWlOYy0wcHJxb2NXVFQwUHhHaGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDRhMWEtY2UzNy00NjZhLWIyMjYtMTVhMjZjNzFlYzkw
LzEvN3pxZGl1QnRzNTE0MGhfTGYzcHA2MWczMW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPzMA0G
CSqGSIb3DQEBCwUAA4IBAQAGd3+2f6xpCSUhQdcxlVxmf7u/ZW+UNArnAhz+W3c2
U02HrwMeyvKCUx4plZdotS5mImT3JYhIDJVlMl63OGAqahP9iMjUIeI/NXV5nwqK
G2aWo0ozCgAS00ju2XF6XIyoCT8bQhLVoNNiTXqH86r9zarE7ozvL7RJLiDfsnN+
d9MGL7RLeM41JNIU48sjXKBZd1sww8JuIEN8Bllk3UzIoOtZTvbjsCsvBXuBDXIG
s1cRT9Sx1pqvdU3RtaxI544JQqzcwEd5TfRmoLyFUwxUklU4Xoc7A/Cfuam1yW/X
yMmCHWoRAmmWmPzh53qbpGvr3R5ifLht9LeUibS8MgGo
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:13 2025 by rpki-client