Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/L3v2YqfoV0c20leKb5x9pzlunb0.roa
File: L3v2YqfoV0c20leKb5x9pzlunb0.roa (raw, json)
Hash identifier: /hrrHqSRhL8OsYB7dMNLyJ+L8KR2m87X7hKiuuqlTTo=
Subject key identifier: 2F:7B:F6:62:A7:E8:57:47:36:D2:57:8A:6F:9C:7D:A7:39:6E:9D:BD
Certificate issuer: /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial: 0188C3F1B991C597CC27CDCEE725D153A31D
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/L3v2YqfoV0c20leKb5x9pzlunb0.roa
Signing time: Fri 16 Jun 2023 11:22:58 +0000
ROA not before: Fri 16 Jun 2023 11:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:f1:b9:91:c5:97:cc:27:cd:ce:e7:25:d1:53:a3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Validity
Not Before: Jun 16 11:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f7bf662a7e8574736d2578a6f9c7da7396e9dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:04:06:92:1b:ed:98:49:d6:e8:a9:24:51:
02:9c:80:4b:fb:be:b2:9e:87:7c:a9:ed:e2:24:35:
64:b7:e9:74:39:a1:17:97:28:b7:03:0e:d2:92:35:
45:2f:6f:8b:6a:ad:29:3e:1f:ce:bd:13:ea:58:c3:
5d:a3:e0:ce:1d:fb:fb:f9:a4:aa:fe:20:3c:82:c9:
79:da:25:44:41:14:4c:48:54:6f:bc:bd:86:6f:7d:
08:03:99:fd:fd:15:1f:fd:ab:44:54:e9:b8:8f:58:
a1:34:10:72:95:2f:42:4b:21:4b:76:2e:91:a9:6c:
de:80:2c:9b:a5:c5:5a:34:8f:b2:0e:c7:67:ca:60:
ac:e5:37:1f:f5:75:39:30:c6:cc:41:44:aa:7c:ee:
16:1d:10:74:fb:41:c0:5b:76:be:a2:94:4e:ae:6c:
4c:a5:44:e9:42:f4:9d:26:e6:35:f9:96:c4:00:f4:
af:46:37:3c:67:5c:51:cb:dd:b8:96:27:f1:63:28:
69:c0:52:5f:03:d2:59:38:b2:5f:5e:89:de:db:29:
f8:4a:4a:14:1e:50:0c:0f:b8:3a:ad:13:6c:db:f7:
db:ac:16:23:6f:9e:8b:25:bf:62:92:dd:85:d1:54:
c5:47:c7:6a:3c:a8:b7:e6:fb:cd:05:6c:fc:d1:b4:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:F6:62:A7:E8:57:47:36:D2:57:8A:6F:9C:7D:A7:39:6E:9D:BD
X509v3 Authority Key Identifier:
keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/L3v2YqfoV0c20leKb5x9pzlunb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2d:cc:a3:0e:8a:a3:81:f8:20:6a:d4:88:64:13:2f:f9:44:
57:56:4c:11:83:41:21:ce:c0:04:4d:4b:fa:37:18:39:ee:93:
a2:89:03:29:3d:25:b3:06:1f:17:a3:0b:dc:98:9f:87:47:3a:
65:be:e1:ad:40:eb:c0:8c:8b:b0:2a:0e:d8:90:eb:af:50:15:
b3:20:c5:04:88:df:5d:a5:f7:e4:bd:48:66:20:39:b5:ee:84:
8e:f9:a2:42:bb:ef:0c:4e:ae:a7:49:d6:02:7d:2c:32:4c:e5:
2b:10:df:67:71:a5:5b:a9:fe:c4:3a:6f:4d:3f:b8:78:d9:c7:
dc:0e:56:37:d8:2a:0f:34:83:87:82:e4:61:ef:94:fa:2e:f9:
79:86:6b:e0:e0:3f:de:fc:24:18:49:e4:1b:40:18:42:73:95:
8f:63:77:7d:6f:7e:77:c6:19:eb:0c:a1:55:48:3c:c0:be:d1:
c1:03:2e:d5:3a:28:d6:b7:8c:1e:5c:41:24:42:a4:b0:54:7a:
e0:12:75:72:e5:83:aa:d4:d3:49:ce:fa:83:cf:e0:fd:20:1a:
2f:4a:fb:e6:18:cf:7a:22:f0:20:ab:c2:c5:82:31:13:66:d9:
50:81:8e:95:8c:f4:5f:5c:ab:a4:37:83:20:b1:2e:c2:09:5d:
01:5f:cc:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjD8bmRxZfMJ83O5yXRU6MdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWRmY2ZiMzM1YzlkNzY4ODhkODFiNzNlY2Q4YTQwYmFm
ZWNmZmMwHhcNMjMwNjE2MTEyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjdiZjY2MmE3ZTg1NzQ3MzZkMjU3OGE2ZjljN2RhNzM5NmU5ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl40EBpIb7ZhJ1uipJFECnIBL+76y
nod8qe3iJDVkt+l0OaEXlyi3Aw7SkjVFL2+Laq0pPh/OvRPqWMNdo+DOHfv7+aSq
/iA8gsl52iVEQRRMSFRvvL2Gb30IA5n9/RUf/atEVOm4j1ihNBBylS9CSyFLdi6R
qWzegCybpcVaNI+yDsdnymCs5Tcf9XU5MMbMQUSqfO4WHRB0+0HAW3a+opROrmxM
pUTpQvSdJuY1+ZbEAPSvRjc8Z1xRy924lifxYyhpwFJfA9JZOLJfXone2yn4SkoU
HlAMD7g6rRNs2/fbrBYjb56LJb9ikt2F0VTFR8dqPKi35vvNBWz80bSfGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC979mKn6FdHNtJXim+cfac5bp29MB8GA1UdIwQY
MBaAFALt/PszXJ12iI2Btz7NikC6/s/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQt
YjE0YjdjZjcwZDJmLzEvTDN2MllxZm9WMGMyMGxlS2I1eDlwemx1bmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQtYjE0YjdjZjcwZDJm
LzEvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPMMA0G
CSqGSIb3DQEBCwUAA4IBAQB0LcyjDoqjgfggatSIZBMv+URXVkwRg0EhzsAETUv6
Nxg57pOiiQMpPSWzBh8XowvcmJ+HRzplvuGtQOvAjIuwKg7YkOuvUBWzIMUEiN9d
pffkvUhmIDm17oSO+aJCu+8MTq6nSdYCfSwyTOUrEN9ncaVbqf7EOm9NP7h42cfc
DlY32CoPNIOHguRh75T6Lvl5hmvg4D/e/CQYSeQbQBhCc5WPY3d9b353xhnrDKFV
SDzAvtHBAy7VOijWt4weXEEkQqSwVHrgEnVy5YOq1NNJzvqDz+D9IBovSvvmGM96
IvAgq8LFgjETZtlQgY6VjPRfXKukN4MgsS7CCV0BX8xG
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net